Owner email connection privacy

This connection is for our private Owner app. Customers do not need to connect their Google accounts.

What we access and why

With the owner's authorization, the app checks addressing metadata in info@glassesdropoff.com for recent customer replies. The reminder-pause connection requests sender and recipient headers, message identifiers, dates, labels and automatic-message indicators. It does not request message bodies or attachments and cannot send, edit or delete email.

The app matches eligible replies to existing orders so it can pause reminders and flag the conversation for staff review. A reply does not authorize a refund, payment or prescription change.

Email conversation support

If separately activated by the owner, the email service reads the subject and plain-text content of an eligible reply matched to one existing order, from the activation date forward. It does not browse unrelated messages, download attachments or open links in email. HTML alternatives are ignored. Unsupported messages and sensitive or uncertain requests are held for staff review.

Eligible message text and limited order context are processed by our existing business OpenAI API connection to choose an answer from approved service information or flag the request for staff. API response storage is disabled. Customer email data is not sent to our public-content testing project or used for advertising or general-purpose model training. Automated replies require the owner to enable sending and grant Google's separate Gmail send permission. Replies go only to the customer address already matched to the order, in the existing email thread.

Storage and use

Addressing metadata is processed on our Vercel server to perform this check. The protected order database stores a hashed message receipt, reminder pause and review status; a private checkpoint records how far the inbox was checked. The connector does not keep a separate archive of email content. Receipts remain with order history to prevent duplicate processing. Credentials are stored in protected server configuration.

The email service's private task ledger stores message and thread identifiers, a customer-address hash, the prepared public-information answer, execution status and provider receipt. Incoming message bodies and subjects are processed transiently and are not saved in that ledger. Operational receipts prevent duplicate replies; they do not prove delivery, a completed sale or resolution of a service concern.

We do not sell this data, share it with advertising platforms, use it for advertising or use it to train general-purpose models. The Owner email connection's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Your controls

The owner can revoke the connection in Google Account connections. Failed or disconnected reply checks hold automatic reminders until inbox coverage is verified. Revoking access stops future reads; it does not erase existing order history. To request review or deletion of stored records, contact info@glassesdropoff.com without including prescription, payment or other private health information.

See our customer policies for other website data practices.