Effective October 18, 2026. This policy explains how Pearl City Media, LLC handles Google user data when an authorized user connects PCM Sage Google, Pearl City Media’s internal operations tool. It supplements our general website privacy policy. Google’s own handling of information is described in the Google Privacy Policy.
Who uses the app
PCM Sage Google is used by authorized Pearl City Media staff accounts. A staff member, or an account owner working with Pearl City Media, connects a Google account that is owned by Pearl City Media or by a client who has authorized Pearl City Media to manage it. The app is not offered to the general public.
What we access
After you grant permission, we receive an OAuth authorization token and the email address and basic identity of the connected Google account (through the openid and userinfo.email permissions). Depending on the permissions you grant, PCM Sage Google may access the following:
- Google Workspace Admin directory: domain and administrator role information (read-only) and user accounts (view and manage).
- Google Cloud: project details, platform administration, and billing account information. Some grants are read-only (
cloud-platform.read-only,cloud-billing.readonly). - Google Analytics: account and property configuration, reporting data, and user access settings. Some grants are read-only (
analytics.readonly). - Google Search Console: site properties, verification status, and search performance data. Some grants are read-only (
webmasters.readonly). - Google Business Profile: business locations and listing information (
business.manage). - Cloud Identity: groups and group membership.
- YouTube: channel identity, video, playlist, and livestream metadata, and channel management. Some grants are read-only (
youtube.readonly). The app uses YouTube API Services.
We do not ask for or store your Google password.
How we use information
We use Google user data only to provide the app’s user-facing features for Pearl City Media staff: maintaining an inventory of the Google services, accounts, and settings that Pearl City Media manages; carrying out administration that the account owner has requested, such as adding or removing users, managing group membership, adjusting access settings, or maintaining listings and channels; and producing reports on those services for Pearl City Media and the authorizing client. We also use it to verify that requested changes took effect, troubleshoot failures, keep an audit trail, and protect the service.
Google API Services User Data Policy and Limited Use
PCM Sage Google’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide or improve the features described above.
- We do not sell Google user data.
- We do not use or transfer Google user data for advertising, including personalized or retargeted advertising.
- We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.
- We do not use Google user data to determine creditworthiness or for lending purposes.
- People view Google user data only when they are authorized Pearl City Media staff doing the inventory, administration, or reporting work the account owner requested, or when needed for security purposes or to investigate abuse, to comply with applicable law, or when the data has been aggregated and anonymized for internal operations.
Sharing
Only Pearl City Media personnel and agents approved to work on the relevant account may use authorized data. We send data to Google through its APIs when carrying out a requested action. The authorizing client and its staff may see reports and results about their own accounts. Our infrastructure and hosting providers process data only to operate and secure the service. We do not give Google user data to unrelated parties for their own purposes. We may disclose information when legally required.
Storage, security, and retention
We keep the OAuth refresh token in an access-controlled secret store (OpenBao). Access tokens are short-lived and are used only to call Google APIs. Inventory records, configuration details, and operational logs derived from the connected services may be held in our service databases. We use encrypted connections and access controls. We retain authorized data only while needed for the requested work, security, or legally required records. If authorization ends or the data is no longer needed, we remove the token and associated Google API data as described below.
Your control and deletion
You can withdraw authorization at any time by removing PCM Sage Google in your Google Account third-party connections, or by emailing [email protected] with the Google account to disconnect. For a request made to us, we revoke the app’s token and delete Google API data held under that grant as soon as possible, within seven calendar days. If you revoke access through Google, we remove the associated data as soon as we detect the revocation and within 30 calendar days. You may also request a copy or correction of information we hold about your account. We may retain records that law requires or records that no longer contain authorized Google API data.
Website information and changes
The public pages on pearlcitymedia.com may use normal website cookies and server logs as described in our general website privacy policy. PCM Sage Google does not place advertising cookies through the Google authorization flow. We will update this page if our data practices change and will seek renewed consent if a new use of Google user data is outside the scope you accepted.
Contact
For privacy questions, complaints, disconnection, or deletion requests, contact Pearl City Media, LLC at [email protected].
