Colmenero Consulting
Contact

Privacy Policy

Last updated: September 10, 2026

This Privacy Policy explains how Colmenero Consulting collects, uses, stores, shares, and protects information when you visit our website or use our services, including the ShopPilot platform and integrations made available through ShopPilot.

--------------------------------------------------

1. INFORMATION WE COLLECT

We collect limited information to understand how visitors use our website, provide our services, maintain integrations requested by our customers, and improve our services.

This information may include:

  • Pages visited
  • Time spent on pages
  • Click interactions
  • Referring websites
  • Device type and browser
  • General geographic location (country or region)

When you choose to connect a third-party service, such as Google, additional information may be processed as necessary to establish and operate that integration. Additional information about our Google integration is provided below.

--------------------------------------------------

2. GOOGLE ANALYTICS

We use Google Analytics, a web analytics service provided by Google LLC.

Google Analytics uses cookies and similar technologies to collect and analyze information about how users interact with our website. The collected information is used to compile reports on website activity and improve website performance.

Google may process this data on servers located outside your country of residence.

Learn more about how Google uses data:

Google Privacy Policy

--------------------------------------------------

3. GOOGLE TAG MANAGER

We use Google Tag Manager to manage and deploy tracking and analytics scripts on our website.

Google Tag Manager itself does not collect personal data. It facilitates the loading of other services such as Google Analytics and Microsoft Clarity.

--------------------------------------------------

4. MICROSOFT CLARITY

We use Microsoft Clarity to better understand how users interact with our website.

Microsoft Clarity records:

  • Mouse movements
  • Clicks
  • Scrolling behavior
  • Page interactions

Clarity is configured to mask or limit collection of sensitive information where applicable. Microsoft Clarity may collect information such as IP address, device type, browser, and operating system.

Learn more about Microsoft Clarity's privacy practices:

Microsoft Clarity Privacy Disclosure

--------------------------------------------------

5. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to analyze website traffic and user behavior.

You may control or disable cookies through your browser settings. Disabling cookies may affect certain website functionality.

--------------------------------------------------

6. GOOGLE API SERVICES AND GMAIL INTEGRATION

ShopPilot allows an authorized business administrator to optionally connect a Google account so that ShopPilot can send transactional business emails on behalf of that business.

When a user connects a Google account, ShopPilot requests access to the Gmail API using the gmail.send permission. This permission allows ShopPilot to send email on behalf of the connected Google account.

ShopPilot uses this permission solely to provide email-sending functionality requested by the connected business. Examples may include account verification messages, password recovery messages, order-related notifications, account invitations, and other transactional customer communications generated through the ShopPilot platform.

ShopPilot does not request permission through this integration to read, search, modify, or delete messages in the user's Gmail mailbox.

In connection with the Google OAuth integration, we may process information necessary to identify and maintain the authorized connection, including the connected Google account identifier or email address, OAuth authorization credentials or tokens, and information necessary to perform authorized Gmail API requests.

Google OAuth credentials are used only to maintain the connection authorized by the user and perform the Google API functionality the user has authorized.

Google API Limited Use

Colmenero Consulting's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data obtained through the ShopPilot Google integration is not sold, used for targeted advertising, provided to data brokers, or used for determining creditworthiness or lending purposes.

Google Workspace API data obtained through this integration is not used to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models.

--------------------------------------------------

7. DATA PROTECTION AND SECURITY

We use administrative, technical, and organizational safeguards designed to protect personal information and Google user data against unauthorized access, disclosure, alteration, loss, or misuse.

Information transmitted between ShopPilot, our services, and Google APIs is protected in transit using HTTPS/TLS.

Google OAuth credentials, including refresh tokens used to maintain an authorized Google account connection, are treated as sensitive credentials and are securely stored using Microsoft Azure Key Vault. Azure Key Vault provides protected storage for application secrets and credentials and encryption at rest.

Access to stored OAuth credentials and the systems used to operate Google integrations is restricted to authorized application services and personnel with a legitimate operational need. Credentials are not exposed through the ShopPilot user interface or made available to other ShopPilot customers.

OAuth credentials are used only to maintain the Google account connection authorized by the user and to perform the Google API functionality the user has explicitly authorized.

We maintain access controls and security practices designed to prevent unauthorized access to Google user data and OAuth credentials. While no method of electronic transmission or storage can guarantee absolute security, we maintain safeguards appropriate to the nature of the information we process and review our security practices as our services evolve.

--------------------------------------------------

8. DATA SHARING AND DISCLOSURE

We do not sell, trade, or rent personal information or Google user data.

Information may be processed by service providers that help us operate, secure, host, or maintain our services when necessary to provide the functionality requested by our customers. Such access is limited to what is necessary for those providers to perform services on our behalf and is subject to applicable confidentiality and data protection obligations.

Website analytics information may also be processed by analytics providers such as Google and Microsoft as described elsewhere in this Privacy Policy.

We may disclose information when required by applicable law, legal process, or a valid governmental request, or when reasonably necessary to protect the security, rights, or integrity of our services and users.

We do not transfer or disclose Google user data to third parties for advertising, data brokerage, or other purposes unrelated to providing or securing the functionality authorized by the user.

--------------------------------------------------

9. DATA RETENTION AND DELETION

We retain personal information only for as long as reasonably necessary to provide our services, maintain legitimate business and security records, comply with legal obligations, resolve disputes, and enforce applicable agreements.

Information associated with a Google integration is retained only for as long as reasonably necessary to maintain and provide the authorized integration or as otherwise required by law.

Users can revoke ShopPilot's access to their Google account through their Google Account permissions. Users may also contact us to request deletion of personal information or information associated with their ShopPilot integration, subject to applicable legal or legitimate record-retention requirements.

When information is no longer required for the purposes for which it was retained, we take reasonable steps to delete, anonymize, or otherwise securely dispose of it, as appropriate.

--------------------------------------------------

10. YOUR RIGHTS AND CHOICES

Depending on your location, you may have rights regarding your personal data, including the right to access, correct, or request deletion of your data.

You may revoke a connected application's access to your Google Account through your Google Account security and permissions settings.

To exercise applicable privacy rights or request deletion of information associated with our services, please contact us using the information below.

--------------------------------------------------

11. CONTACT INFORMATION

If you have questions about this Privacy Policy, our privacy practices, or a request concerning your personal information, please contact us at:

Email: contact@colmeneroconsulting.com

Website: https://www.colmeneroconsulting.com

--------------------------------------------------

12. POLICY UPDATES

We may update this Privacy Policy from time to time to reflect changes to our services, integrations, legal obligations, or privacy practices. Any changes will be posted on this page with an updated revision date.