OPTIMAL FLOW AGENCY LLC

OFA Private Backups: privacy notice

Updated October 9, 2026. This notice describes the founder-operated backup application, not a client's customer messaging system or the general OFA inquiry website.

Operator and contact

Optimal Flow Agency LLC is an Arkansas LLC, as confirmed by its founder. Questions and privacy requests: Deallomcconnell@gmail.com. Do not email passwords, access tokens, recovery keys or customer records.

Google access and purpose

The founder authorizes the application with the limited https://www.googleapis.com/auth/drive.file scope. The API scope permits access to files created by the app or explicitly opened/shared with it; the backup implementation is restricted to the intended app-created private backup folder and encrypted snapshots. The application reads file/folder metadata and permission/owner information to check the destination, creates encrypted backup files, and downloads encrypted contents to verify them. It does not request Gmail, calendar, contacts or whole-Drive permissions and does not ask visitors or clients to authorize their Google accounts.

Google information is used only to authorize, store, verify and administer OFA's backups. OFA does not use it for advertising, sell it, or use it to train generalized artificial-intelligence models. OFA Private Backups’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Data processed and stored

Google processes the founder's authorization, account information, encrypted files and associated file/technical metadata. Folder/file identifiers, ownership and permission information, sizes and fingerprints support verification. The source snapshot contains OFA's inquiry records and operating/delivery ledgers; the cloud job encrypts it before upload. A public encryption recipient is stored in the sender. The private recovery key and password stay with the owner and are not included in backups or public pages. Encryption does not conceal all account/file metadata.

The Google runtime connection, including its refresh credential, is stored as an encrypted Cloudflare secret for the separate backup worker. It is used server-side, not exposed through this public site. Local authorization/recovery helpers are temporary and owner-operated; private inputs are not intentionally written to request logs or public artifacts. Private backup-control records contain run status, timestamps, file/folder identifiers, ciphertext size and fingerprint rather than decrypted inquiry payloads.

Providers and access

Cloudflare operates the database, backup runtime and encrypted secret storage. Google Drive stores the encrypted copies. The founder controls the accounts and may authorize narrowly scoped operational support; private keys/passwords are not provided to that support. No public endpoint exposes inquiry records or backups. Provider-managed processing, logs and recovery copies are subject to provider settings and policies. See Cloudflare’s privacy policy and Google’s privacy policy. Providers may process information outside Arkansas or the United States.

Retention, revocation and deletion

No recurring backup or automatic Drive-backup expiry is enabled. Existing commissioning copies are retained until reviewed and deleted through authorized access. A production retention and deletion-reconciliation procedure must be accepted before collecting real prospect data; removing a live record does not erase an older encrypted copy, and restoration must not silently undo a valid deletion.

The founder can stop the job and revoke its access through Google account connections. Revocation prevents further authorized API use but does not itself delete existing Drive copies or provider-managed recovery records. Runtime credentials and copies require separate authorized removal and applicable recovery/retention handling. Privacy requests may be sent to the contact above; applicable legal rights and deadlines still apply, with reasonable identity verification where needed.

This public information site

Cloudflare hosting may process network address, browser/request information and operational logs. These pages contain no forms, advertising pixels, marketing analytics, account connection flow or backup downloads. Contacting OFA by email separately sends your message and addressing information to email providers. This notice is not a blanket legal or security certification; material changes require an accurate updated disclosure and any required additional permission.