Privacy Policy

WhoHasAccess operates the website, which provides the scan service.

This page is used to inform website visitors regarding our policies with the collection, use, and disclosure of personal information if anyone decided to use our scan service.

If you choose to use our website and scan service, then you agree to the collection and use of information in relation with this policy. The personal information that we collect are used for providing and improving the website and scan service. We will not use or share your information with anyone except as described in this Privacy Policy.

Information Collection, Use and Sharing for the Google Drive Scan

In order to scan your Google Drive account, we will require you to provide us with certain personally identifiable information through your Google account, including but not limited to your name and your email address. The information that we collect will be used to identify and notify you after the scan is completed.

Additionally you will also be required to provide access to your Google account to perform the scan. This may lead to more personally identifiable information about you and your Google Drive collaborators being provided to WhoHasAccess. Google Drive collaborators can include individuals as well as G Suite accounts.

In any case, the collected data is only used to perform the scan and improve the experience of the scan service. It is not shared with any third parties unless necessary to perform the scan service. Under no circumstances is your data collected through WhoHasAccess sold or rented to anyone.

Scan result data and access to the your Google account is deleted if the you decide to do so via the scan result page or automatically no later than 24 hours after the scan.

Log Data

We want to inform you that whenever you visit, we collect information that your browser sends to us that is called Log Data. This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser version, pages of our that you visit, the time and date of your visit, the time spent on those pages, and other statistics.

During the Google Drive scan we will also collect Log Data that is necessary to identify potential issues in the scan algorithm or its use. This Log Data may include information about your Google account and metadata about files and folders in your Google Drive.

Your Access to and Control Over Information

If you wish to download your scan result data, you can do so via the scan result page. The export includes names, email addresses and file counts of all collaborators. Scan result data and access to the your Google account is automatically deleted within 24 hours after your scan. If you wish to do so earlier, you can delete the result on the bottom of the scan result page.

On top of that you can do the following at any time by contacting us via

Third Party Cookies

Cookies are files with small amount of data that is commonly used an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer’s hard drive. We use cookies provided by trusted third parties.

This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the website and scan service, and ways that we can improve your experience. These cookies may track things such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content.

For more information on Google Analytics cookies, see the official Google Analytics page.

You can opt out of Google’s advertising tracking cookie or use a browser plugin to opt out of all Google Analytics tracking software.

We also use social media buttons on this site that allow you to share your experience with your social network after the scan. For this to work, AddThis and the participating social networks will set cookies through our site which may be used to enhance your profile on their sites or contribute to the data they hold for various purposes outlined in their respective privacy policies.

Service Providers

In order to provide the website and scan service as well as assist us in analyzing how the service is used, we employ the following third-party companies for the reasons stated:

We want to inform our you that these third parties have access to certain personal information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.


We value your trust in providing us your personal information, thus we are striving to use commercially acceptable means of protecting it. WhoHasAccess uses open standards like OAuth 2.0, official interfaces like the Google Drive API and SSL encryption for all communication in order to provide the highest level of security. The application and database are hosted on the Google Cloud Platform and therefore benefit from their strong platform security. To protect your sensitive scan result data, we will delete it and access to the your Google account within 24 hours after the scan completed.

But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.

Links to Other Sites

The website and scan service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children’s Privacy

Our Services do not address anyone under the age of 13. We do not knowingly collect personal identifiable information from children under 13. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us via so that we will be able to do necessary actions.

Change of Ownership or Business Transition

In the event of a change of ownership or other business transition, such as a merger, acquisition or sale of our assets, your information may be transferred in accordance with applicable privacy laws.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately, after they are posted on this page.

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us via