TamuOps

Privacy policy

Last updated: 16 November 2026

TamuOps is operated by Elvis Hong, Kota Kinabalu, Sabah, Malaysia ("we"). We set up and run order and back-office systems for businesses ("clients"). This policy explains what personal data our systems handle, and how we use data we receive through Google sign-in.

1. Our role

For our clients' business records (their customers' names, delivery addresses, phone numbers, orders, invoices and payments), the client decides how the data is used and we process it only on their behalf, under a written agreement and the Personal Data Protection Act 2010 (Malaysia). If you are a customer of one of our clients, contact that business first; we will help them answer you.

2. Google sign-in and Google Drive

A client signs in with Google once, so that our system can save the documents it makes (delivery orders, invoices, statements) into the client's own Google Drive.

• What we ask for: the drive.file permission only. With it, our system can create files and see or change only the files it created. It cannot read, list or change any other file in the Drive.
• What we do with it: upload the client's documents, put them in folders, and replace a document's file when it is reprinted. Nothing else.
• What we keep: the sign-in token, encrypted, on our server, and the IDs and links of the files our system made, so it can reprint them in place. We do not keep copies of other Drive content, because we cannot see it.
• What we never do: sell this data, use it for advertising, share it with anyone, or use it to train AI models.

TamuOps's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. Where data is kept

Documents are kept in the client's own Google Drive. Our system's database runs on a server we rent in the European Union (Germany), with encrypted backups. Data travels over encrypted connections. Only we can access the server.

4. How long we keep it

For as long as the client uses our service. When a client stops, we hand back their records and delete them from our server and backups within 30 days, unless the law requires us to keep them longer.

5. Removing access

A client can remove our access to their Google account at any time at myaccount.google.com/permissions. The files already in their Drive stay theirs.

6. Contact

Questions or requests about personal data: hello@tamuops.com.