Your inbox staysprivate

Pulse exists to help appraisal and BPO operators accept vendor orders faster — not to read, mine, or monetize your personal communications.

We built this service with a simple rule: your inbox is yours. We process only what is required to detect and accept matching order broadcasts on your behalf.

Pulse does not open, browse, or review your Gmail for personal messages, client conversations, or unrelated content. Our systems look for vendor order broadcasts that match your ZIP and filter rules — nothing more.

We do not use your email content for advertising, profiling, resale, or training third-party models. Humans at Pulse do not routinely access your mailbox.

When the bot is enabled, incoming messages are evaluated against your configured rules (ZIP codes, optional state or amount filters, and active hours). If a message qualifies as an order broadcast you want to accept, our system acts on it through the vendor portal.

Metadata needed for your dashboard — such as subject lines, timestamps, ZIP, and accept status — may be stored so you can review orders and billing. That is operational data for your account, not a copy of your entire inbox.

You connect Gmail through Google OAuth. We never ask for or store your Google password. Tokens are used solely to maintain the connection required for order monitoring and accepts.

You can disconnect a linked inbox or turn off the bot at any time from your operator portal. When you unlink, we stop processing new mail for that inbox.

This section describes our data protection mechanisms for sensitive data, including Google user data obtained through Google OAuth and the Gmail API (access tokens, refresh tokens, and limited email metadata/content used only for order monitoring).

Encryption in transit: All connections between your browser, BpoPulse servers, and Google APIs are protected with HTTPS/TLS so Google user data cannot be read in transit.

Encryption and secure storage at rest: Google OAuth access and refresh tokens are stored on secured servers and protected with access controls. Portal account passwords are stored using one-way password hashing. Vendor portal credentials and similar secrets are encrypted at rest before storage. We do not store your Google account password.

Access controls: Access to systems that store or process Google user data is limited to authorized personnel and automated services that require it to operate, secure, or support the product. We apply least-privilege access, authentication for administrative systems, and operational monitoring appropriate to a production service.

Use limitation: Google user data is used only to provide the core BpoPulse service (detect matching vendor order emails, show related portal activity, mark processed emails as read when needed, and read verification codes when portal login requires them). We do not use Google user data for advertising, selling, renting, or unrelated profiling.

This section explains our retention and deletion practices for Google user data.

What we retain: While your Gmail inbox remains linked, we retain Google OAuth tokens needed to call the Gmail API, plus limited operational records derived from Google user data (for example order-related subject lines, timestamps, ZIP/filter match results, accept or skip status, and short-lived processing logs) so you can review history, billing, and support activity in your portal.

How long we retain it: Google OAuth tokens are retained only for as long as the inbox connection is active and required for the service. Operational Google-derived records are retained while your BpoPulse account remains active. We do not keep a full copy of your Gmail mailbox.

How you delete or revoke access: You may disconnect or unlink a Gmail inbox at any time in the operator portal, or revoke BpoPulse access in your Google Account permissions. When you unlink or revoke access, we stop processing new mail for that inbox and revoke or delete the associated Google OAuth tokens so our app can no longer access that Google account.

Account deletion requests: You may request deletion of your BpoPulse account and associated Google user data by using the portal controls where available or by emailing support@bpopulse.com. After a verified deletion request, we delete or anonymize Google OAuth tokens and personal Google-linked account data within 30 days, except for limited information we are required to keep longer for legal, tax, fraud-prevention, security, or dispute-resolution purposes. You can also contact support@bpopulse.com to ask what Google user data we hold and request correction or deletion.

We store information you provide when registering — such as username, email, display name, and billing-related records for accepted orders — so the portal can authenticate you and show accurate history.

Administrators may access account status for approval, support, and billing disputes. That access is limited to portal records, not discretionary reading of your personal email.

We do not sell your data to data brokers or marketers. We do not share your inbox contents with unrelated third parties. We do not use your email for purposes outside order automation and account operation.

If we ever need to change how data is handled in a material way, we will update this policy and communicate clearly before new practices take effect.

Questions about privacy?

If you have questions about how Pulse handles your data, or you want to request account deletion, Gmail unlink help, or other privacy changes, contact us and we will respond as soon as possible.

Contact our team · support@bpopulse.com