Rclone VPS is a personal, single-user tool used only by the person who owns the Google account that authorises it.
With the owner's permission it creates and reads files in the owner's own Google Drive (the "drive.file" permission, which only covers files the app itself creates). It does not access email, contacts, or any other Google service.
The app does not collect, sell, share, or transmit anyone's data to third parties. The only credential stored is the owner's Google authorisation token, kept in a private configuration file on the owner's own server.
There are no other users. The app is not available to the public.
The owner can revoke the app's access at any time from their Google Account security settings. This policy may be updated if the app changes.