Introduction
NotiQ is provided by 2MTN AB and respects your privacy. We are committed to protecting it. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including when you connect third-party accounts such as Gmail or when we retrieve public business listing information to support lead discovery and outreach.
If you do not agree with this policy, please discontinue using the Service.
Information We Collect
We may collect the following types of information when you interact with our Service:
- Account information: name, email address, login credentials, billing details, and workspace or team settings.
- Business and lead data: prospect or client information you upload or generate using the Service, and public business listing information we retrieve on your behalf (for example business name, location, website, contact details, and review text used for personalization).
- Gmail connection data: if you connect a Gmail account, we collect Google account identifiers, profile information, OAuth tokens, and Gmail-related data needed for outreach features. See Google User Data for full details on what we access, use, store, and share.
- Email engagement data: when tracking is enabled on sent messages, we may record open and link-click events associated with those emails.
- Technical data: IP address, browser type, operating system, device identifiers, and usage logs.
- Cookies and tracking technologies: information from cookies, analytics tools, and similar technologies used to operate and improve the Service.
- Support communications: if you contact us through our website (for example via live chat or email), we collect the information you choose to provide, such as your name, email address, and message content.
Google User Data
When you connect a Google or Gmail account to NotiQ, we access, use, store, and share Google user data only as described in this section and elsewhere in this Privacy Policy.
What Google user data we access and collect
Depending on your use of the Service, Google user data may include:
- Basic profile information (such as your email address, display name, and profile photo) to identify the connected account
- OAuth tokens and connected-account credentials needed to maintain the Gmail connection
- Gmail message and thread identifiers, sender and recipient addresses, subjects, message snippets, reply content, and send/reply timestamps for threads related to outreach sent through NotiQ
We do not read your entire Gmail mailbox. We do not access or modify your Gmail settings, filters, or labels. Gmail data is not used for lead discovery or AI email personalization; those features use public business listing information and data you provide.
Google OAuth scopes
The Google OAuth scopes we request when you connect Gmail are:
openid— associate you with your personal info on Googlehttps://www.googleapis.com/auth/userinfo.email— identify your connected account email addresshttps://www.googleapis.com/auth/userinfo.profile— identify your connected account name and profile informationhttps://www.googleapis.com/auth/gmail.send— send outreach email on your behalf from your connected Gmail accounthttps://www.googleapis.com/auth/gmail.readonly— read messages only as needed to detect replies, maintain threading, and identify delivery failures for outreach sent through NotiQ
How we use Google user data
- Send outreach emails from Gmail accounts you connect, on your instructions
- Detect replies, bounces, and delivery-related notifications, and display relevant conversations in the NotiQ inbox
- Categorize inbound replies (for example as interested or not interested) using AI-assisted analysis of limited reply content
- Generate suggested draft replies based on inbound reply context when you use those features
- Identify and manage connected Gmail accounts in your workspace
- Maintain, secure, and troubleshoot the Gmail integration you authorized
We do not use Google user data to serve advertisements. We do not sell Google user data. We do not use Google user data to develop, train, or improve generalized artificial intelligence or machine learning models.
How we store Google user data
Google user data is stored on our secure cloud infrastructure for as long as needed to provide the Service. OAuth tokens and connected-account credentials are kept while your Gmail account remains connected. OAuth refresh tokens are stored server-side only and are not exposed to your browser or other workspace members through the app. Message and reply data saved in your campaigns or inbox is retained until you delete it or close your account. See Data Retention below for more detail.
How we share Google user data
We do not sell Google user data or share it with third parties for their independent advertising, marketing, retargeting, or data-broker purposes. We do not transfer Google user data for credit-worthiness or lending purposes. We do not use Google user data to build databases or user profiles unrelated to the outreach features described in this policy.
We may share limited Google user data with third-party AI processing providers that help us operate user-facing features you use. This may include transmitting the content of replies to outreach you sent through NotiQ (for example message text or snippets) to one or more language-model providers such as OpenAI, Anthropic, or Google solely to categorize responses (for example, interested vs. not interested) and to generate suggested draft replies.
We select providers based on operational needs and may change providers over time. We do not use Google user data for advertising, and we do not use it to develop, train, or improve generalized artificial intelligence or machine learning models. Providers process this data only as our service providers, under our instructions, and only to provide the Service to you.
We may also share Google user data with other service providers that help us operate the Service (such as cloud hosting providers), only to the extent needed to provide the Service on our behalf, and subject to appropriate confidentiality and security obligations. We may also share data when required by law or as part of a merger, acquisition, or sale of assets only with your explicit prior consent for Google user data.
Limited Use
The use of information received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. NotiQ's use of information received from Google APIs also adheres to the Google API Services User Data Policy.
If you connect Gmail, you authorize NotiQ to access your Google account through Google OAuth for the purposes described in this Privacy Policy. Google's privacy policy is available at https://policies.google.com/privacy.
How We Use Information
We use the collected data to:
- Provide, maintain, and improve the Service.
- Find and organize business leads based on public listing information and data you provide.
- Generate and personalize outreach content, including AI-assisted email copy using business and lead data you provide (not Gmail message content).
- Send outreach emails from Gmail accounts you connect to NotiQ, on your instructions.
- Detect replies, bounces, and delivery-related notifications, and display relevant conversations in the NotiQ inbox, including AI-assisted reply categorization and suggested draft replies for inbound messages.
