Overview
Ecom Dashboard, available at ecomlab.app, provides reporting and workflow tools for e-commerce operators and their authorized teams. This policy covers account data, connected services, and information processed through the dashboard. Contact the Ecom Dashboard operator at [email protected] for privacy questions or requests.
Information We Collect
We may collect account information such as name, email address, authentication status, workspace membership, and security settings. When a user connects third-party services such as Google Ads, Meta, Shopify, Google Sheets, or Gmail, we store the tokens and identifiers needed to operate the requested integration.
Connected integrations may provide business data such as advertising spend, campaign performance, order data, product data, inventory data, customer analytics, and files that users choose to upload or import.
Google Data We Access and Why
Google integrations require authorization through Google. The permissions requested depend on the integration you connect. We do not receive your Google password.
- Account identity: your Google email address, profile information, and account identifiers identify and display the connected account.
- Google Ads: advertising account and campaign identifiers, names, spend, impressions, clicks, conversions, and other reporting metrics support campaign reporting and business performance analysis.
- Gmail: the connected mailbox address, recipients and senders, message subjects and bodies, timestamps, thread and message identifiers, and labels support wholesale correspondence. We send emails that users compose or configure in outreach workflows, retrieve replies to tracked conversations, store correspondence in the workspace, and apply labels to organize sent outreach. This uses Gmail send and modify permissions.
- Google Sheets: spreadsheet identifiers, titles, tab information, and cell values are read or updated for configured supplier, shipment, inventory, and wholesale sheets. Google's spreadsheet permission can cover spreadsheets accessible to the connected account; the app uses the sheets configured for its workflows.
- Connection credentials: OAuth refresh tokens allow requested integrations and scheduled syncs to continue without repeated sign-in. Access stops working when authorization is revoked or the connection is removed.
- Google Calendar, when enabled: the personal planner reads calendar names, identifiers, access roles, time zones, and event titles, descriptions, locations, dates, times, recurrence, colors, and meeting links. Calendar list access lets you select calendars; event access lets you view, create, update, reschedule, and delete events on calendars you can edit. The app stores the account connection, calendar preferences, and task-to-event links. Event content is retrieved from Google for the planner and is not used by wholesale reply classification.
How We Use Information
We use information to authenticate users, provide analytics, sync connected accounts, calculate business metrics, maintain security, troubleshoot issues, and improve the user-facing features. We do not sell user data.
Sharing and Service Providers
Business integrations belong to a workspace. Authorized workspace members can see connected business data and correspondence according to their permissions. Email recipients receive messages sent to them, and Google receives changes you make through its connected services. Hosting, database, storage, and security providers process information needed to operate and protect the service.
We limit transfers of Google user data to providing the features you authorize, protecting security, meeting legal obligations, or a business transfer with your prior consent. Staff access to Google data is limited to your specific permission, necessary security investigations, legal requirements, or permitted aggregated internal operations.
AI Reply Classification
When an authorized workspace user enables "Allow AI reply classification" in Gmail Integration settings and has an Anthropic or OpenAI integration configured, wholesale reply subjects and message bodies may be sent to that provider's API to classify replies and suggest a workflow status. This is off by default. Classification can run during reply syncing after it is enabled. Anthropic is used when available, with OpenAI as a fallback; without a configured provider or without that permission the app uses local rules. Turning the setting off stops new AI classification requests. These providers process the submitted text under their API terms and data policies. Authorized workspace administrators control the provider connections.
Ecom Dashboard does not use Google user data to train or fine-tune generalized AI or machine-learning models. Reply classification processes text to produce a result for your workspace. Google user data is not used for personalized advertising, sold to data brokers, or used to determine creditworthiness.
Google API Services Limited Use
Ecom Dashboard's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google data is used for the user-facing features described in this policy.
Data Protection
We use access controls, encrypted secrets, and operational safeguards to protect user and business data. No system can guarantee absolute security, but we work to keep data access limited to authorized users and required service operations.
Connections use HTTPS. Stored integration tokens are encrypted, and workspace permissions restrict access to business data. Account sessions use cookies; browser storage also remembers interface preferences.
Retention, Disconnection, and Deletion
Connection credentials are retained while an integration is connected. Synced reports, spreadsheet records, and wholesale correspondence are stored to support workspace history and ongoing operations until deleted or no longer needed. Security records and backup copies may remain for recovery, abuse prevention, or legal obligations.
Disconnect Gmail in Wholesale settings under Gmail Integration, or remove a Google Ads profile in integration settings. Disconnecting removes the saved connection credentials; it does not automatically delete previously imported business records or data held by Google. You can also revoke Ecom Dashboard's access in your Google Account connections.
Where the personal Calendar connection is enabled, it is separate from shared business integrations. Its saved connection, preferences, and task links support your planner; disconnecting it does not delete the source events in Google Calendar.
To request access, correction, or deletion of your account or retained Google data, email [email protected] with the account email, workspace, and request. We verify that you are authorized before acting and explain any records we must retain. Revoking access prevents future authorized API access but does not itself erase records already imported into Ecom Dashboard.
Policy Changes
We update this page when our practices change and show the revision date above. Material changes to how Google data is used require notice and any additional authorization before that new use begins.
Contact
For privacy questions or requests, contact [email protected].