Who this policy covers
This privacy policy is for GlowLogistic and the SellSync operations application on glowlogistic.net, operated by Joohan (주식회사 주한). It describes how this application accesses, uses, stores, shares, and deletes Google user data. It is not a sample policy.
Google sign-in requests only these OAuth scopes: openid, email, and profile. The application does not request Gmail, Google Drive, Calendar, Contacts, or any other Google API scope.
Google user data the application accesses
When you choose “Continue with Google”, the application accesses only the Google user data returned for those scopes:
- Your Google account identifier (OpenID subject,
sub) - Your email address
- Your name
- Your profile picture URL, when Google provides one
The application does not access your mailbox, files, calendar, contacts, or other Google content.
How Google user data is used
We use this Google user data only to provide the sign-in feature of GlowLogistic / SellSync:
- To identify you and create or update your account
- To show your name in the application
- To keep a signed-in session in this browser
- To hold a new account as pending until operations staff approve access to a customer tenant, menus, and SKU scope
We do not use Google user data for targeted, personalized, retargeted, or interest-based advertising. We do not sell Google user data. We do not use it to determine credit-worthiness or for lending. We do not use Google user data to develop, improve, or train generalized or non-personalized AI or machine-learning models. Use is limited to providing and securing this application’s user-facing sign-in and account features.
With whom Google user data is shared, transferred, or disclosed
We share, transfer, or disclose Google user data only with the parties below, and only so they can provide sign-in and operate this application. We do not transfer or disclose your Google user data to third parties for purposes other than the ones in this policy.
- Google — to complete Google sign-in. Google receives the OAuth request. We do not send warehouse, order, or inventory records to Google as part of sign-in.
- Joohan (주식회사 주한) — the company that operates GlowLogistic and SellSync. Authorized operations staff may see your email, name, and account status to approve access and support the account. Staff access is limited to people with an operations role.
- Google Cloud — the sign-in API runs on Google Cloud Run, and the account record (Google account identifier, email, and name) is stored in Google Cloud SQL. This is hosting of our own service, not a sale of data.
- Vercel — hosts the public website, including this page and the sign-in screen. Google OAuth tokens are not sent to Vercel.
We do not sell Google user data. We do not share, transfer, or disclose Google user data with advertisers, advertising platforms, data brokers, or information resellers.
Invoice email is separate. When we email an invoice, Resend delivers that message and may process the billing email address on the invoice. Resend does not receive Google OAuth tokens, your Google account identifier, or your Google profile.
We may disclose Google user data if a law, court, or competent authority requires it, or to investigate abuse of the service.
How we protect Google user data
Security procedures are in place to protect the confidentiality of your Google user data. We use encryption to protect your information in transit.
- Encryption in transit. The website and the sign-in API are served over HTTPS (TLS). The site sends a Strict-Transport-Security header.
- Encryption at rest by the database host. Account records are stored in Google Cloud SQL, which encrypts stored data at rest as part of that service. We do not claim SOC 2, ISO, or any other certification.
- Access control. Accounts start as pending. After approval, access is limited by role, assigned menus, and tenant. One customer’s tenant data is not opened to another customer’s users.
- Restricted staff access. Only authorized Joohan operations staff can review or delete account records.
- Secrets. The Google OAuth client secret stays on the server. Google access tokens and refresh tokens are not stored in the browser and are not written into the account table. Until you sign out, this browser keeps a session with your account id, email, display name, and profile picture URL in local storage. That session is not an OAuth token.
Retention and deletion
We retain your Google account identifier, email, and name for as long as your GlowLogistic / SellSync account is active and we need them to operate the account. When the account is deleted, we delete that account record. A longer period applies only if the law requires it.
You may request deletion of your Google-linked account data by emailing admin@joohan.kr. Include the Google email address on the account. After we confirm the request, we delete the account record. Signing out of the browser removes the local session on that device. Disconnecting the app in your Google Account removes Google’s grant for future sign-in.
Changes
If we change how this application uses Google user data, we will update this page and the effective date before relying on the new use. The current page is https://www.glowlogistic.net/privacy.
Questions: admin@joohan.kr