Privacy Policy

1. Overview

Bavardio provides go-to-market workflow tools that help authorized team members manage content packages, lead follow-up, campaign review, email sending, and operational reporting. Bavardio GTM Email is the Google OAuth application used to connect an authorized Gmail account so reviewed GTM emails can be sent from that account.

The GTM workflow is designed around human review. Campaign copy, lead follow-up messages, and other outbound communications should be reviewed and approved by an authorized user before sending.

2. Information We Collect

We may collect and process account and user information, lead and contact information, campaign and content information, Gmail OAuth information, email delivery and engagement data, and technical or security information.

• Account and user information may include name, email address, role, login status, password-change status, and assigned GTM permissions.
• Lead and contact information may include name, email, phone, company, role, source, interest, next action, owner, follow-up date, meeting details, and notes.
• Campaign and content information may include articles, email drafts, social copy, video notes, lead magnet selections, review status, reviewer notes, publish dates, and destination URLs.
• Gmail OAuth information may include OAuth client connection status, refresh token, connected email address, from name, from email, and OAuth timestamps.
• Email delivery and engagement data may include recipients, subject, sent time, message token, open count, click count, clicked URL, IP address, user agent, and event timestamps.
• Technical and security information may include IP address, user agent, failed-login evidence, lockout records, audit events, API responses, logs, and timestamps.

3. Google User Data

When an authorized user connects Gmail to Bavardio GTM Email, the application requests Google OAuth scopes for Gmail sending and connected-account identification.

• https://www.googleapis.com/auth/gmail.send is used to send reviewed GTM email messages through the connected Gmail account.
• https://www.googleapis.com/auth/userinfo.email is used to identify and display the connected Google account email address.

The application does not use these scopes to read inbox messages, list mailbox contents, search Gmail, delete email, modify mailbox labels, or access Google Drive. Gmail access is limited to sending approved messages and identifying the connected account email address.

Bavardio use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Information

• Operate the Bavardio GTM app, including login, role-based access, dashboards, setup checks, and workflow pages.
• Capture and organize leads from forms, conferences, webinars, lead magnets, and manual entry.
• Prepare, review, approve, publish, and report on GTM content packages.
• Send approved GTM email through Gmail or WordPress mail, depending on configured settings.
• Track operational email opens and clicks so Bavardio can understand whether follow-up is working.
• Generate daily briefs, notifications, audit events, security alerts, and internal reports.
• Maintain security controls, including failed-login lockouts, allowlists, audit history, and incident investigation evidence.

5. Sharing And Disclosure

We do not sell Google user data, lead data, or GTM workflow data. We may share information only as needed to operate the service, comply with law, protect rights and security, or support authorized business workflows.

Authorized Bavardio users may have role-appropriate access to leads, campaigns, reports, email settings, and audit trails. Service providers may support hosting, email delivery, analytics, security, backup, and operations. Google APIs are used for OAuth token exchange, account email lookup, and Gmail send requests initiated by authorized users.

6. Data Retention

Bavardio keeps GTM records for as long as they are needed for campaign history, lead follow-up, business operations, security, compliance, or backup purposes. Authorized administrators may update, archive, export, or delete records according to the organization internal process and any applicable legal obligations.

Gmail refresh tokens are stored only to keep the authorized Gmail connection available. Disconnecting Gmail removes the active OAuth connection from the application settings.

7. Security

• Role-based permissions limit who can view or manage GTM workspaces.
• WordPress authentication and GTM-specific login controls protect access.
• Security lockouts and alarms help detect suspicious sign-in activity.
• Audit records capture high-value administrative and workflow actions.
• OAuth credentials and API keys should be restricted to authorized administrators.

8. Your Choices

A Google account connection can be disconnected from the GTM Email settings page. Authorized users can ask an administrator to update account details, role assignments, or saved workflow preferences. Lead contacts may request correction or deletion of their personal information where applicable.

9. Contact

Questions about this Privacy Policy or Bavardio GTM Email can be sent to support@bavardio.com.