Introduction
ChescoWeb Website Forms is administered by EntireTech Services to process website-form submissions and deliver related email messages for authorized websites managed by ChescoWeb and EntireTech Services.
Google User Data
The service uses Google OAuth authorization and the Gmail API. The only Google API scope requested is https://www.googleapis.com/auth/gmail.send.
This permission is used solely to send email generated by authorized website forms, including form-submission notifications and acknowledgement messages where those features are configured. The service does not request access to read a user's Gmail inbox, stored email messages, contacts, Google Drive files, calendars or unrelated Google account information.
How Google User Data Is Used
Google authorization is used only to permit the application to send email through the specifically authorized Gmail account. Google user data is not used for advertising, marketing profiles, data brokerage or unrelated purposes.
Storage and Security
OAuth credentials, refresh tokens, client secrets and related authentication information are stored as secured server-side credentials or environment secrets. These credentials are not intentionally placed in publicly accessible website source code or public Git repositories. Temporary access tokens may be obtained from Google as necessary to perform authorized email transmission.
Sharing
Google authorization data is not sold. Google user data is not shared with advertisers or data brokers. Information may be processed by service providers that are technically necessary to operate the website-form and email-delivery infrastructure, subject to their applicable service and security terms.
Form-Submission Data
Individual client websites may collect information that visitors voluntarily enter into forms, including names, email addresses, telephone numbers, addresses, messages or other requested information. This form-submission information is processed for the purpose stated by the applicable website and may be transmitted to that website's designated recipient.
Visitor-submitted form information is separate from the Google account authorization used to send email. Where a client website separately stores form submissions, that website's privacy disclosures and retention practices govern the stored submission data.
Data Retention and Deletion
Google OAuth authorization credentials are retained only while needed to provide the authorized email-delivery service or until authorization is revoked or the service is discontinued. The owner of the authorizing Google account may revoke the application's access through their Google Account security settings.
When authorization is revoked or the service is discontinued, associated OAuth credentials will be deleted when they are no longer required for legitimate security, operational or legal purposes. Questions or requests concerning applicable data may be sent to [email protected].
Google API Services User Data Policy
Use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Contact
EntireTech Services
Email: [email protected]
Privacy Policy Effective Date
Effective date: September 26, 2026