Effective date: September 5, 2026
BioSignals Automation Email is a company-operated service used to send and receive operational, support, and approved patient-service email through biosignals.support@gmail.com. It is not an emergency or crisis-response channel.
Google data we access
After the BioSignals support account owner grants OAuth consent, the service may:
- send email from the authorized support mailbox;
- read incoming mailbox messages and routing metadata needed to identify and process replies.
The current deployed inbound observer requests message metadata only. It stores provider message and thread identifiers, the presence of reply-routing headers, and a cryptographic pseudonym of the sender. It does not store message subjects, message bodies, attachments, or the sender's plain-text email address in the automation database.
How we use the data
Google user data is used only to operate the requested email channel: delivery, reply detection, technical support, service administration, security, reliability, and approved BioSignals communication workflows. We do not use Google user data for advertising, sell it, or use it to train generalized artificial-intelligence or machine-learning models.
Limited Use
BioSignals' use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Sharing and service providers
We do not sell Google user data. Data is processed only by BioSignals and infrastructure providers needed to operate the service, including Google for Gmail delivery and DigitalOcean for the protected automation server. We do not permit these providers to use the data for unrelated purposes.
Security and retention
Connections use encrypted HTTPS. OAuth credentials are stored outside the application code in a restricted server secret store. Persisted sender identities are pseudonymized. Operational metadata is retained only as needed for service operation, audit, security, and legal obligations, and is protected from public access.
Your choices and deletion requests
The Google account owner can revoke the application's access at any time from Google Account connections. To ask about stored data, request deletion, or exercise a privacy right, contact biosignals.support@gmail.com. Revoking access stops future Gmail API access but may not remove records that must be retained for security or legal obligations.
Changes and contact
We may update this notice when the email service changes. The effective date above will be updated when material changes are published. Questions can be sent to biosignals.support@gmail.com.