Privacy Policy

Effective date: 1 November 2026

1. Who we are

BioOS Mail Sync is operated by BIO AKTIV DOOEL Skopje, North Macedonia ("we"). Contact: nastev.ljupco@gmail.com.

2. Who the tool is for

Only company mailboxes of BIO AKTIV DOOEL Skopje and its affiliated companies, connected with the consent of each account holder. The tool is not available to the public or to children.

3. Google user data we access

• Source mailboxes (scope gmail.readonly): email messages including headers, body, attachments, labels and message metadata, and the account email address, to confirm that the correct account is connected.
• Central mailbox (scopes gmail.insert, gmail.labels, gmail.readonly): permission to add copied messages, to create and use the country labels, and to read the messages and settings needed to avoid duplicates and to confirm that no forwarding or automatic processing is triggered.

4. How we use the data

Only to copy business messages from the source mailboxes into the central company mailbox, to avoid duplicates, and to monitor that the copy is complete and up to date. We do not use the data for advertising, profiling or any other purpose.

5. Storage and security

Authorization tokens are stored encrypted on a company computer and are never shared. Message content is held only in memory while it is copied and is stored only in the Gmail mailboxes themselves. To prevent duplicates we keep an internal processing record of message identifiers, dates, sizes and checksums; it does not contain message text or attachments. Access is limited to the company owner and the systems he authorizes.

6. Sharing

We do not sell, rent or transfer Google user data to third parties, and we do not use it to develop, improve or train generalized artificial intelligence or machine learning models. BioOS Mail Sync's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Retention and deletion

Copied messages remain in the central company mailbox as company records. The internal processing record is kept while the integration is active and is deleted within 90 days after it ends. An account holder can revoke access at any time at myaccount.google.com/permissions and can ask us to delete the processing record for their mailbox by writing to the contact address.

8. Changes

We will update this page when the tool or its data use changes; the effective date shows the current version.