MPG Android QA — Privacy Notice
Last updated: 31 October 2026.
This notice explains how MP GLOBAL PARTNERS LTD processes information when operating its internal MPG Android QA controller for testing the Energy & Machinery Parts Android application.
Information processed
When the account owner grants OAuth permission, the controller may access Gmail message metadata and the content of recent verification emails needed to identify one-time passcodes (OTP) for an active test. The requested Google permission is https://www.googleapis.com/auth/gmail.readonly. This permission allows reading mailbox data; it does not authorize sending, modifying, or deleting messages. The intended controller workflow filters messages by relevant sender, subject, time window, and test session, and extracts only the required code.
Other test information may include synthetic company and product details, test email addresses, test photographs, offline draft records, outbox statuses, emulator diagnostic events, application logs, and Stripe TEST transaction identifiers and outcomes. Test data should be used in preference to personal or live commercial data.
Purposes and limitations
Data is used to verify email ownership flows, diagnose application defects, confirm offline/online recovery, prevent duplicate submissions, and check that test-only payment processing works as expected. Gmail data is not used to train generalized AI models, build advertising profiles, or send unsolicited messages. Gmail information is not sold or shared with advertisers. Access is limited to the authorized project testing environment and service providers technically necessary to run it.
Storage and security
OAuth credentials and tokens are intended to be stored in restricted server-side files, separate from source code and diagnostic logs. Diagnostic records and extracted verification codes should be minimized and retained only as needed for troubleshooting and audit; exact retention periods depend on operational configuration. Do not place OAuth tokens, passwords, full mailbox contents, or payment secrets into test logs. Transport to Google services uses HTTPS.
Revocation and requests
The Google account owner may revoke the application’s access through their Google Account third-party connections at any time. For inquiries, access or deletion requests concerning controller-held data, contact info.energyandmachineryparts@gmail.com. Revoking Google access does not automatically remove already stored diagnostic records; request their removal separately where applicable.
Website visitors and product submitters should also consult the main website Privacy Policy.