ESOPS Privacy Policy
Effective: November 1, 2026; last updated: November 1, 2026 (Google user-data disclosure revision)
ESOPS (https://esops.cc/), operated by Sky Tang, provides SOP preparation, review, publishing, workstation execution and production-reporting services for companies. This policy covers the public website, administration console, Web and Android workstation terminals and explains the access, use, sharing, protection, retention and deletion of personal information and Google user data. Privacy and data-deletion contact: support@esops.cc. You do not need to register or sign in to read this policy or contact us.
1. Data access and collection
Google sign-in is optional. Only after you select Google sign-in and authorize it does ESOPS obtain identity information through Google OAuth 2.0 / OpenID Connect, requesting openid, email and profile. Google may return a unique account identifier (sub), email address, email verification status (email_verified) and basic profile information such as a name or avatar. The current sign-in process uses the identifier, email and verification status to match an existing ESOPS account; it does not separately save the name or avatar returned by Google as a user profile. ESOPS does not obtain your Google password or request or read Gmail messages, contacts, Google Drive files, calendars, Google Photos or other Google Workspace business content. Information you provide directly includes your registration email, administrator name, company name, company code and account settings. Companies and their users may upload products, processes, SOPs, attachments, production tasks and production reports. Service operation also involves sign-in times, IP addresses, terminal identifiers, application versions and necessary diagnostic logs, depending on the features actually used.
2. Data use and Limited Use
The Google account identifier, email and verification status are used only to verify your sign-in identity, link an existing ESOPS user and establish an application session. They do not automatically create a company, grant an administrator role or bypass company permissions. The name you enter identifies your account within your company. Your registration email also receives registration and password-reset verification codes and supports the handling of support requests. Business data supports work instructions, scheduling execution and production-report traceability; device and log information supports security and troubleshooting. ESOPS's use of information obtained from Google APIs, and its transfer to other applications, complies with the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold or used for advertising, remarketing, advertising profiles, credit assessment or lending decisions, or to develop, improve or train generalized, non-personalized AI or machine-learning models. ESOPS does not call Google Workspace APIs to obtain business content or use such data to train AI/ML models. ESOPS does not provide features for generating AI non-consensual intimate imagery (AI NCII), does not use Google APIs or Google user data to generate such content, and prohibits related activity through this service.
3. Sharing and disclosure
Company administrators and users can access account and business information only within their company and role permissions. Google sign-in verifies identity; ESOPS does not upload company SOPs, production records or production reports to the Google sign-in service. Cloud servers process account and sign-in-linking data needed to operate the service; Alibaba Cloud object storage processes company attachments; Resend receives recipient email addresses and message content needed to send verification codes. Providers process data only as needed for their respective functions and do not obtain other Google account content through Google sign-in. Their infrastructure may be in different countries or regions. Contact us for details. We do not sell Google user data or provide it to advertisers, data brokers or information resellers. Disclosure is limited to providing requested features, necessary security or abuse investigations, applicable legal requirements, or your explicit consent, and remains limited to what is necessary. Human access to Google user data is restricted to support handling you consent to, necessary security investigations or legal requirements.
4. Storage and protection
The link between your Google account identifier and local user identifier is stored in the server database; the account email is stored in ESOPS user records. Google identity tokens are used for server-side checks of signatures, issuer, audience, validity and association with the sign-in request, and are not displayed as public information. The current sign-in process does not persist Google access tokens or refresh tokens or use them to periodically read Google account content in the background. ESOPS uses HTTPS to protect data in transit between browsers, applications and identity services. Passwords set directly in ESOPS are stored as hashes. Session authentication, role authorization and tenant isolation restrict server access; databases and caches are not exposed as public user interfaces. Necessary logs support troubleshooting and security handling. These measures cannot eliminate every security risk. Contact support@esops.cc if you discover an account or data-security issue.
5. Retention and deletion
The link between a Google account and an ESOPS user is retained as long as needed to maintain that sign-in link and provide account services. When you request unlinking or account deletion, we verify your identity and applicable permissions before deleting the relevant link or personal information. Google identity tokens verify the current sign-in; the service does not maintain a long-term repository of Google access tokens or refresh tokens. Company business data and necessary security records are retained as needed to provide services, fulfill agreements or meet legal requirements, then deleted or anonymized when no longer needed. Where legal retention obligations, company records or others' lawful rights prevent immediate deletion, we explain the scope and reasons. To request deletion, email support@esops.cc with the subject “ESOPS data deletion” or “Unlink Google account”, stating your registration email, company and the data you want handled. You may also request access, correction or export of personal information. Do not send passwords, verification codes or Google tokens. We process requests after verifying the requester. Jointly managed company production records may require coordination with the company administrator. Revoking Google authorization does not automatically delete your ESOPS account, link or company business records; submit a separate deletion request.
6. Choices, policy updates and contact
You may sign in with an ESOPS account and password instead of Google. View or revoke ESOPS's Google authorization at https://myaccount.google.com/connections; signing in with Google again after revocation may require reauthorization. Account status and company permissions in ESOPS remain managed by your company. The website uses browser storage for necessary sign-in sessions, language and theme preferences. Android terminals request device permissions as needed for their functions, subject to system prompts. This service is intended for company production management, not children. If Google user-data handling or this policy changes materially, we update the date on this page and notify users through the website or application; additional Google permissions are presented separately in the authorization process. Application: ESOPS Operator: Sky Tang Website: https://esops.cc/ Privacy, account support and Google data-deletion email: support@esops.cc Individuals may contact the operator directly without first holding a company account. For internal company permissions and business materials, you may also contact your company administrator first.