LORTAZ

LORTAZ · Privacy

Reselling Office
privacy policy

Effective November 2, 2026

Reselling Office is an owner-operated application used by LORTAZ to manage resale content. This policy explains its Google Drive connection and how it handles item photos and related information.

1. Operator and purpose

LORTAZ operates Reselling Office for its owner’s resale business. The app organizes photos and item details, uses AI assistance to prepare research and draft content, and publishes selected Instagram content after the owner’s approval. It is not currently a service for other sellers to connect their accounts.

2. Google information accessed

The Drive API connection requests https://www.googleapis.com/auth/drive.file. It reads the signed-in account’s email address to confirm the intended account, creates and manages its own image-delivery folder and files, and reads file metadata and sharing permissions to carry out and verify delivery and cleanup. This permission is limited to files created by or specifically shared with the application; it does not grant general access to every file in Google Drive.

The app stores OAuth credentials and tokens locally so it can refresh authorized access without requesting a sign-in for every operation. It does not request Gmail, contacts, or calendar permissions.

3. Photo intake and drafting

The owner supplies item photos and details through the local office or a Google Drive folder synced to the owner’s computer. Photos used for identification and item details may be sent to the owner-configured AI provider through Hermes to generate research, listing drafts, and captions. The Drive API delivery connection is used to deliver approved images to Instagram. Reselling Office does not use Google user data to train or improve generalized AI or machine-learning models.

Original photographs, inventory details, drafts, and task records are retained in the owner’s local project and configured Drive folders. Storage-bag and seller-SKU photos are kept for internal identification and excluded from customer-facing image selections.

4. Sharing with Instagram

For a reviewed and approved Instagram post, the app uploads prepared JPEG copies to its delivery folder. It gives those copies temporary “anyone with the link” viewing access so Meta can retrieve them. Anyone who obtains a temporary image link may be able to view the image while that permission is active. The app sends the selected images, caption, and alternative text to Meta for the approved Instagram account.

The app attempts to remove public sharing after processing or a failed attempt, and verifies permission removal. It retains cleanup records and retries pending cleanup while the office is running. A network failure, stopped app, or sleeping or offline computer can delay removal. Delivered copies may remain in Google Drive privately after public access is removed. Published Instagram content remains on Instagram until separately removed there.

5. Storage and retention

Google credentials are stored in local files with access permissions restricted to the owner’s operating-system account. Delivery records include file identifiers, image hashes, sharing status, and timestamps needed to verify delivery and retry cleanup. Credentials are not included in this public website or its upload package.

The owner retains original photos, drafts, records, and private delivery copies until they choose to delete them. Revoking Google access does not itself delete local records or existing Drive copies. Google, Meta, and any configured AI provider handle information they receive under their own applicable terms and policies.

6. Access removal and deletion

The owner can stop the local app and revoke its Google authorization through Google Account connections. Before disconnecting, they can let pending cleanup finish or manually restrict sharing on delivery copies in Google Drive. They can delete retained Drive files and local office data separately, and manage or remove published posts directly on Instagram.

For a privacy or deletion request concerning information handled by LORTAZ, contact [email protected].

7. Public website

This informational website has no account registration, photo-upload form, or checkout. LORTAZ has not added advertising trackers, analytics scripts, or tracking cookies to these pages. The hosting provider may process ordinary request information, such as IP addresses and browser details, to deliver and secure the website. Links to Instagram and other services lead to sites governed by their own policies.

8. Updates and contact

This policy will be updated when the application’s data practices change. The effective date above identifies the current version. Questions can be sent to [email protected].