Privacy Policy
Vapetronics Limited, Trinidad and Tobago, operates VapeTronics POS Contact, the Google Contacts connection within Vapetronics POS. This policy explains how we handle information used by this connection and the related POS customer records.
Information we access
- Customer information entered into the POS: names or business names, telephone numbers, email addresses, postal addresses, customer identifiers and wholesale or retail classifications.
- When the account owner authorizes Google access, the connected Google account’s email address and verification status, and Google contact names, phone numbers, email addresses, postal addresses, contact identifiers, custom fields and metadata needed for matching and updates.
- Google authorization tokens, contact-link identifiers, synchronization fingerprints, job status, timestamps and error records. Related POS audit records identify the staff member who configures or disconnects the integration.
How the connection uses information
With the owner’s authorization, the application creates and updates Google Contacts using eligible POS customer details. It reads existing Google Contacts to identify records already linked to a customer and detect possible duplicates. It does not import the complete Google address book into the POS customer list.
The Google permission requested allows viewing and managing contacts. The current integration uses it to read, create and update contacts; it does not automatically delete Google contacts. Wholesale customer names receive a wholesale-customer label in Google. Walk-in and archived customers, and customers without a phone number or email address, are skipped.
Synchronization is from the POS to Google. Editing a linked customer in the POS can overwrite the corresponding name, phone, email and address fields in Google. Changes made only in Google are not automatically copied back into the POS. Google access is used for account verification and contact synchronization, not to read Gmail messages or Google Drive files.
Sharing and permitted use
Customer details are sent to Google to provide the requested contact synchronization. Authorized Vapetronics personnel can access POS information according to their assigned permissions. Hosting and storage providers, including Cloudflare and the ChatGPT Sites hosting service, process application data to operate the service. Data may be processed outside Trinidad and Tobago.
We do not sell Google user data, use it for advertising or advertising profiles, or use it to train generalized AI or machine-learning models. Human access to Google user data is limited to what is necessary for an expressly authorized support task, security or abuse investigation, legal obligations, or other uses permitted by Google’s policies. We may disclose information where legally required or as necessary to investigate abuse or protect the service.
VapeTronics POS Contact’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Storage and security
POS customer records, contact-link identifiers and synchronization records are stored in the application database. Google refresh tokens and client secrets are encrypted on the server. Temporary authorization records expire, and access to configuration is restricted to the POS owner role. We use HTTPS for the application’s network connections. No security measure can guarantee absolute protection.
Google contact data is processed to match and update records. The integration retains contact identifiers and synchronization fingerprints rather than a separate full copy of the Google address book. POS business records, audit records and backups may be retained for ongoing operations, recovery and applicable recordkeeping obligations.
Disconnecting and deleting information
The owner can select Disconnect in POS → Super Admin → Configuration → Google Contacts. This revokes the Google authorization and removes the stored refresh token from the active connection configuration. Access can also be removed through Google Account connections.
Disconnecting stops future synchronization. It does not delete contacts already saved in Google, POS customer records, or stored contact links and audit records. Archiving a POS customer also does not delete their Google contact. Contacts already in Google can be managed or deleted in Google Contacts.
To request access, correction or deletion of POS personal information or retained connection records, email vtdistrott@gmail.com. We will verify the request and explain any information that must be retained for legal, security or business-record obligations. Backup copies may remain until the relevant backups are replaced or removed. Disconnect before requesting removal of synchronization records to prevent further synchronization.
Website visitor statistics
The wholesale website uses a randomly generated browser identifier to count daily, weekly, monthly and all-time unique visitors. A separate temporary tab identifier and short heartbeats estimate how many visitors currently have the website visible. These statistics are not linked to customer accounts, Google Contacts, names, email addresses or precise locations. The analytics feature does not store IP addresses, full page URLs or advertising identifiers. Browser privacy signals and blocked tracking can prevent a visit from being counted. You can remove the browser identifier by clearing this website’s local storage; doing so may cause a later visit to count as a new browser.
Daily anonymous visitor records are retained for historical reports; temporary live-presence records are removed after 24 hours. Only authorized staff can view the reports.
Changes and contact
We will update this page and its effective date when these practices change, and provide additional notice or request authorization when required for a material change in Google data use. For privacy questions, contact Vapetronics Limited at vtdistrott@gmail.com.