App name: Coco by CocoCorp
Operator: CocoCorp (trading as COCOCORP)
Location: Midrand, Johannesburg, Gauteng, South Africa
Contact: the contact form at cococorp.tech
Effective and last updated: 27 October 2026
"Coco by CocoCorp" ("Coco") is a private assistant operated by CocoCorp, a digital and AI agency in South Africa. Coco is used by its operator to read and edit its own Google Sheets, Google Docs, Google Slides and Google Drive files. It is not a public service and is not offered to other users. This policy explains what Google user data Coco accesses, how it is used and how it is protected. Our general website privacy practices are set out in the CocoCorp website Privacy Policy.
1. What Google data Coco accesses
When the operator signs in with Google and approves access, Coco may access the following, only for the Google account that granted permission: the content and metadata of Google Sheets, Docs and Slides files, and the names, locations and sharing details of Google Drive files, as needed to find, open and edit the file the operator asks about. The exact permissions (scopes) requested are shown on the Google consent screen at sign-in.
2. How the data is used
Data accessed through Google is used only to carry out requests made by the operator, such as reading a spreadsheet, correcting a document, or updating a slide deck in place. It is not used for advertising, profiling, analytics unrelated to the request, or to train generalised artificial-intelligence or machine-learning models.
3. Sharing and disclosure
We do not sell Google user data. We do not share, rent or transfer it to third parties, except where strictly necessary to provide the requested function (for example, processing a request through the assistant's AI service provider on the operator's behalf), where required by law, or with the operator's explicit consent. Humans do not read Google user data except with the operator's consent, for security purposes, or to comply with law.
4. Storage and retention
Coco does not build a database or copy of Google files. File content is handled in memory while a request is carried out and is kept only as long as needed to complete it. Sign-in tokens are stored privately on the operator's own systems, protected from public access, and are used solely to act on the operator's behalf. Reasonable technical and organisational measures are applied to protect them from unauthorised access, loss or misuse.
5. Revoking access and deletion
Access can be withdrawn at any time through the Google Account permissions page at myaccount.google.com/permissions by removing "Coco by CocoCorp". When access is revoked, the stored tokens stop working and will be deleted. You may also contact us to request deletion of any stored tokens or related data.
6. Google API Services User Data Policy and Limited Use
Coco's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
7. POPIA
We handle personal information in line with the Protection of Personal Information Act, 2013 (POPIA): it is collected for a specific, lawful purpose, kept only as long as needed, kept secure, and not used for any other purpose. You have the right to access, correct and request deletion of your personal information, and to object to its processing. Contact us using the details above and we will respond within 30 days. You may also lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.
8. Changes to this policy
We may update this policy as Coco or the law changes. The current version will always be published on this page with a revised date.