Privacy Policy

1. Who we are

api4-shop-app is a productivity application that allows users to sign in with their Google account and manage personal information, application preferences and connected service settings.

This Privacy Policy is specifically associated with the application named api4-shop-app and the domain api4.shop.

2. What Google user data we access

When you sign in with Google, our application accesses the following Google user data:

• Your Google account unique identifier (the “sub” claim)
• Your full name
• Your email address
• Your profile picture URL
• Your locale / language preference (if provided by Google)
• OAuth 2.0 access token and refresh token issued by Google

We only request the minimum scopes necessary for authentication and basic profile information (typically openid, email, profile). We do not request access to Google Drive, Gmail, Calendar, Photos, Contacts or any other sensitive Google services.

3. How we use Google user data

We use the Google user data we access solely for the following purposes:

• To authenticate you and create/maintain your session in the Application
• To display your name, email address and profile picture inside the Application
• To save and restore your personal preferences and settings
• To provide the core user-facing functionality of the Application
• To detect and prevent fraud, abuse and security incidents
• To diagnose technical problems and improve the reliability of the Application

4. How we share, transfer or disclose Google user data

We do not sell, rent or trade Google user data.

We share or transfer Google user data only in the following limited cases:

• With Google — solely to perform authentication and to use the OAuth scopes you authorized
• With service providers — companies that help us host, operate or secure the Application, under strict contractual confidentiality and data-protection obligations. These providers are not permitted to use the data for their own purposes
• When required by law — if we are legally compelled to disclose information by court order, subpoena or other legal process, or to protect the rights, safety and security of users or the public

We do not transfer Google user data to third parties for advertising, data brokering, credit decisions, or training of generalized AI/ML models.

5. Data storage and security

We implement appropriate technical and organizational measures to protect Google user data, including:

• All data in transit is encrypted using HTTPS / TLS
• OAuth tokens are stored encrypted
• Access to servers and databases is restricted on a need-to-know basis
• We monitor for unauthorized access and suspicious activity
• Security procedures are in place to protect the confidentiality of your data

6. Data retention and deletion

• OAuth tokens are stored only while you remain signed in and are deleted when you sign out or revoke the Application’s access
• Profile information received from Google is retained only while your account is active
• User-generated preferences and settings are retained until you delete them or request account deletion
• Technical logs are typically retained for up to 90 days for security and debugging purposes
• When the retention period expires, or upon your request, we delete or irreversibly anonymize the data

You may request deletion of your data at any time by contacting us at support@api4.shop. You can also revoke the Application’s access to your Google account at any time via Google Account → Security → Third-party access.

7. Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent and revoke access at any time
• Object to certain processing activities

To exercise these rights, contact us at support@api4.shop.

8. Children’s privacy

The Application is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. If we make material changes to how we use Google user data, we will notify users by updating this page and, where appropriate, by other means.

10. Google API Services User Data Policy

api4-shop-app’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

11. Contact

If you have questions about this Privacy Policy or our data practices, please contact us:

Application name: api4-shop-app
Email: support@api4.shop
Website: https://api4.shop