Privacy Policy

We collect information from you when you register on our site, place an order, subscribe to our newsletter, respond to a survey, or fill out a form. When ordering or registering on our site, as appropriate, you may be asked to enter your: name, e-mail address, mailing address, phone number, or credit card information. You may, however, visit our site anonymously.

When you connect our Chrome extension and grant Gmail access, we may also access:

• Google account identity— your name, email address, and profile picture, used to display which Google account is connected.
• Your Gmail messages (subject lines, body content, sender/recipient information) solely for the purpose of importing and processing orders
• The ability to access email content for the purpose of order data extraction, and to modify email state — including read status and label assignment — to reflect the outcome of each processing operation.
• No Gmail data is stored beyond what is necessary to complete the requested import or action

Any of the information we collect from you may be used in one of the following ways:

1. To personalize your experience — your information helps us to better respond to your individual needs.
2. To improve our platform — we continually strive to enhance our offerings based on the information and feedback we receive from you.
3. To improve customer service — your information helps us to more effectively respond to your customer service requests and support needs.
4. To process transactions — your information, whether public or private, will not be sold, exchanged, transferred, or given to any other company for any reason whatsoever, without your consent, other than for the express purpose of delivering the purchased product or service requested.
5. To send periodic emails — the email address you provide for order processing will only be used to send you information and updates pertaining to your order
6. To send news and notifications about Mountain Stream’s products and services.
7. To power the Gmail Order Import feature — when you use our Chrome extension, we access your Gmail data exclusively to read, parse, and import order information into Streamline, and to mark processed emails as read or apply labels. We do not send emails, and we do not use Gmail data for advertising, profiling, or any purpose unrelated to order processing.
8. Google account name, email, and picture are used only to display the currently connected account in the extension UI. This is never transmitted to Streamline’s servers.

Our Chrome extension uses Google OAuth 2.0 to request the gmail.modify scope, which allows the extension to read emails and modify their state within your Gmail account. This access is used strictly for the following purposes:

• Reading emails to identify and extract order information
• Importing order data directly into your Streamline account
• Marking emails as read once an order has been successfully imported
• Applying Gmail labels to processed emails so you can easily identify which orders have been handled

We do not compose, send, or delete emails on your behalf under any circumstances.

Mountain Stream’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We do not transfer Gmail data to third parties except as necessary to provide the import feature, or as required by law.
• We do not use Gmail data for serving advertisements.
• We do not allow humans to read your Gmail data unless you have given us explicit permission, it is necessary for security purposes, or we are required to do so by law.
• We do not use Gmail data for any purpose not disclosed in this Privacy Policy.

When you sign in to the Streamline Chrome extension, we store a session authentication token locally on your device (via chrome.storage) to keep you signed in. We do not store your password in the extension — only the session token issued after you log in. This token is used solely to authenticate your requests to Streamline while the extension is active. It is automatically deleted from local storage when you log out, and is never transmitted to or stored on any third-party server.

Google user data accessed by the extension falls into two categories: (1) Gmail message content, used to detect and extract order information, and (2) basic Google account profile information, used to identify who is signed in.

Gmail message content

• What is retained locally: For each processed email, the extension stores the message ID, subject line, sender address, processing status, and the order details extracted from the email (such as PO number, delivery date, and product line items). This is stored in your browser’s local storage (chrome.storage) and is not transmitted to or stored on Mountain Stream’s servers.
• What is not retained: The full body content of the email is not stored — only the subject line, sender, and the specific order fields parsed from the message.
• Retention period: This local record is cleared automatically when you log out of the extension, disconnect your Google account, or your session expires. It is not retained indefinitely and is not backed up anywhere.

Google account profile information

• What is retained: Your Google account name, email address, and profile picture are held only in memory for the duration of the extension session, used solely to display your signed-in identity within the extension.
• What is not retained: This profile information is never written to persistent storage (chrome.storage or otherwise).
• Retention period: It is cleared from memory when you log out of the extension, disconnect your Google account, or your session expires.

Deletion: Because both the local order-data record and the in-memory profile data live only in your browser and are cleared on logout, disconnect, or session expiry, there is no server-side copy for Mountain Stream to separately delete. You can also revoke the extension’s access to your Gmail account entirely at any time via myaccount.google.com/permissions.

If you have any concerns about how your Google data is handled, please contact us at remove@mountainstream.co.

We implement a variety of security measures to maintain the safety of your personal information when you place an order or enter, submit, or access your personal information. We offer the use of a secure server. All supplied sensitive/credit information is transmitted via Secure Socket Layer (SSL) technology and then encrypted into our payment gateway provider’s database, accessible only by those authorized with special access rights, and are required to keep the information confidential.

After a transaction, your private information (credit cards, social security numbers, financials, etc.) will not be stored on our servers. Gmail data accessed via the Chrome extension is processed in-session and is not persisted on our servers beyond the duration required to complete the import.

Yes. Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your web browser (if you allow) that enable the site’s or service provider’s systems to recognize your browser and capture and remember certain information. We use cookies to help us remember and process the items in your shopping cart and understand and save your preferences for future visits.

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our platform, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

Gmail data accessed through our Chrome extension is never sold, shared, or transferred to third parties for any purpose beyond what is explicitly described in this policy.

You may opt out of any future contact from us at any time. You can request the return or deletion of any or all information we hold by contacting us at remove@mountainstream.co or via the telephone numbers provided on our website. Specifically, you may:

1. See what data we have about you, if any.
2. Change or correct any data we have about you.
3. Request the deletion of any information we have about you.
4. Revoke Gmail access at any time via your Google Account permissions at myaccount.google.com/permissions
5. Express concern regarding the use of the data we have about you

If you utilize our services from a country other than the country where our services are located, your communications with us may result in transferring your personal data across international borders. Also, when you call us to initiate a chat, we may provide you with support from one of our global locations outside your country of origin. In these cases, your personal data is handled according to this Privacy Policy.

Please also visit our Terms and Conditions section establishing the use, disclaimers, and limitations of liability governing the use of our platform at https://mountainstream.co/terms-and-conditions/

By using our site or Chrome extension, you consent to our Privacy Policy. By granting Gmail access via OAuth, you additionally consent to our use of that data — limited to reading order emails, marking them as read, and applying labels — as described in the “Google API Services — Gmail Data Usage” section above.

If we decide to change our privacy policy, we will post those changes on this page, send an email notifying you of any changes, and update the Privacy Policy modification date.

This policy was last modified on August 28, 2026, in compliance with EU Regulations and Google API Services User Data Policy.