Stripe for Google Workspace: Payments & Invoices is operated by Sitetrail LLC. This app-specific privacy policy explains how the connector accesses, uses, protects, retains and shares Google and Stripe data. It supplements Sitetrail’s terms and privacy policy; the restrictions below apply to Google user data handled by this app.
Last updated: 5 November 2026. Contact: [email protected].
Data we access and why
With your authorization, the connector receives your Google account identifier, name and verified email address, and the OAuth access and refresh tokens needed to authenticate you and start the Workspace Studio flows you configure. We use these details to identify your account, control access to connected businesses and deliver your requested starter events. The app can make external requests to its own Cloudflare backend.
The connector also processes details of your connected Stripe account, selected Stripe events, and fields you explicitly map into its customer lookup, invoice and payment-link actions. If you map Google Workspace data into an action, those selected fields pass through the connector to perform that action. The connector does not request permission to read your Gmail mailbox or Google Drive files directly. Google runs the native Google steps you add to your flows.
We use the information only to provide the features you request, maintain account and subscription access, enforce usage limits, prevent duplicate financial actions, resolve support requests and protect the service. We do not use Google user data for advertising, sale, credit decisions or unrelated profiling.
Who receives Google user data
We share, transfer or disclose Google user data only as needed for the requested connector features and the limited purposes described here:
- Cloudflare: our service provider for the connector backend, database, queues and operational email. Cloudflare processes Google account details, encrypted authorization credentials and selected workflow fields so the connector can operate. An essential operational notice can contain your account email and the connection or delivery issue.
- Google: authenticates your account and receives the authorized starter requests and event fields needed to run your configured Workspace Studio flows. Google also processes data within native Google services you choose to use in those flows.
- Stripe: receives the fields needed for the Stripe action you configure. Selected Workspace fields mapped into an invoice or other Stripe action are therefore disclosed to Stripe. When you subscribe to this app, we send your account email and business name to Stripe to create and manage your billing customer and subscription. We do not send Google OAuth tokens to Stripe.
- People you authorize: authorized business members can access that business’s connector settings and activity according to their role. Your membership email can be visible to authorized teammates. Google steps can send selected data to recipients or destinations that you configure.
We do not sell Google user data, provide it to advertising networks or data brokers, or disclose it to unrelated Sitetrail products. Administrative access is restricted to personnel operating and supporting this service. Additional disclosure is limited to your specific authorization or applicable legal obligations, consistently with Google’s Limited Use requirements.
How we protect sensitive data
We use HTTPS/TLS for data sent between the app, Google, Cloudflare and Stripe. Stored Google OAuth credentials, Stripe API credentials and retained event/action payloads are encrypted using AES-256-GCM. The encryption secret is held in Cloudflare Worker secrets, separately from stored ciphertext and outside WordPress and the public application source.
Authenticated sessions, role-based business membership checks and store/account isolation control access to connector data. The backend verifies Google identity tokens and Stripe webhook signatures. Users do not receive another business’s credentials. Revoking or disconnecting access stops the affected connection.
AI and machine learning
Google Workspace API data is not used to develop, improve or train generalized, foundational or non-personalized AI or machine-learning models. This restriction includes raw, aggregated, anonymized and derived Google user data. We do not retain or transfer Google user data for those purposes.
This connector does not integrate with any third-party AI provider, model aggregator, model gateway or self-hosted AI model, and does not send Google user data to an external AI service. It therefore uses no third-party AI plans or model endpoints. If you choose to add a native Google Gemini step in Workspace Studio, Google handles that step within its own service; Sitetrail does not call a separate AI provider to perform it.
Retention and deletion
Pending event payloads are retained for up to seven days. Action payloads and event-processing records are retained for up to 30 days and removed by scheduled cleanup. Minimal request identifiers and outcomes are retained longer to prevent an old request creating a duplicate financial action. Billing records are kept as needed to administer the subscription and meet applicable legal requirements.
Google and Stripe connection credentials remain until you disconnect or request deletion. You can disconnect Google or Stripe in the app settings, revoke the Google authorization from your Google Account, and turn off individual flows in Studio. To request deletion of other connector account data, email [email protected]. We verify the request and remove data that is no longer needed, subject to the billing, legal and duplicate-protection purposes described above. Disconnecting a data connection does not cancel your subscription; use Manage billing.
Google Limited Use
Stripe for Google Workspace’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements, and the Google Workspace API User Data and Developer Policy.