Legal

Privacy Policy

This Privacy Policy explains how Sunegg Games, LLC, doing business as Unplod, collects, uses, discloses, and protects information. Unplod is a brand of Sunegg Games, LLC and is provided through Unplod's websites, applications, and related services.

Last updated: September 12, 2026

Cookies and optional marketing

We use essential cookies and browser storage for sign-in, security and preferences. Your cookie choice is saved in this browser for 180 days. Google Tag Manager loads to manage website tags even when marketing is off; this involves a connection to Google. No optional analytics integration is currently enabled.

When marketing is enabled, Apollo and its identity partners may receive page URLs you visit, IP addresses, browser identifiers and visit activity. They may use that information to associate visits with companies or business contacts so we can understand interest in Unplod and support marketing or sales outreach. This can include signed-in pages and uses cookies, local storage and similar technologies.

Marketing needs your acceptance unless a reviewed regional opt-out policy applies. Where that policy applies, the notice says marketing is on by default and can be turned off; we do not record that default as consent. Choose Reject optional to turn off Apollo visitor matching, or change Marketing in Cookie settings under Personalization when signed in, or from the public-site footer. Rejection does not affect essential service operation or information you provide directly. Choices apply to this browser, not all devices.

Turning marketing off may ask you to reload so the change fully applies to tools already loaded. Save unfinished work and complete the reload; reload other open tabs too. Withdrawal does not erase information previously collected. For access or deletion requests, contact [email protected]; Apollo also offers its own privacy controls.

We honor Global Privacy Control for optional marketing. We also keep a browser-local refusal separate from the 180-day consent cookie, so that cookie expiring does not automatically enable marketing. This preference does not synchronize across devices; clearing site storage removes it. Contact [email protected] for account-related privacy requests.

Apollo Privacy Policy Apollo privacy controls

At a glance

Unplod is a business purchase-order automation service. It receives purchase orders that you or your team submit or forward, extracts order details, queues uncertain items for review, and creates approved orders in connected WooCommerce stores.
Google Sign-In is optional. When you use it, Unplod uses Google only to authenticate your account and receive basic identity information needed to create and secure your Unplod session.
Unplod does not request Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, or other Google Workspace API scopes for PO Assistant.
Unplod does not sell Google user data, use it for advertising, or use it to train generalized or non-personalized AI or machine-learning models. Optional website marketing is separate from Google Sign-In data.
You can contact [email protected] to request access, correction, export, deletion, or other privacy assistance.

Information we collect

Account and authentication information: name, email address, user identifier, workspace membership, role, sign-in method, authentication metadata, session metadata, and account-security events.
Google Sign-In identity information: when you choose Sign in with Google or Sign up with Google, Google may provide your Google account identifier, email address, email verification status, display name, profile image URL, locale, and related profile metadata authorized by you.
Workspace and team information: workspace name, team membership, invitation status, plan, billing status, feature settings, and administrative preferences.
Business content you submit, upload, connect, or forward to Unplod: purchase-order emails, attachments, extracted PO fields, customer and shipping details, product mappings, review decisions, and WooCommerce order data needed to provide PO Assistant.
Integration configuration: WooCommerce store URL, scoped WooCommerce REST API credentials, forwarding addresses, forwarding-route metadata, and connection status. Integration credentials are used only to perform actions you authorize.
Usage, device, and diagnostic information: log data, IP address, browser type, operating system, pages viewed, feature interactions, request timestamps, error reports, performance data, fraud-prevention signals, and security events.
Payment and subscription information processed through Stripe, including plan, trial, subscription, invoice, and payment status. We do not store full card numbers on our servers.
Communications you send to us, including support requests, feedback, demo requests, privacy requests, and operational messages.

How we use information

Provide, operate, secure, maintain, troubleshoot, and improve Unplod and its user-facing features.
Authenticate users, create accounts, maintain sessions, enforce workspace membership, provide customer support, and protect accounts from unauthorized access.
Classify purchase-order emails, extract PO data, route uncertain items for human review, remember approved product mappings, and create approved WooCommerce orders.
Operate forwarding addresses, process uploaded or forwarded documents, run malware and safety checks, and maintain duplicate-prevention and audit records.
Manage accounts, subscriptions, billing, trials, customer support, notices, service communications, and administrative requests.
Monitor service reliability, measure feature usage, debug errors, detect abuse, investigate security incidents, and enforce our Terms of Service.
Comply with legal obligations, respond to lawful requests, protect rights and safety, and maintain records required for accounting, tax, security, or dispute-resolution purposes.

