Privacy Policy

1. Introduction

Babuger ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI SDR platform and related services, including when you sign in with your Google account or use Gmail as an email provider.

2. Information We Collect

2.1 Information You Provide

• Account registration details (name, email address, company name)
• Lead and contact data you upload to our platform
• Email content, templates, and communication data processed by our AI agents
• Calendar and scheduling preferences
• Payment and billing information

2.2 Information from Google Sign-In

When you choose to sign in using "Sign in with Google," we receive the following information from your Google account:

• Your name and email address
• Your Google profile picture
• Your unique Google account identifier

We use this information solely to create and authenticate your Babuger account. We do not access your Google contacts, Google Drive, or any other Google services beyond what is required for authentication.

2.3 Email Provider Data

When you configure Gmail or another email provider for sending outreach emails through our platform, we may process:

• Email addresses of your leads and recipients
• Email content composed and sent by our AI agents on your behalf
• Delivery status, open rates, and reply tracking metadata
• Inbound reply content for AI-powered intent classification and response generation

2.4 Automatically Collected Information

• Device and browser information (user agent, screen resolution)
• IP address and approximate location
• Usage patterns, feature interactions, and session data
• Cookies and similar tracking technologies (see Section 6)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our AI SDR services
• Authenticate your identity and manage your account
• Process and send emails on your behalf through our AI agents
• Classify inbound email intent and generate appropriate responses
• Schedule meetings and manage calendar integrations (Cal.com)
• Analyze and optimize outreach performance and conversion metrics
• Enforce usage limits based on your subscription tier
• Send you technical notices, security alerts, and support messages
• Detect and prevent fraud, abuse, and violations of our terms
• Comply with legal obligations

4. Google API Services — Limited Use Disclosure

Babuger's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data for the purposes described in this Privacy Policy (account authentication and profile information display).
• We do not use Google user data to serve advertisements.
• We do not allow humans to read your Google user data unless we have your affirmative consent, it is necessary for security purposes, to comply with applicable law, or the data is aggregated and anonymized for internal operations.
• We do not transfer Google user data to third parties except as necessary to provide or improve our services, to comply with applicable law, or as part of a merger, acquisition, or asset sale with prior notice.

5. Data Sharing and Third-Party Services

We do not sell your personal information. We share data with the following categories of third-party service providers, solely to operate and deliver our platform:

• Authentication: Google OAuth (for "Sign in with Google" functionality)
• Email delivery: MailerSend, SendGrid, and Resend (to send and track outreach emails on your behalf)
• AI processing: OpenRouter and Google Gemini (to power our AI agent's intent classification and email generation)
• Calendar scheduling: Cal.com (to book and manage meetings)
• Hosting and infrastructure: Vercel (frontend), Render (backend), Supabase (database)

All third-party providers are bound by their own privacy policies and, where applicable, data processing agreements. We encourage you to review their privacy practices.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your authentication session after login (including Google OAuth sessions)
• Remember your preferences and settings
• Understand how you use our platform to improve the experience

You can control cookie preferences through your browser settings. Disabling cookies may affect certain functionality, including the ability to stay signed in.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, secure token storage for authentication credentials, and regular security assessments. Google OAuth tokens are stored securely and are never exposed to client-side code. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide our services. Specific retention periods include:

• Account data: retained until you delete your account
• Email and conversation data: retained for the duration of your account, or as required for compliance with email regulations
• Usage and analytics data: retained in aggregated form for up to 24 months
• Google authentication tokens: retained only while your account is active and revoked upon account deletion or unlinking

You can request deletion of your data at any time by contacting us. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

9. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your data for certain purposes
• Restriction: Request that we limit processing of your data
• Withdraw consent: Where processing is based on consent, withdraw it at any time

9.1 Google Account Controls

You can revoke Babuger's access to your Google account at any time by visiting your Google Account permissions page. Revoking access will prevent you from using "Sign in with Google" but will not delete your Babuger account. You can still access your account using email and password credentials if configured.

9.2 European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal bases for processing your personal data include: performance of a contract (providing the Service), legitimate interests (improving our platform and preventing fraud), consent (where you opt in to optional features), and compliance with legal obligations.

9.3 California Residents (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information as defined by the CCPA.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our service providers operate. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy and applicable data protection laws, including standard contractual clauses where required.

11. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal data from a child, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date and, where required, by sending you an email notification. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about our data practices, please contact us at privacy@babuger.com