Privacy Policy
BPO Scale accepts orders for you — nothing more. This policy explains exactly what we touch, how sensitive Google user data and payment data are protected, and how to have it deleted.
Only vendor order broadcasts that match your rules are processed.
Inboxes connect through Google’s own sign-in; tokens are protected.
We never see or store your full card number.
Unlink an inbox or ask us to delete your data — done within 30 days.
BPO Scale exists to accept vendor orders faster for appraisal and BPO operators. It is not built to read, mine or profit from your personal communications.
Our rule is simple: your inbox belongs to you. We process only what is needed to spot and accept the order broadcasts you have asked us to accept.
BPO Scale does not open or browse your Gmail for personal messages, client conversations or anything unrelated to orders. Our systems look only for vendor broadcasts that match your ZIP and filter rules.
Email content is never used for advertising, profiling, resale or training third-party models, and BPO Scale staff do not routinely access your mailbox.
While the bot is on, incoming messages are compared with your rules — ZIP codes, optional state or fee filters and active hours. When a message is an order broadcast you want, our system accepts it through the vendor portal.
To power your dashboard we keep operational details such as subject lines, timestamps, ZIP and accept status. That is a record of activity on your account, not a copy of your inbox.
Gmail is connected through Google OAuth. We never ask for or store your Google password, and the tokens Google issues are used only to keep order monitoring and accepts working.
You can unlink an inbox or switch the bot off at any time in the portal. Once an inbox is unlinked, we stop processing new mail for it.
This section covers our safeguards for sensitive data, including Google user data received through Google OAuth and the Gmail API: access tokens, refresh tokens, and the limited email metadata and content used only for order monitoring.
Encryption in transit: traffic between your browser, BPO Scale servers and Google APIs is protected with HTTPS/TLS, so Google user data cannot be read while it moves.
Secure storage at rest: Google OAuth access and refresh tokens are kept on secured servers behind access controls. Portal passwords are stored with one-way hashing. Vendor portal credentials and similar secrets are encrypted before they are stored. We never store your Google account password.
Access controls: only authorized personnel and the automated services that need it to run, secure or support the product can reach systems holding Google user data. We apply least-privilege access, authenticate administrative systems and monitor operations as a production service should.
Limited use: Google user data is used only to deliver the core BPO Scale service — finding matching vendor order emails, showing related portal activity, marking processed emails as read where needed, and reading verification codes when a portal sign-in requires them. It is never used for advertising, sold, rented or used for unrelated profiling.
This section explains how long Google user data is kept and how it is deleted.
What we keep: while an inbox is linked, we keep the Google OAuth tokens needed to call the Gmail API and limited operational records derived from Google user data — for example order subject lines, timestamps, ZIP and filter results, accept or skip status and short-lived processing logs — so you can review history, billing and support activity in your portal.
For how long: OAuth tokens are kept only while the inbox connection is active and needed for the service. Operational records derived from Google user data are kept while your BPO Scale account is active. We never keep a full copy of your mailbox.
How to remove access: unlink a Gmail inbox in the portal at any time, or revoke BPO Scale in your Google Account permissions. When you do, we stop processing new mail for that inbox and revoke or delete its OAuth tokens so the app can no longer reach that Google account.
Deleting your account: you can ask us to delete your BPO Scale account and associated Google user data through the portal where available or by emailing hello@bposcale.com. After verifying the request we delete or anonymize OAuth tokens and personal Google-linked account data within 30 days, except limited information we must keep longer for legal, tax, fraud-prevention, security or dispute-resolution reasons. You can also email hello@bposcale.com to ask what Google user data we hold, or to have it corrected or deleted.
Payments are processed by Stripe. Card numbers, expiry dates and security codes are entered on Stripe’s hosted checkout and stored by Stripe under its own security standards; they never pass through or rest on BPO Scale servers.
From Stripe we receive what we need to run your wallet: a customer reference, a reference to each saved card with its brand and last four digits, and the amount, status and time of every payment, refund or dispute. Stripe’s handling of your payment information is described in Stripe’s own privacy policy.
When you register we store the details you give us — such as your email, display name, optional state and the username created for you — together with your agreement to our terms and billing records for accepted orders, so we can sign you in and show accurate history.
Administrators can see account status for approvals, support and billing questions. That access is limited to portal records; it does not include reading your personal email.
We do not sell your data to brokers or marketers. We do not share inbox contents with unrelated third parties; we share data only with the providers that run the service, such as Google for inbox access and Stripe for payments. We do not use your email for anything beyond order automation and running your account.
If we ever change how data is handled in a material way, we will update this policy and tell you clearly before the new practice starts.
Ask what we hold, request deletion, or get help unlinking Gmail — we reply as quickly as we can.