Privacy Policy

Optional Google domain import

Google sign-in does not authorize domain import. Connecting Search Console requests webmasters.readonly. Connecting Analytics requests analytics.readonly. We read authorized site names, Analytics account and property names, and website addresses from selected web streams. We do not read reports, Gmail, Drive or Calendar. Access and refresh tokens stay encrypted on the server, scoped to the product, account and Google service. The browser keeps your setup selection; the server saves only domains you confirm. We do not sell this data or use it for advertising or AI training. Disconnect Google in setup to remove this product's saved tokens and pending consent. You can revoke Google's authorization at https://myaccount.google.com/connections. Disconnection preserves domains already registered and does not cancel a subscription. Choosing PageAudit or HookPulse enables native product access and stores a domain association. It does not transfer your Google tokens to those products.

Data controller

WRP Consultoria e Informática Ltda, CNPJ 66.300.125/0001-45, R. Copaíba, Lote 01, Bloco B, Sala 408, Águas Claras, Brasília/DF, CEP 71919-540, Brazil. Personal data requests: eu@wendelmaques.com.

Sign in with Google

• When you choose Sign in with Google, you allow access to your Google account identifier, verified email and basic profile. The profile can include your name, given name, family name, photo, language and Google Workspace organisation domain.
• We use this data to identify your account, give you access and display your profile. We store the link and profile fields in the account system. Google confirms your identity. We do not receive your Google password.
• Sign-in requests only openid, email and profile. It does not give access to Gmail, Drive, Calendar, contacts or Search Console. Additional integrations request their own permission when you choose to connect them.
• Sign-in tokens are used on the server to check your identity. We do not keep access or refresh tokens from this sign-in to query other Google services.
• We do not sell data received from Google. We do not use it for personalised advertising or to train general artificial intelligence models. Internal access is limited to service operation, authorised support, security and legal obligations.
• We keep the link and profile while needed for your account. Unlinking Google prevents new access through that link. It does not delete your account, the imported profile, product data or required security and billing records.
• You can remove the connection in your Google Account settings at https://myaccount.google.com/connections. To request access, correction or deletion of data we keep, write to eu@wendelmaques.com. Include the product and account email. Do not send a password or token.
• Our use and transfer of information received from Google APIs follow the Google API Services User Data Policy, including its Limited Use requirements where applicable: https://developers.google.com/terms/api-services-user-data-policy.

Data we process

We process verified account details, organization settings, contacts supplied by customers, consent records, templates, recipient addresses, delivery events, suppressions, API and security audit records, and billing references.

Purposes

We use data to verify access and deliver requested messages. We check permission and blocking lists before sending. We also use data to prevent abuse, measure reliability, provide support and meet accounting and security obligations.

Processors and location

Servers we operate run the service and store its data. Cloudflare provides DNS only. Amazon Web Services (AWS) sends email through Simple Email Service (SES). It reports delivery events through Simple Notification Service (SNS). AWS may process that data where it operates, under its applicable safeguards. A mail server we operate receives mail addressed to commsharbor.com.

Retention

Import and export objects expire after seven days. Raw SES feedback objects expire after thirty days. Product data remains while the organization is active. Security audit and pseudonymous billing records may be retained when necessary.

Control and deletion

Organisation owners can export workspace data and schedule its deletion. You have seven days to cancel the request. We then delete personal content and stored files. We retain only required records, with identifiers instead of names. Your global account and organisation remain active.

Contact

Send privacy and data-rights requests to eu@wendelmaques.com.