Products Privacy Policy

Effective date: September 25, 2026

Products is a business operations application operated by White Label Distribution, referred to here as WLE ("we," "us," or "our"), at https://products.wle710apps.com. This policy explains how we access, collect, use, store, and share information when authorized personnel use Products or connect business accounts.

Products supports production tracking, inventory and product setup, laboratory-result processing, and related business workflows. It is built solely for authorized White Label Distribution employees to perform company work using company data. It is not offered as a public or customer-facing service. Employee account identifiers and activity records may still be personal information and are handled under this policy. Public access to this policy does not grant access to Products. Features available to an employee depend on company-assigned permissions and enabled integrations.

Information we access and collect

Account information. When you sign in through Google, our authentication provider processes your Google account identifier, email address, and basic profile information supplied during sign-in. We use account information to authenticate you, determine whether you are an authorized user, and associate actions with your account. Products does not receive your Google password.

Connected Gmail account information. When an authorized administrator connects the designated business reports mailbox, Products accesses the mailbox address and relevant email information, including message identifiers, sender and recipient addresses, subjects, timestamps, message headers, message bodies, and attachments. This includes laboratory reports and import acknowledgments, completion notices, and error messages.

Products requests Gmail read-only access (gmail.readonly) to find and process these messages and attachments, and Gmail send access (gmail.send) to send authorized business upload emails. Google's read-only permission technically permits reading all messages in the connected mailbox; it is not restricted by Google to a particular sender or folder. Products uses this access for the business workflows described in this policy. These permissions do not allow Products to delete incoming messages or mark them as read. Connecting Gmail is separate from signing into Products.

Spreadsheet and business-system information. Products reads designated production and classification spreadsheets and, where authorized, records completion status in the production spreadsheet. It also processes information from connected inventory and product systems, such as batch identifiers, product names, SKUs, farm or supplier information, quantities, classifications, dates, prices, laboratory results, and destination record identifiers. Spreadsheet access may be provided through a business service account with access granted by the organization.

Uploaded files and workflow records. We process files you submit or make available through connected accounts, including laboratory PDFs. We store extracted information, report fingerprints, matching results, processing status, exceptions, user decisions, and records needed to verify completed actions and avoid duplicate processing.

Connection and technical information. We process authorization tokens and integration credentials needed to operate enabled connections. Our application and infrastructure providers may also process technical information such as IP addresses, request timestamps, browser information, authentication events, and error diagnostics to operate and secure the service.

How we use information

We use information to:

• Authenticate users and enforce business access permissions.
• Read production entries, apply configured validation and product-generation rules, and track outstanding work.
• Retrieve laboratory attachments, extract results, and match them to the appropriate batch and product records.
• Create or update authorized inventory and product records in connected systems.
• Send product import files through the connected business mailbox and read import confirmations or errors.
• Display job status, resolve exceptions, and verify whether an action succeeded before retrying it.
• Maintain the application, diagnose problems, prevent misuse, and respond to support or privacy requests.

When background processing is enabled, Products may perform these authorized workflows while a user is not actively using the website. Google authorization tokens allow access without repeatedly requesting the user's password. Access remains subject to the permissions granted and can be revoked.

Google user data and Limited Use

Products' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements, and the applicable Google Workspace API User Data and Developer Policy.

We use Google user data only to provide or improve the user-facing features described in this policy. We do not sell Google user data, use it for advertising or credit decisions, or transfer it to data brokers. We do not use Google Workspace data to develop, train, or improve generalized or non-personalized artificial intelligence or machine-learning models.

Our personnel and service providers may view specific Google user data only with the user's affirmative agreement, when necessary for security purposes, to comply with applicable law, or where another exception expressly permitted by Google's Limited Use rules applies. Access to a connected mailbox does not authorize unrelated employee browsing of its contents.

When information is shared

We share information only as needed for authorized workflows and the purposes described here:

• Google and Google Cloud: authentication, Gmail and spreadsheet access, application hosting, and protected credential storage.
• Supabase: application authentication and storage of business workflow records.
• SaasAnt and QuickBooks: generated product import files are sent to the configured SaasAnt import address for processing into the organization's QuickBooks account. Products reads resulting import notifications to track completion.
• Sortly and LeafLink: relevant product, inventory, and extracted laboratory-result data is transmitted to the organization's connected accounts when the corresponding workflow is enabled and authorized.
• Authorized business users: relevant information and job status are available to personnel whose application permissions permit access.

We do not forward entire laboratory emails or their original PDF attachments to inventory systems as part of the standard results-update workflow. Extracted fields needed for the authorized update may be transferred instead.

We may disclose information where necessary to comply with applicable law or address security threats. Transfers of Google user data remain subject to Google's Limited Use restrictions, including any required consent. Information already sent to a connected service is also handled under that service's terms and privacy policy and the organization's account settings.

Storage, retention, and security

Products stores workflow records in its application database and stores integration secrets separately in Google Cloud Secret Manager. Application access is restricted to authorized accounts, and connections to Google and other supported services use HTTPS. Processing and troubleshooting may also involve restricted-access working copies on administrator-controlled computers. No transmission or storage system can be guaranteed completely secure.

We retain account information while needed to administer authorized access. We retain production records, extracted results, destination identifiers, and processing history while needed to complete business workflows, resolve errors, prevent duplicate actions, and meet applicable recordkeeping obligations. A dashboard's recent-history filter does not mean older information has been deleted; Products does not currently guarantee automatic deletion after 30 days.

Laboratory PDFs and message content may be processed or retained as working copies for extraction, verification, and troubleshooting. Products is not intended to replace the laboratory's report archive. Working copies are subject to administrative deletion; there is currently no guaranteed automatic deletion period. Messages and sent attachments remaining in Gmail are subject to the organization's Gmail retention settings.

Authorization credentials are retained while needed for an enabled connection. Administrators can remove stored credentials when a connection is retired. Limited records may be retained when required by law or necessary to resolve security incidents or disputes. Where such retention applies to a deletion request, we will explain the applicable limitation.

Your choices and deletion requests

You may revoke Google's authorization through your Google Account connections settings. Revoking access stops Products from making new requests using that authorization, but does not automatically delete information already stored or remove records previously created in other systems.

For organization-managed spreadsheet access, an administrator can remove the application's service account from the spreadsheet's sharing permissions. An administrator can also disable an integration or remove a user's Products access.

To request access to, correction of, or deletion of information stored by Products, or removal of stored connection credentials, contact noah@wle710.com. Identify the account or business records involved; do not include passwords, API keys, or authorization tokens. We will verify the requester's identity and authority and respond in accordance with applicable requirements. Deletion requests may need coordination with the organization that controls shared business records.

Deleting information from Products does not automatically delete source emails, source spreadsheets, laboratory records, or records already submitted to QuickBooks, SaasAnt, Sortly, or LeafLink. Those records must be managed through their respective services and the organization's administrator.

Cookies and browser storage

Products and its authentication provider use cookies or browser storage to maintain sign-in sessions and protect the account-connection process. Products does not use these mechanisms for advertising. Disabling them may prevent sign-in or account connection from working.

Changes and contact

We may update this policy as the application or its data practices change. The effective date will identify the current version. We will provide notice of material changes and obtain additional consent when required before using previously collected information for a new purpose.

For questions or privacy requests, contact:

White Label Distribution — Products
Email: noah@wle710.com
Application: https://products.wle710apps.com