Infinity Financial CRM:
Google API Privacy Policy

 

Effective Date: July 29, 2026
Version: 2026-07-29
 

Infinity Financial ("Infinity Financial," "we," "us," or "our") operates a private customer relationship management application (the "Application") used by authorized Infinity Financial staff and representatives to manage client relationships, communications, tasks, and related business activities.

This Privacy Policy describes how the Application accesses, uses, stores, protects, and shares information obtained through Google API Services, including Gmail.

This policy applies specifically to Google user data accessed through the Application. Other information collected through Infinity Financial's website or services may be governed by our general Privacy Policy.
 

1. Google Account Connection

​

Authorized users of the Application may be required to connect their Google account to enable email functionality within the CRM.

The Application uses Google's OAuth 2.0 authorization process. Users are redirected to Google to review the permissions requested by the Application and authorize access to their Google account.

Infinity Financial does not receive or store the user's Google account password.

Access to Google user data is limited to the permissions authorized by the user and required to provide the Application's email communication features.

​

2. Google API Permissions We Request

​

The Application requests the following Gmail API permissions:

Gmail Read-Only

https://www.googleapis.com/auth/gmail.readonly

This permission allows the Application to retrieve email information from the connected Gmail account.

The Application uses this access to locate and retrieve email communications associated with clients managed through the CRM, including information such as:

• sender and recipient information;

• email subject;

• message and thread identifiers;

• date and time information;

• message previews and email content necessary to display client communications; and

• communications required to identify and synchronize incoming and outgoing client emails.

Read-only Gmail access does not permit the Application to delete messages, modify messages, change labels, archive messages, or mark messages as read.

Gmail Send

https://www.googleapis.com/auth/gmail.send

This permission allows an authorized user to send email using the Gmail account they have connected to the Application.

The Application uses this permission when the user explicitly sends a new client email or replies to an email through the CRM's email functionality.

The Application does not use this permission to modify the user's mailbox, manage labels, delete messages, or change Gmail settings.

​

3. How We Use Google User Data

​

Google user data accessed through the Application is used only to provide and support user-facing CRM functionality.

This includes:

• displaying email communications between the authorized user and clients within the CRM;

• synchronizing relevant client email communications with client records;

• organizing related messages into client communication history and email threads;

• allowing authorized users to send client emails through their connected Gmail account;

• allowing authorized users to reply to client communications through the CRM;

• recording relevant email activity in the applicable client record;

• identifying incoming client communications that may require follow-up; and

• creating or supporting CRM follow-up tasks associated with client communications.

The Application does not access Gmail data for advertising, marketing profiling, surveillance, creditworthiness determinations, lending decisions, or purposes unrelated to the user-facing email and client-management features of the Application.

​

4. Data the Application Stores

​

To provide CRM functionality, the Application may store information derived from email communications associated with CRM clients.

Stored information may include:

• sender and recipient email addresses;

• email subject;

• message and thread identifiers;

• message date and time;

• message preview or content used by the CRM;

• whether a communication was sent or received;

• client communication activity records; and

• follow-up tasks generated from client communications.

The Application also stores authorization information necessary to maintain the user's connection to Google, including an OAuth refresh token associated with the authorized staff account.

OAuth access and refresh tokens are not displayed to clients or other unauthorized users through the Application's user interface.

​

5. Sharing and Disclosure of Google User Data

​

Infinity Financial does not sell Google user data.

Google user data is not transferred to advertising platforms, data brokers, information resellers, or other third parties for advertising or marketing purposes.

Access to Google user data within the Application is limited to uses necessary to provide and operate the CRM's authorized email and client-management functionality.

Information may be processed by service providers that provide infrastructure or technical services necessary to operate the Application, subject to applicable privacy, confidentiality, and security obligations.

Information may also be disclosed where required by applicable law, legal process, or a valid governmental request.

​

6. Google API Services User Data Policy and Limited Use

​

The Application's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, Google user data accessed by the Application is used only to provide or improve user-facing features that are prominent within the Application.

Google user data obtained through restricted scopes is not used or transferred for:

• serving advertisements, including personalized, interest-based, or retargeted advertising;

• determining creditworthiness or for lending purposes;

• sale to data brokers, information resellers, or other third parties;

• surveillance or monitoring unrelated to the Application's authorized functionality; or

• purposes unrelated to the CRM features disclosed in this Privacy Policy.

Google's Limited Use policy specifically prohibits transferring, selling, or using applicable Google user data for advertising and prohibits using it to determine creditworthiness or for lending purposes.

​

7. Data Security

​

Infinity Financial takes reasonable and appropriate measures designed to protect Google user data against unauthorized or unlawful access, use, disclosure, alteration, loss, or destruction.

Access to the Application is restricted to authorized users. Google authorization credentials and Google user data are handled through application systems designed to limit access to the functionality for which the information is required.

Google also requires applications using Google API Services to maintain a secure operating environment and take appropriate measures to protect Google user data in transit and at rest.

​

8. Data Retention and Deletion

​

Google user data retained within the Application is maintained only for as long as reasonably necessary to provide the Application's CRM functionality, satisfy legitimate business or legal requirements, or fulfill applicable record-retention obligations.

When Google user data is no longer required for these purposes, it may be deleted or anonymized in accordance with applicable requirements.

Authorized users may revoke the Application's access to their Google account through their Google Account settings.

Revoking Google authorization prevents the Application from obtaining new Google user data using that authorization. Information previously stored within the CRM may remain where retention is required for legitimate business, regulatory, compliance, recordkeeping, security, or legal purposes.

Users may contact Infinity Financial using the information below to request information regarding deletion of Google user data associated with the Application, subject to applicable legal and regulatory retention requirements.

​

9. Access by Infinity Financial Personnel

​

Google user data is accessible only where necessary to operate, support, secure, administer, or provide the Application and its user-facing functionality.

Personnel with access to such information are expected to handle it in accordance with applicable privacy and confidentiality obligations and this Privacy Policy.

​

10. Changes to Google Data Use

​

If the Application changes the way it accesses or uses Google user data, this Privacy Policy will be updated to accurately describe those changes.

Where required, users will be notified and asked to provide appropriate authorization or consent before Google user data is used for a materially different purpose.

Google requires applications to update their privacy disclosures and obtain consent when Google user data will be used in a manner that was not originally disclosed to the user.

​

11. User Choices and Revocation

​

Users control whether the Application is authorized to access their Google account through Google's OAuth authorization process.

Google account access can be reviewed or revoked through the user's Google Account security and third-party connection settings.

Revoking Google access may prevent the Application's Gmail-related functionality from operating.

Access to the Infinity Financial CRM itself is separately controlled by Infinity Financial and may require Gmail authorization where email functionality is an operational requirement of the user's role.

Please contact infinityfinancial.wfg@gmail.com to remove all access.

​

12. Scope of Gmail Access

​

The Application requests only the Gmail permissions necessary for its current user-facing email functionality.

The Application does not request Gmail permissions for functionality that has not been implemented and does not request broader Gmail permissions solely for potential future features.

This reflects Google's requirement that applications request only the minimum permissions necessary to provide their implemented functionality.

​

13. Contact Information

​

Questions regarding this Privacy Policy, the Application's use of Google user data, or requests concerning Google user data may be directed to:

​

Infinity Financial
240 Holiday Inn Drive
Cambridge ON
infinityfinancial.wfg@gmail.com
226-339-4088
Website: www.infinityfinances.ca