Google API Compliance

MJ Web APP is committed to handling Google user data responsibly. This page describes how we comply with the Google API Services User Data Policy, including the Limited Use requirements that apply when accessing user data from certain Google APIs.

1. Scope of Compliance

This compliance statement covers:

• The MJ Web APP website at mjwebapp.com
• Any internal tooling we operate that integrates Google APIs
• Client-facing applications we develop that request Google user data, where MJ Web APP is the operator or processor

For applications we build but do not operate (handed over to clients), the client takes on operator responsibilities, and the application's data handling is governed by the client's own published policies.

2. Limited Use Commitments

When any application we operate accesses Google user data through Google APIs, we comply with the following:

1. Use only as needed: Google user data is used solely to provide or improve user-facing features that are prominent in the application's user experience.
2. No transfers to third parties except as necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger, acquisition or sale of assets — and only with appropriate user consent where required.
3. No use for advertising: Google user data is never used for serving advertisements, including retargeting or interest-based ads.
4. No human reading of Google user data, except: (a) with the user's affirmative consent for specific messages; (b) where strictly necessary for security purposes (e.g., investigating abuse); (c) to comply with applicable law; or (d) where the data has been aggregated and anonymized to perform internal operations.

3. Data Storage & Security

Where we do access Google user data for operated applications:

• Data is transmitted only over HTTPS/TLS.
• Access tokens and refresh tokens are stored encrypted at rest.
• Access is restricted to the minimum staff required, under role-based controls.
• Tokens are revoked promptly when no longer needed or upon user request.

4. User Rights

You may at any time:

• Revoke access granted to any application we operate via your Google Account permissions page: myaccount.google.com/permissions.
• Request deletion of any Google user data we hold by emailing support@mjwebapp.com; we will respond within 30 days.
• Request a summary of what Google API scopes we requested and what data was accessed.

5. Current Status

As of the "Last Updated" date above, MJ Web APP's own website does not request OAuth permissions from Google Accounts and does not store any Google user data. We use only public Google services (Fonts and Maps embed) that do not access account-level data. See our Google API Disclosure for details on what is loaded.

6. Changes & Verification

If the scope of our Google API usage changes — for instance, if we launch a feature that requires Google Sign-In — we will: (a) update this page; (b) update the Disclosure page; (c) update our Privacy Policy with the relevant data-handling details; and (d) seek any additional verifications required by Google (such as the OAuth security assessment for sensitive scopes).

7. Contact

For questions about our Google API compliance, contact:
Email: support@mjwebapp.com
Phone: +91 74282 32224