Add FAQ on Google Cloud Grant Scopes and permissions for Dekart

Author: delfrrr

content/docs/usage/google-cloud-grant-scopes-faq.md

@@ -0,0 +1,91 @@
+---
+title: "Google Cloud Grant Scopes"
+description: "What permissions am I granting to Dekart, and why are they necessary?"
+date: 2021-02-22T07:48:05+01:00
+lastmod: 2021-02-22T07:48:05+01:00
+draft: false
+menu:
+  docs:
+    parent: "usage"
+images: []
+---
+
+<p class="lead text-left jumbotron p-5">Dekart has been verified by Google’s Trust & Safety Team to be Compliant with <a href="https://developers.google.com/terms/api-services-user-data-policy#additional_requirements_for_specific_api_scopes">Google API Services User Data Policy</a> – a process <a href="https://developers.google.com/identity/protocols/oauth2/production-readiness/brand-verification">required</a> to approve our Google Authentication consent screen.</p>
+
+## What permissions is Dekart requesting, and why are they necessary?
+
+Dekart implements BigQuery passthrough authentication (OAuth 2.0 Token Pass-Through) and requests the following permissions:
+ * `https://www.googleapis.com/auth/bigquery` this scope grants Dekart the ability to create BigQuery jobs and read query results.
+ * `https://www.googleapis.com/auth/devstorage.read_write` this scope allows Dekart to store query result cache on your Google Cloud Storage bucket.
+
+Received short-lived tokens are stored in your browser's local storage. Dekart never stores tokens or query results in its backend. You can revoke token anytime by signing out of Dekart Cloud.
+
+You can analyze our codebase on [GitHub](https://github.com/dekart-xyz/dekart) or [Self-host](/self-hosted/) Dekart Cloud on your infrastructure.
+
+## Why Dekart is using .xyz domain?
+
+We chose `.xyz` domain as a reference to Cartesian (Descartes) coordinate system, where `x`, `y`, and `z` axes represent three dimensions. This domain is also used by organizations like Alphabet (Google’s parent company, hosted on abc.xyz) and others.
+
+Dekart XYZ is registered in Germany (see Dekart in [Germany Companies Registry](https://www.unternehmensregister.de/ureg/index.html;jsessionid=DA70A83D7BC84B9E249AC040755AD5D9.web04-1)), see [Impressum](https://dekart.xyz/legal/notice/) for more details.
+
+Dekart Cloud is hosted on Google Cloud Platform (GCP) in Frankfurt, Germany (europe-west3 region).
+
+## Does Dekart store my data or access sensitive company information?
+
+Dekart never stores tokens or query results in its backend. Query results are stored in your Google Cloud Storage bucket or in BigQuery temp result cache. Dekart Cloud backend stores BigQuery job IDs and query metadata, including query text, and map titles.
+
+## Can anyone at Dekart access my BigQuery datasets or Google Cloud Storage?
+
+No, nobody at Dekart can access your BigQuery datasets or Google Cloud Storage bucket. Short-lived tokens received from Google are stored in your browser's local storage and never stored on Dekart backend. Your BigQuery data is not stored or cached on Dekart backend.
+
+## Does using Dekart add extra costs to my cloud services?
+
+You are billed directly by Google Cloud for BigQuery queries you made via Dekart and storage costs for storing query results in your Google Cloud Storage bucket. You have full control over SQL queries and Dekart does not initiate any background jobs. There is no additional cost for using Dekart.
+
+## Will Dekart impact the performance of my BigQuery queries?
+
+Dekart does not modify or wrap your SQL queries and sends them as it is.
+
+## What support is available if I encounter issues with Dekart?
+
+If you have any questions or issues about Dekart Cloud, you can:
+
+  * Schedule a call with us via [Calendly](https://calendly.com/vladi-dekart/30min)
+  * Contact us in [Slack](https://slack.dekart.xyz/)
+  * Email us at [[email protected]](mailto:[email protected])
+
+<!-- If you have any questions or issues about Dekart Cloud, please contact us via email at [[email protected]](mailto:[email protected]) or via [Slack](https://slack.dekart.xyz/). -->
+
+## Read more
+
+👉 [Dekart Cloud Privacy Policy](/legal/privacy/)
+
+<!-- * **Passthrough Authentication**: Short-lived Google OAuth token is passed from your browser to Google APIs and never stored on Dekart Cloud backend.
+
+* **No User Data Storage**: Query results are stored on Google Cloud Storage bucket provided by you.
+
+* **Compliance Friendly**: We comply with [Google API Services User Data Policy](https://cloud.google.com/terms/services) and verified by Google's Trust & Safety team. -->
+
+<!-- ### What permissions am I granting to Dekart, and why are they necessary?
+
+You are granting Dekart the following scopes:
+ * `https://www.googleapis.com/auth/bigquery` this scope grants Dekart the ability to manage user data in Google BigQuery, encompassing actions like running queries, managing datasets, and configuring settings.
+ * `https://www.googleapis.com/auth/devstorage.read_write` this scope allows Dekart to read and write user data in Google Cloud Storage, enabling it to manage files and potentially other data storage elements.
+
+These permissions are necessary for Dekart to run queries and store results in your Google Cloud Storage bucket.
+
+### How will my data be used and protected?
+
+SQL queries and their results are stored in Google Cloud Storage bucket *provided by you!* We never store tokens or query results in the Dekart Cloud backend. Nobody at Dekart can access your BigQuery data or Google Cloud Storage bucket.
+
+### Can I revoke Dekart's access if I change my mind?
+
+Yes, you can revoke Dekart's access to your Google Cloud resources by signing out of Dekart Cloud. This will remove Dekart's access to your Google Cloud resources and prevent Dekart from running queries or storing results in your Google Cloud Storage bucket.
+
+### Does Dekart comply with data protection regulations?
+
+We are committed to upholding the principles of GDPR and ensuring that your data rights are respected. We also comply with [Google API Services User Data Policy](https://cloud.google.com/terms/services) and verified by Google's Trust & Safety team.
+
+### What support is available if I have issues or questions about data access?
+
+If you have any questions or issues about data access, please contact us via email at [[email protected]](mailto:[email protected]) or via [Slack](https://slack.dekart.xyz/). -->