Skip to content
StingersOS
Get started

Legal

Privacy Policy

Last updated: October 29, 2026 · Stingers · stingers.co

This Privacy Policy describes how Stingers (“Stingers,” “we,” “us,” or “our”), operated by Rising Ecommerce LLC, collects, uses, stores, and shares information when you use our websites and products. It is written so a person (or a crawler) can read the actual practices of the product. It is not legal advice.

Who we are

Stingers is the public brand at https://stingers.co. That site is the home page for Stingers and hosts this policy, marketing for StingersOS, and the stream-asset shop.

StingersOS is the staff CRM and operations workspace at https://app.stingers.co (login, pipelines, settings, onboarding, and signup). When a workspace host connects Gmail, they do it inside StingersOS at Settings → Integrations.

Ecom Reserve is the public client CRM used for inquiry forms, pay links, signing, and client portals (for example on ecomreserve.com or a connected brand domain). Clients typically open a private link; they do not connect Gmail.

What this policy covers

This policy applies to:

  • the Stingers marketing site and shop at stingers.co (including https://stingers.co/privacy);
  • StingersOS accounts and workspace data at app.stingers.co;
  • public CRM pages we host for inquiries, invoices, proposals, contracts, gig status, and client portals;
  • Google / Gmail access when a workspace host or admin connects a mailbox so the workspace can send and receive email.

Information we collect

Depending on how you use Stingers, we may collect:

  • Account and workspace. Name, email, password or sign-in credentials, organization / workspace membership, role, and billing plan. Staff may also sign in with Google (identity only: typically name, email, and profile photo from Google sign-in — not Gmail message access).
  • CRM records you create. Contacts, companies, deals, inquiries, meetings, proposals, contracts, invoices, gigs, files, notes, activity, templates, and similar workspace content.
  • Client submissions. Information people enter on inquiry, offer, ads-request, pay, sign, or portal forms (name, email, company, project details, files they upload).
  • Google / Gmail (only if you connect Gmail). See the next section. We do not read Gmail unless a workspace admin connects a mailbox.
  • Payments. Subscription, invoice, and shop checkout status. Card numbers are processed by Stripe; we do not store full card PANs on our servers. We may keep last4, brand, amount, and transaction identifiers Stripe returns.
  • Shop orders. Email, order contents, payment status, and download entitlements when you buy stream assets.
  • Technical logs. IP address, browser, timestamps, and error diagnostics needed to operate, secure, and debug the service.

We do not sell personal information. We do not use Gmail data or other personal information to serve ads.

Google and Gmail

StingersOS lets a workspace host connect one or more Gmail mailboxes so the team can send and receive work email from the CRM — for example inquiry replies, deal outreach, proposals, contracts, invoices, and gig messages. Connection happens in Settings → Integrations after Google’s consent screen.

When you connect Gmail, Stingers (the Google Cloud OAuth application) requests only these Gmail API scopes:

  • gmail.send (https://www.googleapis.com/auth/gmail.send) — send email on your behalf from the connected mailbox (including send-as aliases you already use in Gmail).
  • gmail.readonly (https://www.googleapis.com/auth/gmail.readonly) — view email messages and threads so we can show conversations in the CRM, match replies to inquiries/deals/gigs, and keep those threads up to date.
  • gmail.settings.basic (https://www.googleapis.com/auth/gmail.settings.basic) — read basic mailbox settings, specifically send-as / alias addresses, so the workspace From picker can offer the same addresses Gmail already allows you to send from.

We do not request gmail.modify, gmail.compose, gmail.insert, full mail.google.com, or other Gmail scopes. Connecting Gmail is optional. If you never connect a mailbox, we do not access your Gmail.

With those scopes we may:

  • store an OAuth refresh token so StingersOS can send and read mail until you disconnect;
  • read the connected mailbox address and send-as aliases;
  • send messages you (or a teammate with permission) compose in StingersOS;
  • read messages and metadata on threads linked to CRM records so staff can see the conversation in the deal, inquiry, or gig;
  • copy subject, participants, timestamps, and message body into CRM activity for those linked records so the workspace still has the history in StingersOS.