- Measure email engagement (such as opens and link clicks) when tracking is included in sent messages.
- Process transactions and send billing information.
- Communicate updates, support responses, and service announcements.
- Detect, prevent, and address fraud, abuse, or legal issues.
- Comply with legal obligations and enforce our Terms of Service.
We do not use Gmail data to serve advertisements, and we do not sell personal data. We do not use Google user data to develop, train, or improve generalized artificial intelligence or machine learning models. Google user data is used only to provide user-facing outreach features described in this policy (such as sending email, detecting replies, displaying conversations in the NotiQ inbox, and AI-assisted reply categorization or suggested drafts where you use those features). See Google User Data for how we share limited reply content with AI processing providers.
Data Sharing
We do not sell your personal data. We do not share Gmail data with third parties for their independent advertising or marketing purposes.
We may share limited Gmail reply content with AI processing providers (such as OpenAI, Anthropic, or Google) only to provide user-facing outreach features such as reply categorization and draft reply suggestions. We do not share Google user data with AI providers for their independent advertising or model-training purposes.
We may share information with:
- Service providers who help us operate the Service, such as cloud hosting and infrastructure providers, payment processors, analytics providers, and AI processing providers — only to the extent needed to provide the Service on our behalf and subject to appropriate confidentiality and security obligations. Limited Gmail reply content shared with AI providers is described in Google User Data.
- Google's services when you connect Gmail, to authenticate your account and send or read messages through the Gmail API according to your authorization (this is API communication with Google as the email provider, not a sale or disclosure of your data to Google for Google's independent use).
- Legal authorities if required by law, court order, or government request.
- Business transfers (e.g., merger, acquisition, or sale of assets), in which case your information may transfer as part of that transaction, subject to this Privacy Policy. For Google user data, any such transfer requires your explicit prior consent.
Data Retention
We retain personal data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.
Gmail connection data: OAuth tokens and connected-account credentials are kept while your Gmail account remains connected to NotiQ. When you disconnect Gmail, we revoke access and delete stored connection credentials. Message and reply data already saved in your campaigns or inbox may remain until you delete it or close your account. See Google User Data and Your Rights for deletion options.
Account closure: When you close your account, we delete or anonymize personal data within a reasonable period, subject to backup retention and legal requirements.
Backups may retain copies for a limited time before they are overwritten or purged according to our infrastructure providers' schedules.
International Data Transfers
Your data may be processed in countries other than your own, including countries outside the European Economic Area (for example, where our cloud infrastructure or service providers operate).
When we transfer personal data internationally, we implement appropriate safeguards as required by applicable law, such as Standard Contractual Clauses approved by the European Commission or equivalent mechanisms.
Your Rights
Depending on your location (for example, under the GDPR or CCPA), you may have the right to:
- Access, correct, or delete your personal data
- Object to or restrict certain processing
- Request data portability
- Withdraw consent at any time, where processing is based on consent
Gmail access:You can disconnect a Gmail account at any time from Accounts in NotiQ. You can also revoke NotiQ's access in your Google Account permissions.
Deleting Google user data: to delete Google user data we store, disconnect Gmail in NotiQ (which revokes access and deletes stored connection credentials) and contact us at automation@notiq.io if you want message or reply data removed from your campaigns or inbox.
To exercise other rights, contact us using the details below. We may need to verify your identity before responding. We aim to respond within the timeframes required by applicable law.
Security
We implement technical and organizational measures designed to protect your data, including:
- Encryption in transit (such as HTTPS/TLS) for data sent between your browser and our Service
- Encryption at rest for OAuth tokens, connection credentials, and stored Gmail-related data within our cloud infrastructure
- Access controls limiting who can access production systems and customer data
- Secure storage of connection credentials (including Gmail OAuth tokens) within our cloud infrastructure
- Monitoring and logging to help detect abuse or unauthorized activity
Our personnel do not read Gmail message content except where necessary for security investigations, legal compliance, or when you explicitly request support related to a specific message or account issue.
However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.
Third-Party Services
Our Service relies on third-party providers to operate. Their handling of information is governed by their own terms and privacy policies. We encourage you to review those policies when you use features that depend on them.
Google (Gmail and infrastructure)
NotiQ uses Google OAuth and the Gmail API when you connect a Gmail account. How we access, use, store, and share Google user data — including requested OAuth scopes and Limited Use requirements — is described in the Google User Data section above. We may also use Google cloud infrastructure to host and operate the Service.
Other providers
We use third-party AI processing providers for features such as AI-assisted email copy, reply categorization, and draft reply suggestions. When those features involve data obtained through Gmail, only the minimum content needed for the feature (such as reply text) is transmitted, and only for user-facing functionality described in this policy and in Google User Data. We may use other third-party providers for purposes such as payment processing, analytics, and retrieving public business listing information used for lead discovery. Outreach email copy is generated using business and lead data you provide, not Gmail message content. We share only the information necessary for those providers to perform services on our behalf.
Children's Privacy
Our Service is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us and we will take steps to delete it.
Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If changes are material, we will notify you by email or through an in-app notice before or when they take effect.
Contact Us
For questions about this Privacy Policy or to exercise your privacy rights, contact us:
- Company: 2MTN AB
- VAT: SE559239094101
- Address: Wergelandsgatan 46G, 16848 Bromma, Sweden
- Email: automation@notiq.io
We aim to respond within 5 business days, or within the timeframe required by applicable law for privacy requests.