Privacy Policy

AtoZ INFOWAY INC · Last updated: July 1, 2026

This Privacy Policy explains how AtoZ INFOWAY INC ("AtoZ", "we") collects and uses information when you use the AI-MailBridge WordPress plugin, wp.aiappstore.in, our one-click OAuth connection service, and our licensing & update services.

1. Data on your site vs our service

Email logs, settings, and encrypted credentials stay in your WordPress database on your server. AtoZ does not receive the content of emails you send unless you include it in a support ticket.

Technical details: Data security guide for site owners (also in the plugin docs).

2. Connecting a Gmail / Google Workspace or Microsoft 365 account (OAuth)

AI-MailBridge can send your WordPress email through your own Gmail/Google Workspace or Microsoft 365 mailbox. When you choose the one-click connection, the authorization is completed by the AtoZ OAuth broker at connect.wp.aiappstore.in, which holds the OAuth application's client secret so your site never has to. This lets non-technical users connect without creating their own Google Cloud or Azure app.

• Scopes we request — sending only. Google: https://www.googleapis.com/auth/gmail.send (permission to send email on your behalf) plus openid email profile to identify the connected address. Microsoft: Mail.Send plus User.Read offline_access openid email profile. We do not request access to read, search, delete, or modify your mailbox, contacts, calendar, or files.
• Where tokens live. After you approve, the access and refresh tokens are returned to your own WordPress site and stored there (encrypted). The broker keeps only short-lived (a few minutes) handshake records and does not persist your tokens or read your email.
• How the access is used. Solely to deliver the WordPress emails your site generates (notifications, form/e-commerce messages, etc.) from your connected address. We do not read, retain, sell, or share your email content.
• Revoke anytime. Disconnect inside AI-MailBridge, or revoke at myaccount.google.com/permissions (Google) or account.microsoft.com/privacy (Microsoft).

Google API Services — Limited Use. AI-MailBridge's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, data obtained through Google APIs is (a) used only to provide the email-sending feature you enabled; (b) never transferred or sold to third parties, except as necessary to provide the feature, for security, or to comply with law; (c) never used for advertising; (d) never used to train generalized artificial-intelligence or machine-learning models; and (e) never read by humans unless we have your explicit consent, it is necessary for security or to comply with law, or the data is aggregated and anonymized.

3. What AtoZ collects

• License activation: email, site URL, license key, activation timestamps;
• Update checks: plugin slug, version, site URL, license key;
• Storefront: email and site URL when you request a free license (OTP verification);
• OAuth broker: during a connection, transient state plus the site URL initiating it (kept only minutes); no email content and no long-term token storage.

4. How we use it

To issue licenses, deliver updates, complete OAuth connections, prevent abuse, and provide support. We do not sell your personal information.

5. Your responsibilities

You are the data controller for recipient addresses in your email logs. Configure retention, redact webhooks if needed, and comply with applicable privacy laws.

6. Contact

Privacy requests: supports@atozinfoway.ca