Limited Use of Gmail data

Gmail data obtained through Google APIs is used only to provide and improve the user-facing email features you connected: sending and receiving workspace email for inquiries, deals, gigs, and related CRM outreach. In particular:

  • We do not use Gmail data to serve advertisements or for advertising purposes.
  • We do not sell Gmail data.
  • We do not use Gmail data for creditworthiness or lending.
  • We do not transfer Gmail data to third parties except as needed to operate this service (for example our infrastructure hosts), to comply with law, or with your direction (for example when you send a message to a recipient).
  • We do not use Gmail data to train generalized or unrelated AI or machine-learning models. Connecting Gmail does not enroll your mailbox in an AI training corpus.
  • Human access to Gmail data is limited to providing the feature you requested, securing the service, complying with law, or with your consent.

These practices are intended to comply with Google’s Limited Use requirements for Gmail API scopes.

How we use information

We use the information above to:

  • create and authenticate accounts and workspaces;
  • run CRM features (deals, inquiries, documents, invoices, portals, gigs, content);
  • send and display workspace email when Gmail is connected;
  • process payments, subscriptions, and shop orders via Stripe;
  • provide customer support;
  • secure the service, prevent abuse, and keep logs;
  • improve reliability and the product you already use.

Other optional AI tools in StingersOS (for example drafting or extracting information from inquiry forms you submit in-product) are separate from Gmail. We do not feed connected Gmail mailboxes into those tools to train models.

How long we keep information

  • Account and workspace records are kept while the workspace is active, and for a reasonable period afterward if needed for backups, billing, or legal obligations.
  • Gmail OAuth tokens are stored only while the mailbox stays connected. Disconnecting deletes the stored refresh token so we can no longer call Gmail for that account.
  • Email already copied into CRM activity (subject, body, participants on a linked inquiry/deal/gig) remains part of that workspace record until you delete the record or the workspace. Disconnecting Gmail stops new reads and sends; it does not automatically erase historical CRM notes that were already saved.
  • Shop orders and entitlements are kept as needed to fulfill downloads and keep a purchase record.
  • Logs are kept for a limited operational period unless a longer period is required for security or law.

How to disconnect Gmail

To stop StingersOS from reading or sending with a connected mailbox:

  1. Sign in to StingersOS at https://app.stingers.co.
  2. Open Settings → Integrations.
  3. Find the Gmail account and choose Disconnect.

Disconnect deletes the stored Google OAuth token for that mailbox from our systems. After that we stop reading messages and stop sending mail as that address. We do not keep using the Gmail API for a disconnected account.

You can also revoke access in your Google Account under Third-party access / Security (Google’s own controls). If you revoke there, our stored token will stop working; you should still Disconnect in Settings → Integrations so we delete the token on our side.

Who we share information with

We share information with service providers who process it for us, not to sell it. Providers we actually use include:

  • Google — Gmail API (when you connect a mailbox) and Google sign-in (when you choose Continue with Google). Google processes that access under its terms; we use it only as described above.
  • Stripe — card payments for StingersOS plans, client invoices, and shop checkout. Stripe handles card data.
  • Supabase — database, authentication, and file storage for StingersOS, the shop, and related products.
  • Vercel — hosting and delivery of stingers.co and app.stingers.co.

If you connect other integrations in Settings → Integrations (for example banks, social accounts, or storefronts), those providers receive only what that connection needs. We do not list a processor here unless the product actually uses it.

We may also share information if required by law, to protect the service or people’s safety, or if the business is transferred (the new operator would still need to honor this policy or notify you of changes).

Recipients of email you send through StingersOS receive the message you chose to send. That is the point of connecting Gmail.

Cookies and similar technology

We use cookies and similar storage that are needed to run the site: sessions, login, shop checkout, and (on stingers.co) an optional site-unlock cookie when the marketing site is locked for preview. We do not run a third-party advertising pixel on stingers.co, and we do not use Gmail data for advertising cookies.

Children

Stingers and StingersOS are built for businesses and working professionals. They are not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Requests and contact

To ask what we hold, request a correction, or ask us to delete workspace or Gmail connection data we control, email us. We will need enough information to confirm you are authorized for that account. Disconnecting Gmail (above) is the fastest way to stop mailbox access.

We are not claiming a specific GDPR, ISO, or SOC certification on this page. If a privacy law gives you rights, contact us and we will handle the request in good faith.

Privacy and support: support@stingers.co
Additional contact: jay@ecomreserve.com
Home: https://stingers.co
Terms: https://stingers.co/terms
Staff app: https://app.stingers.co

Changes

If we change this policy, we will update the “Last updated” date on this page at https://stingers.co/privacy. Material changes to Gmail use would also be reflected in Google’s consent screen when you connect or reconnect a mailbox.