Privacy Policy

1. Introduction

SHINES Creative LLC ("SHINES," "we," "us," or "our") operates the SHINES OS platform and related services available at shinesos.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our platform.

By using SHINES OS, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide when you:

• Register for an account or request early access
• Fill out a contact form or send us a message
• Subscribe to our newsletter or communications
• Use our platform modules (Revenue Engine, Operations, Delivery)

This information may include your name, email address, company name, phone number, and job title.

2.2 Information from Google APIs

If you choose to sign in with Google or connect your Gmail account to SHINES OS, we may receive the following information from Google APIs:

• Profile information: Your name, email address, and profile picture from your Google account, used to create and authenticate your SHINES OS account.
• Gmail message content and metadata (gmail.readonly scope): If you grant permission, we access messages in your connected Gmail mailbox — including sender, recipient, subject, date, message body, and attachments — solely to provide the following features within SHINES OS:
  • Email Client view: Displaying your recent Gmail messages in a read-only reader inside the SHINES OS Communications tab, so you can review client correspondence alongside your CRM records without leaving the platform.
  • Automatic Contact Creation: Parsing sender information and email signature blocks to identify people not yet in your SHINES OS contact database, then prompting you to add them as CRM contacts with one click.

We only request the Google API scopes strictly necessary to provide the features you choose to enable. We do not send, delete, or modify your Gmail messages. You can review and revoke SHINES OS's permissions at any time by visiting myaccount.google.com/permissions.

2.3 Usage Data

We automatically collect certain information when you access our platform, including your IP address, browser type, operating system, referring URLs, access times, and pages viewed. This data helps us improve our services and user experience.

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activity. You can control cookies through your browser settings. Essential cookies are required for the platform to function properly.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our platform and services
• Process your requests, transactions, and account management
• Send administrative information, updates, and security alerts
• Respond to your comments, questions, and support requests
• Analyze usage patterns and improve our platform
• Develop new features, products, and services
• Send marketing communications (with your consent)
• Detect, prevent, and address fraud or technical issues

3.1 Use of Google API Data

Data obtained through Google APIs is used exclusively to provide and improve user-facing features within SHINES OS that you have explicitly enabled. Specifically:

• Authentication: Google profile information is used to create, authenticate, and manage your SHINES OS account.
• Email integration: When authorized, Gmail message content and metadata are used (a) to display your recent email correspondence in read-only form inside the SHINES OS Communications tab, and (b) to automatically detect email senders who are not yet in your SHINES OS contact database and allow you to add them as CRM contacts with a single click.
• No advertising: Google API data is never used for serving advertisements, including retargeting, personalized, or interest-based advertising.
• No AI/ML training: Google API data, and any data derived from Google API data, is never used to develop, improve, or train generalized artificial intelligence or machine learning models — including large language models.
• No unauthorized sharing: Google API data is not transferred to third parties except as necessary to provide the user-facing features you requested, with your explicit affirmative consent, or as required by law.

4. SMS / Text Messaging

By providing your phone number through our contact form, signup flow, or directly to a SHINES OS representative, you consent to receive SMS messages from SHINES OS related to your inquiry, account, and service updates. Message types include contact form confirmations, verification codes, account notifications, sales follow-ups, appointment reminders, lead and account notifications, and occasional product updates.

SHINES OS also provides CRM tools that allow our business users to send SMS messages to their own customers and leads through the platform. Where a business user messages its contacts, that business is responsible for obtaining consent from those contacts, and SHINES Creative LLC acts solely as the messaging platform and service provider.

Message and data rates may apply. Message frequency varies. You can reply STOP at any time to unsubscribe, or HELP for assistance. For complete SMS program terms, see our Terms and Conditions.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories of information described in this Privacy Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

SMS delivery is provided through Twilio, our service provider, who processes phone numbers solely to deliver messages on our behalf and is contractually prohibited from using this data for any other purpose.

