Last updated: October 7, 2026
This policy explains the CKCP Store Order Mail integration operated by 广东创客车品科技有限公司 (CKCP). It covers the mailbox authorization and delivery of order notices.
Information used
The designated owner supplies the sender email address and OAuth application credentials and authorizes Gmail sending through Google’s consent screen. The integration uses an authorization code, access token and refresh token to send messages. Its only requested Google API scope is https://www.googleapis.com/auth/gmail.send. It does not request access to existing Gmail messages, contacts, or Drive files.
WooCommerce supplies the recipient address and the information in its order-email template, which may include the customer’s name, order number, purchased items, totals, order status, billing and shipping details. Customer notices go only to the billing email saved on the corresponding order; merchant new-order notices go to the designated CKCP mailbox.
Purpose and delivery
Mailbox authorization is used only for these order notices and the owner’s one-time connection-check email. This integration does not send marketing campaigns, add copy recipients, attach files, or replay a batch of old orders.
Google processes the authorization and email delivery. FluentSMTP runs on CKCP’s WordPress server. Its official https://fluentsmtp.com/gapi/ callback receives the temporary authorization code during connection and displays it for the owner to submit to CKCP’s secure connection form. Delivered messages are disclosed to their designated recipients and processed by their email providers. CKCP’s hosting infrastructure supports the store and integration.
Storage and retention
The client secret and access and refresh tokens are stored encrypted in the WordPress database. A pending client secret is also encrypted and expires after 20 minutes if connection is not completed. The integration does not store the mailbox password. FluentSMTP message-content logging is disabled for this connection. WooCommerce retains the underlying order records separately, and Google retains sent mail under the connected account’s settings.
Connection credentials are kept while the connection is configured. The owner can revoke access in the Google Account’s third-party connections settings and request removal of the stored connection. Order-record deletion is handled separately from mailbox disconnection; operational backups can retain earlier records until they rotate out.
Limited use and access
CKCP Store Order Mail handles information received through Google APIs in accordance with the Google API Services User Data Policy, including its Limited Use requirements. Google user data is not sold or used for advertising or credit decisions. Access by personnel is limited to operating the disclosed service, authorized support, security investigations or legal requirements.
Contact and changes
Send access, correction, deletion or authorization questions to ck18926049907@gmail.com. CKCP will review the request and any obligations affecting order records. Changes to the purpose or permissions of this integration will be disclosed before requesting additional consent.