Bizzy Privacy Policy

Google API scopes Bizzy requests

https://www.googleapis.com/auth/gmail.readonly

Read-only access to your Gmail messages and metadata. Bizzy uses this scope only to check the subject lines of your messages for production callsheets and, for messages that match, to read the email text. From those messages Bizzy extracts the information needed for invoicing reminders and draft invoices: subject, sender, shoot date, production company or client name, a matching contact, and any project name, rates, or fees in the email. Bizzy does not read the body of, index, or store messages that do not match.

https://www.googleapis.com/auth/userinfo.email

Access to your Google account email address. Used to identify which Google account you linked, to route Gmail notifications to your account, and to display it in Bizzy's Settings page and to Bizzy administrators providing support.

How Bizzy uses Gmail data

Callsheet detection. When you connect Gmail, Bizzy searches your mail from January 1 of the current year, including archived mail but not sent mail, spam, or trash, for callsheet subject lines. Bizzy then subscribes to Gmail push notifications for your inbox. When a new message arrives, Bizzy fetches its subject and sender. If the subject matches a callsheet keyword, Bizzy also fetches the email text. Up to 4,000 characters of that text are sent through OpenRouter, an AI routing service, to the DeepSeek V4 Pro large language model, which finds the production company or client name and the shoot date. If you accept Bizzy's prompt, Bizzy fetches the email again and sends up to 6,000 characters of its text, plus the subject line, client name, and shoot date, to the same model, which prepares your draft invoice, including any rates or fees in the email. Attachments are not read. Bizzy holds the raw email text only transiently in serverless function memory and discards it as soon as extraction completes.

Reminders and calendar. Callsheets you accept appear on your Bizzy calendar when they have a shoot date, titled with the client name or email subject, and Bizzy uses them to remind you to send an invoice.

No content indexing or AI training. Bizzy does not build a search index of your mailbox, no longer saves email text, and does not use Gmail data to train AI or machine learning models. Bizzy's requests instruct OpenRouter to use only AI providers that it identifies as not collecting user data.

Storage and security

Gmail OAuth refresh tokens are stored encrypted at rest in Bizzy's database. Email text is fetched into serverless function memory during processing, and Bizzy does not write it to durable storage. For new callsheets, Bizzy stores the subject, sender, Gmail message and thread IDs, detected client name, shoot date, matched contact, and the model's confidence score, plus the received date for mail found when you connect. If you accept a prompt, the draft invoice also stores the client name, project description, and line items, including any rates from the email. Once a draft invoice exists, its details are your own invoice records and are handled under the general privacy practices below. Excerpts of up to 500 characters saved by an earlier version of Bizzy remain on some older callsheet records until they are deleted.

All API traffic to Google and between Bizzy's services is transport-encrypted using TLS 1.2 or higher. Gmail tokens cannot be read from the browser. Bizzy's server-side functions use them to provide the features you enable, and access to production systems is limited to authorized administrators who operate and secure the service.

Data sharing

Bizzy does not sell, rent, or share Gmail data with third parties except as strictly necessary to provide the features you have enabled:

• OpenRouter and DeepSeek V4 Pro — for messages that match a callsheet keyword, email text is sent through OpenRouter to the DeepSeek V4 Pro model, run by a hosting provider that OpenRouter selects, to extract callsheet fields and prepare your draft invoice.
• Linq — if you have text messages turned on, the detected client name and shoot date are sent through Linq to text you the callsheet prompt, and later invoice reminders send the client name the same way. If Bizzy cannot identify a client, that name may be the sender's name.
• Postmark — if you send a draft invoice, its contents, which may include details from the email, are delivered through Postmark.
• Your connected calendars — if you save a shoot to a Google Calendar or iCloud calendar you connected, its title and details are sent there.
• Sentry — error reports may include a callsheet's sender address and client name.
• Infrastructure providers (Supabase, Vercel, Google Cloud Pub/Sub) — store and transport data solely to operate Bizzy's services.

Bizzy does not share Gmail data for advertising, analytics, or profiling purposes.

Deletion and revocation

You may disconnect Gmail at any time by either:

1. Opening your Email settings in Bizzy (www.bizzyinvoices.com/settings?tab=email) and choosing Disconnect Gmail. Bizzy asks Google to stop watch delivery, then clears its stored OAuth and watch data. This does not remove Bizzy from your Google account; use the option below for that.
2. Visiting https://myaccount.google.com/permissions in Google and removing Bizzy.

Bizzy reports exactly what the disconnect attempt proved. If Google reports that the grant was already invalid, Bizzy clears its copy but does not claim delivery stopped; the old watch lapses on Google's schedule. If a new Gmail connection finishes while a disconnect is running, that newer connection is kept and reported — run the disconnect again if you still want it removed.

After you disconnect, existing callsheet records stay in your account, including subject, sender, and message IDs. Pending prompts expire, and reminders you already accepted keep running. To have your callsheet records deleted, contact support@bizzyinvoices.com.

If a provider step fails, Bizzy keeps the connection visible and says it may still be connected. If Google access was revoked but local cleanup did not finish, Bizzy says cleanup is unfinished and asks you to retry. Google notes that revocation can take time to propagate.

Google API Services User Data Policy — Limited Use

Bizzy's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Bizzy:

• Limits the use of Gmail data to providing the user-facing features listed above.
• Does not use Gmail data to serve advertisements.
• Does not transfer Gmail data to third parties except as necessary to provide or improve the user-facing features, comply with applicable law, or as part of a merger, acquisition, or sale of assets with prior notice to users.
• Does not allow humans to read Gmail data unless (a) you give explicit consent for specific messages, (b) it is necessary for security purposes such as investigating abuse, (c) it is required for compliance with applicable law, or (d) the data has been aggregated and anonymized for internal operational analytics.