Google connections privacy

You choose each connection

Signing in to BragaPartners does not give us access to your Gmail inbox or YouTube channel. A Google permission screen describes the access for the connection you choose. Job Monitor, outgoing desk email and YouTube publishing are separate connections; enabling one does not enable the others.

These connections support BragaPartners operations. They do not connect a worker’s personal email account, apply to an employer on someone’s behalf or authorize sharing a worker’s profile.

Job Monitor: a dedicated job-alert inbox

Job Monitor requests Gmail read-only permission for an administrator-controlled inbox reserved for employer job alerts. That permission covers email throughout the connected account, so do not use a personal inbox. It gives no permission to send, change or delete messages.

When an administrator starts monitoring: Job Monitor checks the dedicated inbox for incoming email, beginning with the previous seven days. It saves message identifiers, received dates, sender addresses, subjects, plain-text previews and job links found in the email. It extracts explicitly stated job titles, locations and pay; missing details remain blank. No employer website is crawled. Attachments and remote images are not imported, and email instructions are treated as content, never commands.

Administrators review unfamiliar senders and record the employer’s official careers page and submission policy. Active BragaPartners recruiters and managers may see previews from approved sources, save or dismiss alerts, and open approved employer links. An alert is not verification of an open job or permission to represent an employer. A recruiter must review and manually paste the complete posting into Role Relay. Recruiters can compare the reviewed job with workers’ stated work interests and send an individual invitation inside the BragaPartners portal. Workers may ask a question, decline or request application support. This does not send email, apply for a worker, share a résumé or publish a job automatically.

Alert previews are hidden after 90 days and deleted in bounded scheduled cleanup batches. Pausing or disconnecting stops new intake; scheduled cleanup continues. Source approvals, source email addresses and operational connection records remain until a privacy deletion request is fulfilled. The dedicated account should contain employer alerts only. Administrators can see incoming previews, so keep personal correspondence out of this inbox.

We store the mailbox address, the administrator responsible for the connection, connection and recovery status, and the times of connection checks. Authorization tokens are encrypted before storage in BragaPartners’ private Firebase records. Connection credentials and the encryption key are kept separately from public website files. Only administrators can manage this connection; recruiters do not receive the Google token or direct inbox access.

Separate sending and video connections

Outgoing desk email: a separately authorized sender account is used to send the correspondence selected by the desk’s workflow. Google receives the recipient address, subject, message and any included attachments for delivery. Delivery records can include message identifiers, recipients, timestamps and delivery or error status. Connecting Job Monitor does not give it this sending permission.

YouTube publishing: a separately authorized channel connection supports checking the selected channel, uploading approved video and metadata, checking publication status and containing a publication when necessary. Records can include the channel identifier, video identifier, title, description, visibility, publication state and related activity times. Uploaded material is sent to YouTube; public visibility makes it available to viewers. Connecting a channel does not itself publish a video.

Google’s displayed permissions may be broader than the individual actions used by these features. You can decline a connection. Existing recruiting access does not require giving Job Monitor your Gmail or YouTube permission.

How we use and protect Google data

We use Google account data only to provide the connection and the visible features you authorize, maintain their security and resolve problems. Google and Firebase provide the account, API and hosting infrastructure. A connected sending or publishing action shares the selected material with its intended recipient or audience.

We do not sell Google account data, use it for targeted advertising, share it with data brokers or use it to train a general-purpose AI model. Human access is limited to your permission for specific data, necessary security work or a legal requirement. The correspondence email domain does not give other portfolio products access to BragaPartners’ connected inbox.

BragaPartners’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google also processes information under its Privacy Policy.

Disconnecting and asking us to delete data

In Job Monitor, Disconnect removes the active saved authorization token from the connection record and stops that connection. It does not delete messages from Gmail or revoke the permission at Google. You can also revoke access in Google Account connections.

Connection records remain until removed through a privacy request or operational cleanup. Disconnecting does not promise immediate erasure from retained backups or logs. To request access, correction or deletion of retained connection and activity records, email [email protected]. Tell us which BragaPartners connection the request concerns; do not send a password or authorization token. We will verify the request, explain any records that must be retained and help stop the relevant connection.

Disconnecting a sending or video account does not recall delivered messages or remove a published video. Use the relevant provider’s controls or ask the BragaPartners desk for help.

Changes and help

If a feature needs new access or uses Google data for a new purpose, we will explain the change and request the required permission before using it that way.

Privacy contact: [email protected]
BragaPartners desk: (844) 720-4272, Monday–Friday, 9am–5pm Eastern Time.