Privacy Policy

Google API Services and Gmail Integration

CleaningMetrics OS optionally allows business owners to connect their Google account so that transactional emails (booking confirmations, payment receipts, password resets, appointment reminders) are sent from the owner's own domain rather than our platform's shared sender.

Scopes we request

When an owner connects their Google account, we request only these two OAuth scopes:

• https://www.googleapis.com/auth/gmail.send, to send email on the owner's behalf via the Gmail API.
• https://www.googleapis.com/auth/userinfo.email, to capture and display which Google account the owner connected.

What we do NOT do

We do not read, list, modify, archive, label, delete, or otherwise access any messages in the user's Gmail mailbox. The gmail.send scope permits sending only. No inbox access of any kind.

Use of Google user data

CleaningMetrics OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use the data we obtain from Google APIs only to provide and improve the Gmail send-as feature described above. We do not use this data for serving advertisements, do not transfer it to third parties for purposes other than providing or improving the integration, and do not allow humans to read this data (except where required by law, where the user gives explicit consent, or where it is necessary for security investigations).

Refresh token storage and security

When you grant CleaningMetrics OS access to your Google account, Google issues us a refresh token. We encrypt this refresh token with AES-256-GCM before storing it in our managed Supabase database. The encryption key is held separately from the database. We never log the plaintext token.

We mint short-lived access tokens on demand from the refresh token each time the integration sends an email. Access tokens are not persisted.

How to revoke access

You can disconnect the Gmail integration at any time:

1. In CleaningMetrics OS, navigate to Settings → Integrations and click Disconnect Gmail. We will immediately call Google's /oauth2/revoke endpoint to invalidate the refresh token, and we will delete the encrypted token from our database.
2. Independently, you can revoke our access in your Google Account at https://myaccount.google.com/permissions. Removing CleaningMetrics OS from that list invalidates the token on Google's side. Our app will detect the revoked token on the next send attempt and clear it from our database.

Marketing campaigns

Marketing campaigns (bulk customer outreach) are sent through our shared transactional email provider, Resend, not through your connected Gmail account. This is by design: it preserves your Google account's send quota and reputation. If you do not connect Gmail, all transactional emails also fall back to Resend with your organization's name in the From header.