Privacy
BİSA
BİSA is a B2B customer-relationship and prospecting tool published by BİSA SAS. This page states what the tool accesses when you connect your Google account, what is kept, and how to have it deleted.
Data controller
- BİSA SAS, 20 place des Halles, 67000 Strasbourg, France.
- Contact: direction@bisas.fr.
- Processing is governed by the European General Data Protection Regulation (GDPR).
Which Google permissions are requested
- calendar.events — Calendar: to place a meeting in the calendar of the person who will hold it, and to move or cancel it.
- gmail.readonly — Mailbox, read only: to recognise exchanges with contacts already known to the tool. This permission allows no message to be sent, changed or deleted.
- openid, email — To know which Google account was connected.
- No other permission is requested: not your contacts, not your files, not your photos. The application does not send email on your behalf.
What is read, what is kept
- Read: the headers of messages (sender, recipients, subject, date, message id) and their plain text.
- Kept: only exchanges with a person already recorded in the database. When neither the sender nor the recipients are known, nothing is kept: only a counter goes up.
- Internal exchanges, between addresses of the company's own domains, are not kept.
Google API Services User Data Policy
- The use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- https://developers.google.com/terms/api-services-user-data-policy
Where the data lives, and for how long
- The refresh token is encrypted by the application before it reaches the database, and appears on no screen.
- Data is hosted at Supabase (Frankfurt, European Union). It is not sold, not used for advertising, and not given to the training of artificial intelligence models.
- Business data is kept for as long as the company that opened the account is a customer; the Google token is deleted as soon as the connection is removed.
Removing access, and your right to deletion
- For calendar: Settings > My account > « Disconnect ». For a mailbox: Settings > Mailboxes > « Disconnect ». The permission is withdrawn at Google at the same time.
- Revocation is also possible from myaccount.google.com.
- To access your data, correct it or have it deleted, write to direction@bisas.fr: the request is handled within a reasonable time.
Last updated: 15 October 2026
BİSA SAS · Strasbourg · direction@bisas.fr