Google data

How we use Google data

Shop Ops asks for Google permissions in two separate steps: sign-in for everyone, and an optional mailbox connection for the store's support inbox. This page lists each permission and exactly what it is used for.

Last updated October 21, 2026

openid
email
profile

When it is requested: Sign-in (every user)
What it is used for: Confirm who you are when you sign in, and match your email address against the list of people the store owner invited.
What we store: Your email address and display name, as part of your user account.

https://www.googleapis.com/auth/gmail.modify

When it is requested: Connecting a support mailbox (optional, owner only)
What it is used for: Read incoming support messages so they can be sorted and answered; create and update reply drafts in the mailbox’s Drafts folder; send a reply only when a person approves it; and list the mailbox’s verified “Send mail as” addresses so you can choose which one a reply is sent from.
What we store: Message and thread IDs, the category we assigned, and the reply status. For each reply awaiting approval, an approval record with a short summary of the incoming message and the draft text, kept for up to 30 days. Each send-as address, its display name, default flag and verification status. Full mailbox contents stay in Gmail.

https://www.googleapis.com/auth/gmail.modify

When it is requested: Mailbox history analysis (optional, once, with the owner’s consent)
What it is used for: Analyze up to 12 months of past support conversations once, to derive de-identified question categories, reply templates and FAQ drafts for the store. FAQ drafts are published to the store’s website only after the account owner explicitly approves each item.
What we store: The derived categories, templates and FAQ drafts, with no names, addresses, phone numbers or order numbers. Kept as private, version-controlled configuration in our systems and deleted on request.

https://www.googleapis.com/auth/gmail.modify

When it is requested: Daily, while a mailbox is connected
What it is used for: Read the headers and IDs (not the content) of messages in the Sent folder, to match sent replies with the approvals recorded in Shop Ops.
What we store: The match between a sent message ID and its approval record.

Google OAuth scopes requested by Shop Ops
Scope	When it is requested	What it is used for	What we store
`openid` `email` `profile`	Sign-in (every user)	Confirm who you are when you sign in, and match your email address against the list of people the store owner invited.	Your email address and display name, as part of your user account.
`https://www.googleapis.com/auth/gmail.modify`	Connecting a support mailbox (optional, owner only)	Read incoming support messages so they can be sorted and answered; create and update reply drafts in the mailbox’s Drafts folder; send a reply only when a person approves it; and list the mailbox’s verified “Send mail as” addresses so you can choose which one a reply is sent from.	Message and thread IDs, the category we assigned, and the reply status. For each reply awaiting approval, an approval record with a short summary of the incoming message and the draft text, kept for up to 30 days. Each send-as address, its display name, default flag and verification status. Full mailbox contents stay in Gmail.
`https://www.googleapis.com/auth/gmail.modify`	Mailbox history analysis (optional, once, with the owner’s consent)	Analyze up to 12 months of past support conversations once, to derive de-identified question categories, reply templates and FAQ drafts for the store. FAQ drafts are published to the store’s website only after the account owner explicitly approves each item.	The derived categories, templates and FAQ drafts, with no names, addresses, phone numbers or order numbers. Kept as private, version-controlled configuration in our systems and deleted on request.
`https://www.googleapis.com/auth/gmail.modify`	Daily, while a mailbox is connected	Read the headers and IDs (not the content) of messages in the Sent folder, to match sent replies with the approvals recorded in Shop Ops.	The match between a sent message ID and its approval record.

How the support inbox handles a message

A new message arrives in the connected mailbox.
Shop Ops reads it and sorts it, for example as an order question or a return request. To draft a reply, our server sends the message text and the related order details to Anthropic's Claude API, used under Anthropic's Commercial Terms (no training on inputs). See AI-assisted drafting.
The draft is saved in the mailbox's Drafts folder and shown to a person in Shop Ops. While it waits for approval we keep a short summary of the incoming message and the draft text, for up to 30 days.
The person edits it if needed, chooses the From address, and presses send. Only then is it sent from the connected mailbox.

What we never do

We never send an email without a person pressing send.
We never delete messages, threads or labels in your mailbox.
We only work with support messages in the mailbox you connect. Apart from the one-time history analysis you consent to and the daily Sent-folder check described above, we do not go through other mail in that account beyond what is needed to find support messages, and we do not access any mailbox you have not connected.
We never sell Google user data or transfer it to anyone for advertising, and we do not use it to serve ads.
We never use Google user data to train AI models, ours or anyone else's.
People at Shop Ops do not read your messages, except with your explicit permission (for example to help with a support request you sent us), when needed for security, or when required by law.

How to disconnect

In Shop Ops: Settings → Support → Disconnect mailbox. We revoke the token with Google, delete it from our database, and stop all access to the mailbox immediately.
In your Google Account: open Third-party apps with account access, select Shop Ops, and remove access. This works even if you cannot sign in to Shop Ops.

Disconnecting does not change anything in your mailbox. Drafts already created stay in your Drafts folder until you delete them. Our records of thread IDs and status for that mailbox are deleted as described in the privacy policy.

Limited Use

Shop Ops's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Full details are in our privacy policy. Questions are welcome through the contact form.