top of page

MVVI Business ERP Privacy Notice

MVVI Supply Specialists uses MVVI Business ERP (MVVI ERP V2) for its own business operations. Its Google Apps Script management integration is intended for the owner and authorized maintainers.

Google information accessed

With the Google account holder’s consent, the integration requests the Google Apps Script project management permission, https://www.googleapis.com/auth/script.projects. This permission can access Apps Script project source and supports source modification. The installed workflow targets MVVI’s existing ERP project. The inspection operation reads that project’s files and produces a list of file names, file types, and checksums. A separately authorized source change uses the existing inspect, plan, owner approval, and deployment controls. The permission is broader than inspection alone. This integration does not request Gmail permissions or use separate Google Drive or Sheets permissions to read business records. Apps Script source may itself contain configuration or embedded information, so source exports are treated as private.

Purpose and processing

MVVI uses this access to inspect, maintain, and verify its existing ERP source. Google processes authorization and Apps Script API requests. GitHub Actions runs the management workflow in MVVI’s private repository. Google account credentials are entered directly with Google. OAuth client credentials may be entered directly into Google OAuth Playground during setup to obtain the owner’s refresh token.

Storage and access

The OAuth client configuration and refresh token are stored as encrypted GitHub Actions repository secrets. Authorized workflows can use those secrets. Repository permissions therefore determine who can initiate or change workflows that use them. Inspection logs contain project identifiers, file names, types, and checksums. Owner approved source deployments may create a private artifact containing the complete predeployment source. The current deployment workflow configures those artifacts for 14 days of retention. Other repository and log retention follows the settings applied to those services. Copies already exported by an authorized maintainer must be handled separately. Do not put passwords, OAuth secrets, authorization codes, or tokens into source code, issue comments, chat messages, or screenshots.

Sharing and use limitations

Google user data accessed through this integration is used for MVVI’s authorized ERP maintenance. It is not used for advertising or sold. Access and transfers are limited to authorized maintainers, the service providers needed to operate the integration, and disclosures required by law. MVVI’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Control, revocation, and questions

The Google account holder can revoke the app’s access through Google Account permissions. MVVI can remove the stored GitHub secrets to stop future authenticated workflow access. Revocation does not automatically delete existing repository files, logs, or previously created artifacts. Contact MVVI to request review or deletion of retained integration information, subject to required business or legal retention. Contact: MVVISupply@gmail.com, 901-335-7878. MVVI Supply Specialists, 2070 South Third Street, Memphis, TN 38109.

bottom of page