Google-data privacy notice

MooMoo Toys Operations Center · Effective 22 October 2026

This notice covers the Google connection in MooMoo Toys Operations Center, operated by MooMoo Toys. It supplements the store privacy policy. For Google API data, this specific notice controls over general marketing and advertising provisions.

Access and purpose. With the account owner's consent, the application uses Gmail read access for supplier messages, message headers and attachments; Sheets read access for controlled business records; and Drive read access for approved workbook metadata, downloads and exports. These Google permissions technically allow broad account-level reading. The application restricts the connected identity to the MooMoo Toys account and applies supplier and file controls. Data supports supplier-offer preparation, source evidence, operational review and system-health checks.

Storage and access. Processing occurs on the existing Render-hosted service. It retains selected source evidence, derived review records and audit information on its persistent storage; operational source responses can also be cached in server memory. The refresh credential is encrypted in a host file, with the key on the same host. Authorized operating roles receive only the access permitted by the application. This is not a claim that all retained source data is encrypted separately or that host compromise is prevented.

Optional Registry maintenance. Separate owner consent may grant Drive file access to the canonical Taxonomy Registry selected through Google Picker. The application restricts writes to that one file, preserves its prior revision and records verified new-brand mappings or scoped aliases under the owner standing authorization. This does not authorize edits to pricing policy, accounting records or other controlled files, or commercial purchases, imports or publication.

Use and disclosure. Google API data is used for these operating functions, not sold, used for targeted advertising, or used to train generalized AI models. Hosting/service providers may process it to operate and secure the application. Human access is limited to authorized operational review and support, security investigations, legal obligations, or other access explicitly permitted by Google's policies. MooMoo Toys Operations Center's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Retention and removal. Retained source evidence and audit records support review, reconciliation and recovery. A fixed automatic deletion period is not currently established. Contact moomootoys.ph@gmail.com to request access, correction or removal; retained copies and backups must be reviewed alongside applicable recordkeeping obligations. Revoking Google access stops future authorized API access but does not itself erase previously retained records or backups. The owner can revoke access in Google Account third-party connections; this interrupts automatic intake.

Contact. moomootoys.ph@gmail.com.

About the Operations Center · Google-data privacy notice