5. Google API Services — Limited Use Disclosure

SHINES OS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Appropriate use: We only use Google API data to provide and improve user-facing features that are visible and apparent to you within SHINES OS, as described in Section 3.1.
• Limited transfer: We do not transfer Google API data to any third party except (a) as necessary to provide or improve the user-facing features described in this policy, (b) where you provide your explicit affirmative consent, (c) where necessary for security purposes such as investigating abuse, or (d) where required to comply with applicable law.
• No advertising use: We do not use Google API data — including Gmail message content — for serving advertisements of any kind, including retargeting, personalized advertising, or interest-based advertising.
• No AI/ML training: We do not use Google API data, nor any data derived, aggregated, or anonymized from Google API data, to develop, improve, or train generalized artificial intelligence or machine learning models, including large language models and any model not strictly necessary for providing the user-facing features described in this policy.
• No human access: We do not allow humans to read Google API data unless (a) we have your explicit affirmative consent to view specific messages, (b) it is necessary for security purposes such as investigating abuse or malfunction, (c) it is required to comply with applicable law, or (d) the data has been aggregated and anonymized and is used solely for internal operations in accordance with this policy.

6. How We Share Your Information

We may share your information in the following situations:

• Service Providers: We may share data with third-party vendors who perform services on our behalf (hosting, analytics, payment processing, email delivery). These providers are contractually bound to use your data only for the services they provide to us and must comply with data protection obligations consistent with this policy.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.
• Legal Requirements: We may disclose information if required by law, court order, subpoena, or governmental authority, or if we believe disclosure is necessary to protect our rights, investigate fraud, or ensure user safety.
• With Your Consent: We may share information for any other purpose with your explicit consent.
• SMS Data: We never share phone numbers, SMS consent data, or opt-in information with third parties or affiliates for marketing or promotional purposes.

We do not sell your personal information to third parties. We do not sell, rent, or trade Google API data under any circumstances.

7. Third-Party Services

Our platform may integrate with third-party services such as payment processors, analytics providers, advertising platforms (Meta, Google, Yelp), and accounting tools (QuickBooks, Xero). These services have their own privacy policies governing the data they collect, and we encourage you to review them. Data obtained through Google APIs is never shared with these third-party integrations.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We may retain certain information as required by law, for legitimate business purposes, or to resolve disputes. When data is no longer needed, we securely delete or anonymize it.

Google API data is retained only as long as necessary to provide the features you have enabled. If you disconnect your Google account from SHINES OS or revoke permissions through your Google Account settings, we will delete all Google API data associated with your account within 30 days. If you delete your SHINES OS account entirely, all Google API data will be deleted within 30 days of account closure.

9. Data Security

We implement industry-standard technical and organizational measures to protect your information, including:

• Encryption of data in transit using TLS 1.2 or higher
• Encryption of data at rest using AES-256
• Role-based access controls limiting employee access to user data
• Regular security assessments and monitoring
• Secure authentication and session management

Google API data is stored in the same secured environment and subject to the same protections. Our infrastructure and access controls are reviewed annually as part of Google's Cloud Application Security Assessment (CASA) process.

No method of electronic transmission or storage is 100% secure, and while we strive to protect your information, we cannot guarantee absolute security.

10. Your Rights and Data Deletion

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal information
• Object to or restrict processing of your data
• Receive your data in a structured, portable format
• Withdraw consent at any time

10.1 How to Delete Your Data

You can request deletion of your data in the following ways:

• Account Settings: Navigate to your account settings within SHINES OS and select "Delete Account" to permanently remove your account and all associated data.
• Google Data Specifically: To revoke SHINES OS's access to your Google data, visit myaccount.google.com/permissions and remove SHINES OS. We will delete all stored Google API data within 30 days of revocation.
• Email Request: Send a deletion request to info@shinesos.com with the subject line "Data Deletion Request." We will process your request and confirm deletion via email within 30 days.

Please note that certain data may be retained as required by law or for legitimate business purposes (such as billing records or fraud prevention), even after account deletion. Retained data is isolated from active systems and not used for any other purpose.

11. Children's Privacy

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately and we will take steps to delete the information.

12. International Data Transfers

SHINES OS is operated from the United States. If you access our services from outside the United States, your information may be transferred to, stored, and processed in the United States. By using our platform, you consent to this transfer. Where required by law, we implement appropriate safeguards for international data transfers.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date at the top of this page. For significant changes affecting how we handle Google API data, we will provide notice via email or in-app notification. Your continued use of our platform after changes become effective constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Company: SHINES Creative LLC
• Email: info@shinesos.com
• Website: shinesos.com

For data deletion requests, use the subject line "Data Deletion Request."
For Google API-related inquiries, use the subject line "Google API Data Inquiry."