Sign In

Welcome Back

Please enter your details to sign in.

You need to sign in first to access this page

Or continue with
Not registered? Create an account

Privacy Policy

Last Updated: September 2026

1. Introduction

Welcome to BonusPoint (operated as BonusPoint / B2Scale). We respect your privacy and are committed to protecting your personal data. This privacy policy informs you how we collect, use, protect, and process your personal data when you visit our website, connect integrations (including Google Calendar), and utilize our AI Receptionist and business automation services.

2. Data We Collect

We may collect, use, store, and transfer different kinds of personal data about you, grouped as follows:

  • Identity Data: includes first name, last name, username, business name, or similar identifier.
  • Contact Data: includes email address and telephone numbers.
  • Technical Data: includes IP address, login data, browser type and version, timezone setting and location, operating system, and device information.
  • Usage Data: includes information about how you use our website, products, and services.
  • AI Interaction & Booking Data: includes conversation messages and appointment details (such as requested service, date, and time) when visitors interact with the AI Receptionist.
  • Google User Data (OAuth Integration): When you explicitly connect your Google account, we access Google Calendar data through the authorized scope (https://www.googleapis.com/auth/calendar.events).

🔒 3. Google API Services & User Data Policy Compliance

BonusPoint integrates with Google Calendar to provide automated appointment scheduling and real-time availability checks for businesses using our AI Receptionist.

A. What Google Data We Access and How We Use It

We only request access to the narrowest necessary permission: https://www.googleapis.com/auth/calendar.events.

  • Real-Time Availability: We check busy and free time slots on your primary Google Calendar during visitor interactions to prevent double-booking.
  • Appointment Creation: When a visitor explicitly confirms a booking with your AI Receptionist, we insert the confirmed appointment directly into your connected Google Calendar.

B. Google User Data Sharing, Disclosure, and Transfer

We do NOT share, transfer, disclose, or sell Google user data to third parties, data brokers, advertising platforms, or external marketing services.

Google user data (OAuth tokens and calendar events) is exclusively accessed by our application servers to fulfill the user-facing scheduling features requested by the account owner. We do not disclose Google user data to any external parties except where strictly required by law.

C. AI/ML Model Training Prohibition

Zero Model Training on Google User Data: Google Workspace user data received through Google APIs (including calendar events, busy times, appointment details, or associated metadata) is NEVER used to develop, improve, or train generalized or foundational artificial intelligence (AI) and/or machine learning (ML) models.

D. Google Limited Use Compliance Statement

"BonusPoint's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements."

E. Data Retention & Disconnection

OAuth tokens are stored securely in encrypted databases. You can disconnect your Google Calendar at any time from your Business Profile or AI Receptionist settings dashboard. Upon disconnection, stored authorization tokens are permanently deleted from our servers, and all API access is immediately revoked.

4. How We Use General Platform Data

We use non-Google personal and operational data for legitimate business operations:

  • To provide and maintain our services, customer accounts, and billing.
  • To enable conversational responses for visitors via the AI Receptionist based on your custom business FAQs and operating hours.
  • To monitor platform health, performance, and security.
  • To comply with legal, regulatory, and reporting obligations.

5. Data Security

We implement industry-standard technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. We enforce HTTPS encryption in transit (TLS 1.3), encrypt sensitive credentials at rest, and restrict internal database access on a strict need-to-know basis.

6. Third-Party Service Providers

We may employ trusted third-party companies and service providers to facilitate our platform (e.g., cloud hosting, database infrastructure, payment processors). These third parties only have access to personal data necessary to perform specific infrastructure tasks on our behalf and are obligated not to disclose or use it for any other purpose.

7. Your Rights and Data Deletion

Under applicable data protection laws (such as GDPR and CCPA), you have the right to access, rectify, or request the deletion of your personal data. You can delete your account and associated business data at any time through your account settings or by contacting our support team.

8. Contact Us

If you have questions about this Privacy Policy, our data practices, or our compliance with Google API User Data policies, please contact us at: support@bonuspoint.online