1. Operator and purpose
OnyxBell, LLC, an Ohio limited liability company in the United States, operates Vorelia Backup Recovery. It is a separate internal utility for the Founder-controlled Google account, used for encrypted database backup storage and recovery verification.
It is not customer Google Sign-In, a Gmail or Calendar integration, a public coaching application or a customer backup service. The informational website does not initiate Google authorization or execute backups. For ordinary website visits and enquiries, see the Vorelia Website Privacy Policy.
Only an authorized operator may use the utility under the approved recovery procedure and Google's applicable terms. The operator is responsible for protecting credentials, using the approved destination, reviewing verification results and maintaining recovery dependencies.
Contact contact@getvorelia.com with questions. Do not send credentials, recovery material or private client records.
2. Google access and information
The utility requests only Google Drive's drive.file permission for files created by or explicitly selected for use with it, including the authorized destination. It does not request general access to every file in Drive. Use is limited to the Founder-authorized backup workflow.
To verify the account, destination and transfer, the utility processes:
- The Founder's Google account email address and permission identifier.
- File and folder identifiers, names, parent relationships and types.
- Ownership, permission and capability information.
- File sizes and integrity hashes.
- Storage-quota and usage information.
Google authorization codes, access tokens and related authorization material are handled in short-lived process memory in the current manual workflow. Durable offline authorization, persistent refresh-token custody and scheduled unattended backups are not active.
3. Backup contents and private testing records
The separate private coaching application uses Supabase for its database and account authentication, and Vercel for protected hosting. Authentication and account-recovery emails can contain operator or approved test-account identifiers. The public informational website does not connect to that database or grant access to the private application.
Controlled coaching records used in testing are fictional. Private application authentication and backups can nevertheless include real operator or approved test-account identifiers, including email addresses. Those records are not anonymous.
Application record categories include lead and client contact details, coaching dates, notes, check-in responses and follow-up history. Questions may concern nutrition, energy, stress, sleep and recovery. Free-text responses can contain additional sensitive information. This describes private application records and possible backup contents, not information requested from ordinary website visitors or an available customer service.
4. Encryption, transfers and verification
Database archives and recovery catalogs are encrypted locally before upload. A separate, unencrypted minimal transfer manifest contains recovery-point identifiers, timestamps, filenames, sizes and integrity hashes. Those readable details are metadata, not plaintext database records.
Backup contents can include private testing business records, authentication records and recovery metadata. Encryption does not make them anonymous. The encryption key and recovery passphrase are kept separately from uploaded database ciphertext.
Artifacts are independently downloaded and checked. Locally decrypted material is used for isolated restoration verification. Local operational reports may retain non-secret identifiers, timestamps, hashes and verification results.
5. Purposes, providers and access
Google-derived information is used to authorize the Founder, verify the destination, transfer approved encrypted artifacts, check integrity and verify recovery. It is not used for advertising, profiling, selling information or training generalized artificial-intelligence or machine-learning models.
Google provides account authorization, Drive storage and metadata services. Supabase provides the private application database and authentication services; Vercel hosts that private application and the separate informational website. The workflow runs on an authorized local Windows computer. Bitwarden supports Founder-controlled secret custody. IONOS provides business email and domain registration, not Google authorization or Drive storage.
Access and use are limited to the authorized operator and necessary provider processing for this workflow. Information may also be disclosed where required by law or needed to address security incidents and protect legal rights, subject to the applicable Google API data-use restrictions.
Vorelia Backup Recovery's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Providers may handle their own technical and security information under their applicable terms. This notice does not certify provider-wide compliance, establish contractual processor roles or promise processing in a particular country.
6. Retention and deletion
The approved backup retention policy is 30 daily, eight weekly and 12 monthly recovery points, subject to protected and held recovery-point constraints. Selections can overlap. Held snapshots, separately protected key material and the last two verified recovery points are protected by the planning rules.
Automated retention enforcement and remote deletion are not active. Existing copies require deliberate operator review. These retention selections are not a promise that a copy disappears on a fixed date.
Downloaded and decrypted recovery material is temporary verification material. Failed or uncertain cleanup requires operator review. Original encrypted recovery points and non-secret verification evidence may remain after a recovery check.
Private application records preserve issued and submitted check-ins, answers and related history through integrity protections. Requests affecting those records require review of the relevant purposes, obligations and technical constraints. No immediate or universal deletion from active records, backups or provider systems is promised.
7. Revoking Google access
The authorized Google account holder can review or revoke access through Google Account permissions. Revocation prevents future authorized access and can prevent future backups. It does not automatically delete existing files in Drive, local archives or operational reports. The operator must review those copies separately. Restoring access requires a separately authorized consent process.
8. Security, requests and changes
The workflow uses access restrictions and local encryption, but no system guarantees absolute security or successful future recovery. Privacy questions or requests about supplied information can be sent to contact@getvorelia.com. Requests are subject to appropriate identity verification, applicable obligations and technical constraints; no universal right or deadline is created by this notice.
The utility is not offered to children. Contact us if you believe a child supplied personal information so the circumstances can be reviewed.
Changes to Google access, persistent authorization, data uses, providers or service availability require review of this notice and relevant consent before the changed practice begins. The effective date identifies the version in effect.