Privacy Policy

Information we collect

When you register or are invited, we store your name, email address, a password hash, account status, and role.

If you sign in with Google, we receive your Google account ID, email address, name, and profile image. We use them only to create and sign in to your workspace account.

If you sign in with Discord, we receive the Discord account ID, username, and email address that Discord provides. We use them only to create and sign in to your workspace account.

If you connect a Google account on the sheet plugin page, we request your email address and permission to view and manage the Apps Script projects you authorize (https://www.googleapis.com/auth/script.projects). We store the Google account email, the Google account ID, and an encrypted refresh token. We use that token to read this workspace's template script and to update the Apps Script project you added. We do not request Gmail, Google Drive, Calendar, or Contacts.

The workspace stores the order, product, commission, and settlement records needed to run its affiliate operations. Buyer details received from the connected shop are stored so the workspace can fulfill and account for orders.

We use cookies to keep you signed in, to remember your language, and to remember your theme.

How we use information

We use this information to operate the workspace: sign-in, permissions, the sheet plugin, orders, commissions, and support. We do not sell personal information, and we do not use Google user data for advertising.

Google user data

RMBBUY's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy

We use Google user data only to provide the features that you or a workspace administrator turned on: signing in, showing which Google account is connected, and updating the Apps Script project you authorized. Workspace administrators can see the connected Google account email and the script ID.

The refresh token is encrypted before it is stored. Script content is sent to the Apps Script project when someone runs a push. We do not keep a separate copy of that script source after the push finishes.

We do not sell Google user data or share it with advertisers or data brokers.

You can remove this app's access at https://myaccount.google.com/permissions. After you revoke access, the saved token can no longer call Google. Ask the workspace operator to delete the saved connection from this workspace as well.

Sharing

We share information with the infrastructure providers that host this website, send its email, and store its files, and with Google when we call Google APIs you authorized. Shop and order data may be exchanged with the shop platform this workspace has connected. We also share information when the law requires it.

Retention and deletion

We keep account and workspace records for as long as the workspace needs them to operate. A connected Google account remains until the connection is removed or you ask the operator to delete it. Revoking access at Google stops further API calls even if a token is still stored here.

Security

Refresh tokens for Google accounts connected on the sheet plugin page are encrypted before they are stored. Each workspace's records are kept separate from other workspaces.

Children

This workspace is a business tool and is not directed at children.

Changes

We post updates on this page and change the date above.

Contact

Questions about this policy, or requests to access or delete your information, can be sent to the operator of RMBBUY.