Privacy policy

Who we are

Backscribe is operated by Resonator Consulting, LLC, a Delaware limited liability company. You can reach us about anything on this page at gerry@resonatorconsulting.com.

Where a business connects Backscribe to its Salesforce org and its employees' mailboxes, that business decides what is collected and why. In data-protection terms it is the controller and we are its processor, acting on its instructions. For the information we hold about our own account holders and website visitors, we are the controller.

What the service does

Backscribe is a background service that connects a Google Workspace mailbox and calendar to a Salesforce org. It reads business email and meetings, works out which people, companies, and opportunities in Salesforce they relate to, and writes them into Salesforce as ordinary records that the organisation's own reports and automation can see.

There is nothing to install in the inbox. Each person authorises access once for Salesforce and once for their mailbox, and can withdraw either at any time.

Information we process

Depending on what has been connected and how an administrator has configured it:

• Account and identity information: your name, email address, and your Salesforce user and organisation identifiers.
• Mailbox information obtained through Google APIs: the sender, recipients, timestamps, message and thread identifiers, and headers of business email, together with message content at the moment it is synced.
• Calendar information obtained through Google APIs: event times, organiser and attendees, recurrence, and cancellation state. Events marked private are not read.
• Salesforce information: the contact, lead, account, and opportunity records we read in order to work out what an email or meeting relates to.
• Operational records: an audit entry for each item explaining what happened to it and why, plus error reports and service logs.

What we store, and what we do not

This is the part worth reading closely, because the distinction matters.

We store addressing metadata on our own servers: who an email was between, when it was sent, its message and thread identifiers, the key used to prevent duplicates, and a one-way hash of the subject line. Subject lines themselves are stored only if the organisation's administrator has left them enabled; a strict mode stores participants and timestamps only, because some security teams reasonably treat a subject line as content.

We do not store message bodies or attachment contents on our servers. Bodies do, however, pass through the service while an item is being synced — they are read from the mailbox and written to Salesforce, and are not retained by us afterwards. We would rather say that plainly than imply we never encounter your email, which would not be true.

Content is also excluded from our logs and error reports by design, not by convention. Message bodies, subject lines, attachment filenames, calendar titles, descriptions and locations, and access credentials are stripped before anything is written to a log or sent to our error-reporting provider. Email addresses appear in logs only as their domain, with the person and the local part removed.

Google user data

Backscribe's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice that means the data we obtain from Google is used only to provide the features described on this site, and specifically:

• It is not used for advertising, and it is not sold or transferred to data brokers or information resellers.
• It is not used to train generalised artificial-intelligence or machine-learning models.
• It is not read by our staff, except with your explicit permission for a support request you have raised, where it is necessary for security or to comply with the law, or where the data has been aggregated and made anonymous.
• We request the narrowest scopes that make the service work, and read-only access to mail.

Salesforce data

We read the parts of a Salesforce org needed to match activity to the right records, and we write email and meeting records back under the administrator's rules and as the individual user, so the organisation's own permissions, validation rules, and automation apply exactly as they would to anything else.

Nothing is written to Salesforce without an explicit, recorded approval step while the service is in development.

Credentials and security

Authorisation tokens for Salesforce and for mailboxes are encrypted before they are stored, with the encryption key held separately from the database that holds the encrypted values, so that access to one is not access to the other. Tokens can be revoked by you at any time from your Google or Salesforce account, and revoking one stops the corresponding sync.

Data is encrypted in transit. Access to production systems is limited to people who need it to operate the service.

We do not hold a formal security certification today. We would rather state that than imply otherwise, and we will say so here when that changes.

Sub-processors

We use a small number of other companies to run the service:

• Render — application hosting and the PostgreSQL database, in the United States.
• Sentry — error reporting, configured to strip message content before anything is sent.

Retention and deletion

Metadata is kept for as long as the organisation's administrator has configured, and is purged automatically after that.

Disconnecting a mailbox deletes the items held for that mailbox. When an organisation stops using the service, we delete its data within 30 days.

Records that have already been written into Salesforce belong to the organisation and live in its org; deleting data on our side does not remove them, and we cannot delete them on your behalf.

Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to receive a copy of it, or to object to how it is used.

If your employer connected Backscribe, they decide what is collected, so the quickest route is usually your own administrator — and where we act as their processor, we act on their instructions. You can always write to us at gerry@resonatorconsulting.com and we will help.

Where data is processed

The service runs in the United States. If you are outside the United States, information covered by this policy is transferred there. A European hosting option is on our roadmap and is not available today.

Children

Backscribe is a business product. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.

Changes to this policy

When this policy changes we update the effective date at the top. If a change materially affects how we handle information already collected, we will tell affected customers directly rather than relying on this page alone.

Contact

Questions, requests, and complaints about this policy go to gerry@resonatorconsulting.com, addressed to Resonator Consulting, LLC.