Privacy Policy

Last updated: 2026-10-12

Austra Nova ("the App", "we", "us") is a B2B outbound-calling and lead-import tool operated by Austra Nova. This policy describes how the App handles personal data, including data accessed when an operator connects a Google account for spreadsheet import, and the technical measures we use to protect that data.

Who this applies to

• Operators — people who sign in to the App and may connect Google to import spreadsheets.
• Contacts / leads — people whose phone numbers and related fields appear in imported sheets or are called through the App.

Google user data we access

When an operator authorizes the App with Google, we request only the minimum scopes required to import a sheet the operator explicitly selects:

• https://www.googleapis.com/auth/spreadsheets.readonly — read the contents of a Google Sheet the operator selects, to import leads/contacts. We do not request the full https://www.googleapis.com/auth/spreadsheets (write) scope.
• https://www.googleapis.com/auth/drive.file — access files the operator creates or opens with the App (via Google Picker). We do not request full Drive access (drive / drive.readonly); we cannot browse or list the operator's entire Drive.

We do not use Google user data for advertising, sell it, or share it with unrelated third parties for their own purposes.

How Google data is used

Rows from the selected spreadsheet (for example phone numbers, names, and other columns the operator maps) are imported into the App database to run outreach, CRM, and related workflows the operator enables. OAuth refresh tokens are stored so scheduled imports can re-read the same spreadsheet the operator already connected — not to discover new files.

Data protection mechanisms

We apply the following technical and organizational measures to protect Google user data and other personal data processed by the App (including sensitive fields such as phone numbers and OAuth credentials):

• Encryption in transit — all operator and API traffic to the App is served over HTTPS/TLS. Connections from the App to Google APIs use HTTPS.
• Encryption at rest — application data (including imported sheet rows and OAuth tokens) is stored in a managed PostgreSQL database and related cloud storage whose volumes are encrypted at rest by the hosting provider.
• Access control — the App requires operator authentication (username/password session). Google import and dashboard features are available only to signed-in operators. Internal services authenticate with a shared secret token, not Google credentials.
• Least-privilege Google access — scopes are limited to spreadsheets.readonly and drive.file as described above. File selection goes through Google Picker so the operator chooses which sheet is shared.
• Credential handling — Google OAuth client secrets and refresh tokens are stored server-side; they are not exposed in client-side JavaScript. Tokens are used only to re-read the connected spreadsheet for import.
• Retention and erasure — imported data is kept while the operator's account/deal records remain active, subject to retention settings. Operators may disconnect a Google import source in the App. Data subjects may request erasure via the contact below; call recipients may also hear a data-protection contact during calls when configured.
• Infrastructure processors — hosting, database, telephony, and object-storage providers process data only to run the App under our instructions (see Sharing).

AI / machine learning and Limited Use

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use, transfer, or sell Google Workspace user data (including spreadsheet contents imported via Google APIs)—whether raw, aggregated, or derived—to create, train, or improve foundational or generalized machine learning or artificial intelligence models.

The App may use third-party AI services strictly for inference in product features the operator enables (for example drafting call context, voice conversation, or summaries about leads already imported into the App). Those providers process data as subprocessors for that product purpose only. We select API / commercial plans that do not use API customer content to train the provider's general models, and we do not opt into training programs that would use Google-sourced user data for model improvement.

Current third-party AI inference providers used by the App (subject to operator configuration):

• OpenAI — chat and realtime voice features via OpenAI API (commercial API usage; not used by us to train OpenAI foundation models).
• Google Gemini — optional realtime voice features via Google Generative Language / Gemini API when the operator selects a Gemini voice model. Google Sheet OAuth data is not sent to Gemini for model training; voice inference uses call context configured in the App.

We do not route Google Workspace API payloads through unrelated AI aggregators or model hubs for training. We do not operate a separate “train on customer Sheets” pipeline.

Storage and retention

Imported data is stored in the App database (and related storage such as call recordings where enabled) for as long as the operator's account/deal records remain active, subject to retention settings and erasure requests. Google OAuth tokens are stored securely and used only for the authorized import purpose. Operators may disconnect a Google import source in the App at any time.

Sharing

We may use infrastructure processors (hosting, database, telephony, object storage, and the AI inference providers listed above) strictly to run the App. We do not sell personal data. Where the operator exports leads to a configured third-party CRM/portal, that transfer is initiated by the operator's configuration.

Revoking Google access

An operator can revoke the App's Google access at any time via Google Account → Security → Third-party access, or by removing the connected import source in the App's Import settings.

Your rights and contact

Depending on applicable law (including GDPR where it applies), you may have rights to access, correct, or erase personal data we hold. Contact us at dreaminforcer@gmail.com. Call recipients may also hear a data-protection contact during calls when configured by the operator.