Privacy Policy

Last updated 23 August 2025

Privacy Policy

At Bryndorf, we are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, store, and protect your personal data in relation to our website, services, and automation tools, including those using Google APIs (such as Google Calendar and Google Business Profile). If you have any questions, please contact us at support@bryndorf.com.

 

1. What Personal Data We Collect

We may collect the following types of personal data:

 
1.1. Automatically Collected (Device Information)
  • IP address

  • Browser type and version

  • Time zone and language settings

  • Referring pages and interactions

  • Cookies (for admin and service functionality)

 
1.2 Manually Provided by You
  • Name, email, phone number, company, and address (during signup or contact)

  • Payment details, where applicable

 
1.3 Google OAuth Data (With Consent)

When you connect your Google account through our service, we securely collect:

  • Access and refresh tokens (OAuth 2.0)

  • Google Calendar event data (read-only)

  • Google Business Profile (GBP) review data (manage)

 
1.4 Specific Google User Data Collected

We collect the following Google user data only with your explicit consent via OAuth:

  • Google Calendar: Read-only access to event titles and descriptions (to scan for user-added keywords like “DONE” for automation triggers and customer contact details for being able to send review requests). No other event details (e.g., locations, or full content) are accessed or stored.

  • Google Business Profile (GBP): Manage access to review data (to detect new reviews and generate automated responses).

This data is not stored long-term, shared beyond consented integrations, or used for any prohibited purposes such as advertising, selling, or AI training.

 

2. Why We Process Your Data

We collect and use your data for the following purposes:

  • Service Delivery: To perform agreed automations like checking for keywords/contact details in calendar event titles/descriptions to trigger review requests, and detecting/responding to GBP reviews. Google user data is used solely for these features and not for any other purposes, such as targeted advertising, data selling, or training AI models.

  • Authentication: To securely access your Google services with your consent.

  • Support & Communication: To answer inquiries and deliver updates.

  • Analytics & Improvement: To enhance service performance based on anonymized logs.

  • Legal Compliance: To meet our obligations under GDPR and other regulations.

 

3. Legal Bases for Processing

Under the GDPR, we rely on the following legal grounds:

  • Consent: You grant permission during the OAuth connection process.

  • Contractual Necessity: To fulfill our agreement with you.

  • Legitimate Interests: To improve and support the service, unless overridden by your rights.

 

4. Data Sharing and Disclosure

We never sell your data. We only share it:

  • With Google, via secure APIs and OAuth, only with your permission and strictly for the consented automations (e.g., Calendar keyword scanning, fetching contact details and GBP review access).

  • With Zapier, to perform automations on your behalf using your consented Google data; no data is used beyond this.

  • With Meta, through the Meta Pixel, to track user interactions (e.g., page views, checkout initiations, purchases) for analytics and advertising purposes, subject to your cookie consent. Meta’s Privacy Policy is available at: https://www.facebook.com/privacy/policy.
  • With third-party service providers (e.g., hosting or email services), under GDPR-compliant agreements.

  • When required by law or to protect legal rights and safety.

  • We do not share Google user data for marketing, analytics beyond service improvement, or any prohibited activities under Google’s API policies.

 

5. Data Storage and Security

All personal data is stored securely on our servers or with GDPR-compliant third-party providers. OAuth tokens are encrypted and stored in your client profile, not shared. Google OAuth tokens, Calendar event data, and GBP review data are encrypted at rest and in transit, with access limited to authorized personnel only.

We retain:

  • Client data until service cancellation or deletion request.

  • Google OAuth tokens and related data until you revoke access or terminate your account, after which they are deleted promptly.
  • Logs for up to 12 months for debugging and analytics.

We use encryption, firewalls, and strict access controls, but no system is 100% secure.

 

6. International Data Transfers

If you’re located in the EU, please note your data may be processed in the United States or other jurisdictions. We use safeguards such as Standard Contractual Clauses (SCCs) to ensure adequate protection of your data.

 

7. Your Rights (EU/EEA Residents)

You have the right to:

  • Be informed about how your data is used

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Restrict processing in certain situations

  • Object to certain uses

  • Data portability – receive your data in structured format

  • Withdraw consent at any time (e.g., by disconnecting your Google account, unsubscribing or revoking OAuth permissions in your Google account.)

To exercise these rights, email us at support@bryndorf.com.

 

8. Cookies

Our website and services use cookies and similar technologies to enhance your experience, ensure core functionality, and track limited user behavior.

 
8.1. What Are Cookies?

Cookies are small text files placed on your device (computer or mobile) when you visit a website. They help us recognize your device and remember your preferences or actions.

 
8.2. Types of Cookies We Use
  • Essential Cookies
    These are required for the website and plugins to function properly (e.g., admin login sessions, security settings).

  • Performance & Analytics Cookies
    These help us understand how visitors use our site (e.g., which pages are visited, time spent, and bounce rates) so we can improve performance.

  • Functionality Cookies
    These remember choices you make (such as language or region) to personalize your experience.

  • Affiliate Tracking Cookies
    We use cookies to track affiliate referral links. If you click on a tracked link to visit our website, a cookie may be stored in your browser to credit the referring partner. These cookies are valid for up to 30 days, after which they expire automatically.

  • Purchase Tracking Cookies
    We set a temporary cookie
     when you initiate a checkout, storing non-personal data (e.g., referral ID, tracking ID, purchase value) for 24 hours to facilitate the checkout process and affiliate tracking. This cookie is essential for completing purchases.
 
8.3. How You Can Control Cookies

You can control or delete cookies at any time through your browser settings. Most browsers allow you to:

  • See what cookies are set

  • Delete existing cookies

  • Block future cookies

Please note that disabling cookies may limit the functionality of certain features on our site, especially those related to plugin access or session management.

For more detailed control, third-party browser extensions or tools are also available that can help you manage cookie usage.

 
8.4. Cookie Consent

When you first visit our site, you may be prompted with a cookie banner asking for your consent to use non-essential cookies, such as those for analytics (e.g., Meta Pixel) and affiliate tracking. You can update your preferences or withdraw consent at any time by clearing cookies in your browser settings or using our cookie management tool (if available). Note that essential cookies, like those required for checkout functionality, do not require consent but can be managed via your browser settings.

 

9. Links to Other Website

We may link to third-party services (e.g., Google). These are governed by their own privacy policies. For example, Google’s Privacy Policy is available at: https://policies.google.com/privacy. We are not responsible for the privacy practices of other websites or services.

 

10. Updates to This Policy

This Privacy Policy may be updated from time to time to reflect legal or operational changes. Updates will be posted on this page and significant changes will be communicated via email. 

 

11. Contact Information

For privacy-related questions or to exercise your rights, contact us:

Bryndorf
Address: Alsättersgatan 9B, 584 35, Linköping, Sweden
Email: support@bryndorf.com