Privacy Policy

1. Introduction

Welcome to wishlistflow ("we", "our", "us"), operated by Greengo Development LTD.

wishlistflow is a Squarespace-specific plugin that allows website owners to collect product wishlist requests from customers and automatically send that information to a connected Google Sheet using secure Google OAuth authorization.

This Privacy Policy explains how wishlistflow accesses, uses, processes, stores, and protects personal data and Google user data in compliance with the Google API Services User Data Policy.

2. Information We Collect

A. Wishlist Request Data (Website Visitors)

When a visitor submits a wishlist request through a website using wishlistflow, the following information may be collected:

• Name
• Email address
• Phone number (if included in the form)
• Product details
• Message or custom request details
• Any additional information entered in the wishlist form

This information is provided voluntarily by the website visitor.

B. Google User Data (Website Owners Only)

When a website owner connects their Google account to wishlistflow via Google OAuth, we may access:

• Google account basic profile information (such as email address)
• Permission to create, read, and append data to a specific Google Sheet selected or created by the user
• Google OAuth access tokens required to perform these actions

wishlistflow does not access:

• Gmail content
• Google Contacts
• Google Calendar
• Google Drive files unrelated to the selected spreadsheet
• Any other Google services beyond what is required for Google Sheets functionality

3. How We Use Google User Data

Google user data is used strictly to:

• Authenticate the website owner securely via OAuth 2.0
• Connect to a specific Google Sheet chosen by the user
• Automatically insert wishlist request submissions into that Google Sheet
• Maintain proper integration functionality

We do not use Google user data for:

• Advertising
• Selling data
• Profiling
• Marketing
• AI model training
• Any purpose unrelated to Google Sheets integration

Our use of Google user data is limited to providing the core functionality of wishlistflow.

4. Data Usage

Wishlist request data is used to:

• Deliver wishlist details to the website owner's connected Google Sheet
• Enable website owners to manage and respond to wishlist requests
• Provide technical support and system maintenance
• Improve the reliability and performance of the plugin

We process data solely for service functionality and operational purposes.

5. Data Sharing

wishlistflow does not sell, rent, or trade personal data or Google user data.

Data may only be shared in the following situations:

We do not share Google user data with third parties for marketing, advertising, or unrelated purposes.

6. Data Storage & Protection

We implement appropriate technical and organizational security measures, including:

• HTTPS encryption for all data transmission
• Secure OAuth 2.0 authentication
• Encrypted storage of OAuth tokens
• Restricted internal access controls
• Secure server infrastructure and firewall protections

Google OAuth tokens are stored securely and are only used to perform authorized Google Sheets operations.

We retain data only as long as necessary to provide the service or comply with legal obligations.

7. Google API Services Limited Use Compliance

wishlistflow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is used only to provide user-facing features directly related to the Google Sheets integration and for no other purpose.

8. User Control & Revoking Access

Website owners may revoke Google account access at any time by:

• Removing wishlistflow access in their Google Account security settings
• Disconnecting Google Sheets within the wishlistflow dashboard

Once access is revoked, wishlistflow will no longer be able to access the connected Google account.

9. Children's Privacy

wishlistflow is not directed toward children under the age of 13, and we do not knowingly collect personal data from children.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by updating the Effective Date at the top of this page.