UP1 · Brightside Revenue Company

How UP1 uses Google user data

UP1 is a product brand of Brightside Revenue Company. This page explains how Email OS uses Google user data when you connect Gmail. It supplements our Privacy Policy and Terms of Service.

Gmail API scopes we request

  • openid / userinfo.email — Identify which Google account is connected to your workspace mailbox.
  • gmail.readonly — Read inbox threads and messages needed for CRM email workflows (sync, thread detail, AI features you trigger).
  • gmail.send (optional, separate reconnect) — Send only email drafts you have reviewed and explicitly confirmed in UP1. Default connection does not request send scope.

How we use Gmail data

  • Sync up to a limited number of recent inbox threads and import threads that match CRM lead emails.
  • Store message metadata and bodies needed to show conversation history on linked leads.
  • Let you create manual or AI-assisted reply drafts for your review.
  • Summarize threads or analyze risk only when you click those actions.
  • Import attachments to Document AI only when you click import on a specific file.

What we do not do

  • No auto-send — AI never sends email without your explicit Review & Send confirmation.
  • No background marketing blasts or bulk campaigns through Gmail.
  • No sale of Google user data.
  • No use of Gmail content to train general-purpose AI models.
  • No advertising based on mailbox content.

Your control

You can disconnect Gmail in Email OS provider settings at any time. Disconnect stops further API access using stored tokens. Admins manage who may connect mailboxes in your organization.

Data storage

OAuth tokens are kept server-side to perform sync and send on your behalf. CRM-imported messages and drafts live in your organization's UP1 workspace. See the Privacy Policy for retention basics.

Google verification

Sensitive Gmail scopes may require Google's OAuth verification before broad customer use. Verification is submitted manually in Google Cloud Console; completing these public pages does not by itself mean Google has approved the app.