SLC Unite
This Privacy Policy explains how SLC Unite, the choir operations application for St Luke's Chorale, handles information used to provide the service.
Information SLC Unite uses
SLC Unite may process choir member information such as name, email address where provided, voice or instrument, role and access permissions, event responses, participation records, app-usage records, and other information entered by authorised choir administrators.
Google user data and Google Drive
When an authorised user chooses Connect Google Drive, SLC Unite requests the limited Google Drive drive.file permission. This lets the user explicitly choose choir folders/files to share with SLC Unite through Google Picker and lets SLC Unite create and manage files it creates for the user. SLC Unite does not request permission to browse or manage the user's entire Google Drive.
Google OAuth access tokens for this limited permission are kept in the user's browser session and are not intentionally stored in Firestore as long-lived Google credentials. SLC Unite stores application metadata needed to reference choir files, such as Google Drive file IDs, filenames, links, file types, sizes, related song/event identifiers, and the SLC Unite user who uploaded the file.
How Google user data is used
Google user data is used only to provide or improve user-facing SLC Unite choir file features requested by the user. SLC Unite does not sell Google user data, does not use Google user data for advertising, and does not use Google user data to build advertising profiles.
Sharing and visibility of choir files
The choir's Google Drive library is managed by St Luke's Chorale. Where configured by the Super Admin, uploaded choir files may be set to anyone with the link can view so choir members can access them without connecting their own Google Drive account. Users should upload only content appropriate for that sharing setting.
Firebase and application data
SLC Unite uses Google Firebase services, including Authentication, Firestore and Hosting, to operate the application. Access to private application data is controlled by SLC Unite authentication, roles and Firestore security rules.
Retention and deletion
Choir application records are retained while needed for SLC Unite operations and choir administration. Authorised administrators may update or delete records according to their assigned role. Google Drive files remain subject to the choir Drive account's retention and permissions. Revoking Google authorization stops SLC Unite from using that user's Google authorization token.
Google API Services User Data Policy
SLC Unite's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Contact
For privacy questions or requests relating to SLC Unite, contact stlukeschoralemp@gmail.com.