Google API Services and Limited Use

Unplod uses Google API Services only for Google Sign-In unless this policy is updated before any additional Google data access is requested. The current app flow does not request Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, or other Google Workspace API scopes.
Data accessed from Google: if you choose Sign in with Google or Sign up with Google, Unplod receives basic identity information authorized by you, such as your Google account identifier, email address, email verification status, display name, profile image URL, locale, and related profile metadata when Google provides it.
Purpose of Google access: Unplod uses Google Sign-In data only to authenticate you, create and secure your account, associate your session with your Unplod workspace, prevent abuse, and provide account support.
No Google mailbox or file processing: PO Assistant works through email forwarding and user-submitted documents. Unplod does not read your Gmail mailbox, Google Drive files, Google Calendar events, Google Contacts, or Google Photos through Google APIs.
Limited Use commitment: Unplod use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy.
Storage and retention for Google data: Google Sign-In identity data is stored with your Unplod account for as long as needed to provide the service, meet security or legal obligations, or until your account is deleted or a valid deletion request is completed. Security logs and backup copies are retained only for limited operational, legal, or security periods before deletion or overwrite under normal retention cycles.
Sharing and transfer for Google data: Unplod does not sell Google user data, rent it, trade it, use it for advertising, transfer it to advertising platforms, transfer it to data brokers or information resellers, or use it to determine creditworthiness or lending eligibility. We disclose Google user data only to service providers acting on our behalf, when required for security or legal compliance, as part of a business transfer subject to appropriate notice or consent where required, or as directed by you.
Human access to Google data: Unplod personnel may access Google Sign-In identity data only when needed to provide support, troubleshoot account access, investigate abuse or security issues, comply with law, or operate the service under confidentiality and access-control obligations.
AI and machine-learning training: Unplod does not use Google user data, including Google Sign-In identity data, to develop, improve, or train generalized or non-personalized AI or machine-learning models.
Future Google scopes: if Unplod ever adds a Google integration that requests additional Google API scopes, we will update this Privacy Policy and any in-product disclosures before collecting or using that additional Google user data.

Service providers and integrations

We use service providers and infrastructure vendors to operate Unplod, including hosting, database, storage, email routing, security, logging, analytics, payment processing, authentication, customer support, and AI/document-processing providers.
Service providers may process personal information only as needed to provide contracted services to Unplod, follow our instructions, protect security, comply with law, or support the user-facing features described in this policy.
If you connect WooCommerce, we use the credentials and store data you provide only to perform the actions you authorize, such as validating store data and creating approved orders.
If AI extraction is enabled, relevant PO content may be processed by configured extraction providers solely to classify documents, extract PO information, provide review assistance, and improve the user-facing PO Assistant workflow. We do not sell PO content or train our own generalized models on customer content.
Third-party websites, platforms, and integrations may have their own privacy policies. Their handling of information after you direct Unplod to send data to them is governed by their terms and policies.

How we share information

We share information with service providers acting on our behalf and under confidentiality, security, or data-processing obligations appropriate to the service they provide.
We may share information with your authorized integrations, such as WooCommerce, when you direct Unplod to do so.
We may share information with members of your workspace according to your workspace settings, roles, permissions, and actions within the product.
We may disclose information if required by law, to protect rights and safety, or in connection with a merger, financing, acquisition, or sale of assets.
When marketing is enabled, website identifiers and visit activity are shared with Apollo and its identity partners as described above. Depending on applicable law and how the recipient uses the information, this may be considered a sale or sharing of personal information for targeted advertising. These marketing recipients may process information under their own privacy policies, rather than only as service providers acting on our instructions.

Security and retention

We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit, scoped access controls, credential encryption for sensitive integration secrets, monitored infrastructure, least-privilege access, and operational logging.
We limit employee and contractor access to systems and data based on role, business need, confidentiality obligations, and security controls.
No system is perfectly secure, so you are responsible for keeping your login credentials safe, using appropriate workspace permissions, rotating integration credentials when needed, and promptly telling us about suspected account compromise.
We retain account, workspace, and business content for as long as needed to provide Unplod, maintain security, comply with legal obligations, resolve disputes, enforce agreements, and support billing/accounting requirements.
If your account or workspace is deleted, we delete or de-identify associated personal information and customer content unless we need to retain limited records for legal, security, billing, backup, fraud-prevention, dispute-resolution, or compliance purposes. Backup copies are overwritten or deleted under normal backup retention cycles.

Your choices and rights

You may access, update, export, or delete certain account information from the product where available.
Self-service cleanup is limited to the records or local caches described by each control. Removing a queue record, clearing a cache, or archiving a workflow does not by itself delete your account, cancel your subscription, erase all source data or retained history, or remove data from an external service. Full account deletion and cleanup not offered in the product can be requested through [email protected] and are reviewed separately; the self-service controls do not promise immediate or complete erasure.
You may disconnect integrations, rotate credentials, remove forwarding routes, delete uploaded content, or stop forwarding emails to Unplod at any time, subject to product availability and retention rules described above.
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, opt-out of sale or sharing, limit certain uses of sensitive information, or information about how your personal information is processed.
To make a privacy request, email [email protected]. We may need to verify your identity and authority before completing a request.
If you use Google Sign-In, you may also manage or revoke app access from your Google Account permissions page. Revoking Google access may prevent Google Sign-In from working until you sign in again or choose another supported sign-in method.

Children

Unplod is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

International use

Unplod is operated from the United States. If you use the service from another jurisdiction, your information may be processed in the United States or other locations where we and our service providers operate.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the service, by email, or by another reasonable method. The updated policy will be effective when posted unless it states otherwise.