CTH Smart Stock Alerts
Privacy policy
This notice describes the Gmail sender connection and stock-summary email service operated for Chua Tong Hin Marketing. Contact: main.cthmy@gmail.com.
Information used
- The connected Google account’s verified email address identifies the authorized sender.
- OAuth credentials and refresh tokens allow the service to obtain short-lived access tokens and send authorized email.
- The message contains product and warehouse names, approved stock balances, configured stock thresholds and suggested replenishment quantities. The configured recipient address is used to deliver it.
- Delivery records include the date, recipient, message content, alert count, status, provider message ID when returned, and a limited error description.
Purpose and access limits
Google account information is used to verify the sender and deliver the
configured stock summaries. The Gmail authorization requests
gmail.send and account identity scopes. It does not request
inbox-reading permission. Drive backups and Product Master
synchronization, when separately connected, use a different
authorization and are not enabled by this Gmail grant.
Storage and providers
The service runs on Cloudflare. Deployed OAuth secrets are stored in encrypted Worker secrets; stock and delivery records are stored in the app’s access-controlled database. The operator’s local setup files contain credentials with restricted filesystem permissions. Google processes the sender authorization and email delivery. Message contents are shared with the configured recipient and may remain in Gmail under the account owner’s mailbox settings.
Google user data is not sold, used for advertising, or used to train AI models. It is used and shared only to operate this service, with the providers needed for that purpose, or when required by applicable law. Authorized operators may access operational records for support and maintenance.
Retention and deletion
Sender credentials are retained while the connection is needed. The operator can remove the Worker secrets and local credential files when disconnecting. Delivery records remain for operational review until removed by the operator; this service currently has no automatic purge schedule for its email history. Permanent stock-ledger records are separate business records and are not deleted by disconnecting Gmail. Copies already sent to Gmail are managed through Gmail.
Your choices
The Google account owner can revoke the app’s access in Google Account connections. Revoking access stops future token refreshes once existing short-lived tokens expire. Contact the operator to switch off alerts immediately, remove stored credentials, or request review, correction or deletion of data associated with the sender connection. Business-record preservation requirements may limit deletion of stock records.
Google API use
CTH Smart Stock Alerts’ use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Changes
Changes to the service’s data practices will be reflected on this page with an updated date.