Privacy Policy

This policy explains how PrizeSuite handles information when merchants use the service and authorize a Gmail connection.

1. Introduction
2. Information We Collect
3. Google Account and Gmail Data
4. How We Use Google User Data
5. OAuth Permissions
6. Data Storage and Security
7. Data Sharing
8. Data Retention and Deletion
9. User Controls and Revoking Google Access
10. Unsubscribe and Email Suppression
11. Google API Services User Data Policy
12. Changes to This Policy
13. Contact

1. Introduction

PrizeSuite is a Shopify merchant growth and customer-engagement application. This policy applies to information processed through the public website and the PrizeSuite service.

2. Information We Collect

Depending on how the service is used, we may process account and organization details, merchant configuration, customer and lead information entered by a merchant, communication content needed for the workflow, and technical information needed to operate and secure the service.

3. Google Account and Gmail Data

When a user authorizes Gmail, PrizeSuite receives the account identity and mailbox data permitted by the authorization. Gmail data may include sender identity information and messages relevant to authorized communication workflows, including replies, delivery or bounce signals, and conversation-thread information.

4. How We Use Google User Data

We use Google user data to verify the authorized sender identity; send merchant-approved email; read relevant inbound replies; detect unsubscribe requests; process delivery and bounce signals; and maintain conversation threading. We do not sell Google user data or use it for advertising.

5. OAuth Permissions

PrizeSuite currently requests these scopes:

https://www.googleapis.com/auth/gmail.send

Used to send emails that have received the required human approval from the authorized mailbox.

https://www.googleapis.com/auth/gmail.readonly

Used to verify mailbox identity and process relevant replies, unsubscribe requests, bounce signals, and conversation threading.

6. Data Storage and Security

Access is limited to the functionality described in this policy. We use access controls and safeguards appropriate to the information and retain credentials separately from ordinary business data. No security measure can eliminate every risk, but we work to protect information from unauthorized access.

7. Data Sharing

PrizeSuite may use service providers that support hosting, security, and operation of the service. Information is shared only as needed for those purposes, to comply with law, or at a user’s direction. Google user data is not sold.

8. Data Retention and Deletion

We retain information for as long as necessary for the service, security, compliance, and a user-requested deletion process. Retention can vary with the type of record and legal or operational requirements. Users may contact support to request help with deletion.

9. User Controls and Revoking Google Access

Users can review or revoke PrizeSuite access through their Google Account permissions: Google Account → Security → Third-party apps & services, then remove PrizeSuite access. Users can also contact support for assistance.

10. Unsubscribe and Email Suppression

PrizeSuite processes clear unsubscribe requests in inbound replies and records an email suppression so future communication can respect that request. Merchants remain responsible for lawful outreach and honoring applicable preferences.

11. Google API Services User Data Policy

PrizeSuite’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

12. Changes to This Policy

We may update this policy as the service changes. The current version will be posted on this page with its updated date or content.

13. Contact

Questions about privacy or Google access can be sent to PrizeSuite OAuth Support.