1. Data controller
This policy describes how betool ("we") processes personal data through the betool platform and the betool.ai website. The data controller is Technicien Soft Solutions Ltd (company number 515875573), Jerusalem, Israel, which operates the platform under the betool brand.
For any data-protection question, or to exercise your rights: privacy@betool.fr.
2. Roles: controller and processor
For data of our own users (accounts, billing, browsing), we act as data controller.
For data you import or process through your pipelines and integrations, we act as data processor, on your behalf and on your instructions.
3. Data we process
Account data: name, work email address, organization, technical identifiers. Usage data: logs, consumption metrics (credits), security and audit data.
Content: the files, messages and data you import or generate, including data from the services you connect. We access this Content only to provide the Service.
4. Data from Google services
When you connect a Google account, betool accesses only the data matching the authorizations (scopes) you grant, and solely to perform the functions you configure in your pipelines. The requested scopes and their purpose are:
Google Ads (advertising campaign management): reading performance and creating, modifying or pausing campaigns and bids, in order to run your advertising actions.
Google Calendar: reading, creating, moving and deleting events across one or more calendars, in order to manage appointments.
Google Analytics (read-only): reading traffic data, for reporting and optimization purposes.
Google Sheets: reading and writing spreadsheets, both as source and destination, in order to read data and produce reports. This comes with per-file Drive access, used only to share by link a spreadsheet betool has just created.
Google Drive (per-file access): importing and creating files, limited to the files betool creates itself (for example publishing a generated report) and to the files you explicitly select. betool does not browse your Drive and accesses no other file.
Google Search Console (read-only): reading your sites' search performance data (clicks, impressions, average position) for SEO reporting.
Google Business Profile: reading and managing your business information — viewing reviews and rating, replying to reviews, publishing posts — to manage your local presence and reputation.
For each scope, the data is used only for the purpose you defined, never beyond it. You can revoke access at any time from betool or from your Google account (myaccount.google.com/permissions); the associated functional data is then deleted in accordance with the "Retention and deletion" section.
5. "Limited Use" commitment (Google API Services User Data Policy)
betool's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice: this data is not sold, not used for advertising, and not used to train generalized AI models. Human access to this data is prohibited except: with your explicit consent, for security purposes (investigating abuse), to comply with a legal obligation, or where the data is aggregated and anonymized.
6. Data from Meta platforms (Facebook, Instagram, WhatsApp)
When you connect a Facebook Page, a WhatsApp Business number or a Meta advertising account, betool accesses only the data matching the permissions you grant, and solely to perform the functions you configure in your pipelines. The permissions requested and their purpose:
Facebook Pages (pages_show_list, pages_read_engagement, pages_manage_metadata): list your Pages, identify the one you connect and subscribe betool to its notifications, in order to route events to the right pipeline.
Lead forms (leads_retrieval): retrieve the contacts submitted through your Lead Ads forms, in order to process them in the pipeline you configured.
Page publishing (pages_manage_posts): publish or schedule posts on the Page you connect.
Meta Ads (ads_read, ads_management): read your campaign performance, and pause, activate or adjust a budget.
WhatsApp Business (whatsapp_business_messaging, whatsapp_business_management): receive and send messages on the number you connect, and manage the associated message templates.
This data is processed on your behalf, as a processor, in accordance with the Meta Platform Terms. It is not sold, not transferred to data brokers, not used for advertising purposes of our own, and not used to train generalized AI models.
Deletion: disconnecting a Page, a WhatsApp number or an advertising account revokes the access tokens and deletes the associated platform data. You may also request this deletion at privacy@betool.fr; we act on it within 30 days.
7. Other connected services
Depending on the integrations you enable (for example Stripe, Slack, Jira, GitHub, LinkedIn, Meta, telephony/SMS carriers, banking aggregators), betool processes only the data strictly necessary for the configured function, based on the authorizations you grant.
The same principle applies to future integrations: access limited to the authorized scope, use limited to the configured purpose, no resale, no advertising use, no training of generalized models.
8. Purposes and legal bases
Provision and operation of the Service (performance of the contract); security, abuse prevention and audit (legitimate interest); billing (legal obligation and contract); service-related communications (legitimate interest / consent where applicable).
We do not carry out any solely automated decision producing legal effects without an appropriate legal basis and without oversight.
9. Sharing and sub-processors
We do not sell your data. We use sub-processors for hosting and operating the Service (notably EU-based cloud infrastructure providers, a payment provider for billing, and, depending on your configuration, the AI model providers you designate in BYOK mode).
These sub-processors are bound by contractual confidentiality and security commitments. The current list, with each provider's role and location, is published on the Sub-processors page of this site.
10. Government requests
We grant no public authority direct, standing or automated access to your data, and we disclose no data absent a binding and valid legal obligation.
Every request from an authority undergoes a written legality review. We challenge those we believe to be unlawful, disproportionate or without a valid legal basis, and we do not execute them pending the outcome.
Where disclosure is legally unavoidable, we disclose only the strict minimum required, and we record each request, its legal basis and our response in an internal register.
Unless legally prohibited, we notify the affected customer before any disclosure, with enough time for them to seek a remedy.
11. International transfers
We favor hosting within the European Union. Where a transfer outside the EU is necessary, it is covered by appropriate safeguards (standard contractual clauses or an equivalent mechanism).
12. Retention and deletion
Data is retained for as long as necessary for the described purposes, then deleted or anonymized. Data from a closed account is deleted within a reasonable period, subject to legal retention obligations (e.g. accounting).
You can request deletion of your data, including data from connected services, by writing to privacy@betool.fr or by revoking the relevant integration.
13. Security
We implement technical and organizational measures: strict multi-tenant isolation, encryption in transit, access control, logging and audit. As no system is infallible, we encourage you to enable the controls available at the organization level.
14. Your rights
Under the GDPR, you have rights of access, rectification, erasure, restriction, objection and portability. You can exercise them at privacy@betool.fr.
Where we act as processor, we relay your requests to the controller (your organization). You may lodge a complaint with the competent supervisory authority (in France, the CNIL).
16. Minors
The Service is not intended for minors and does not knowingly collect data about them.
17. Changes
We may update this policy to reflect legal or functional changes. Material changes will be flagged and the update date above will be revised.
18. Contact
Questions or to exercise your rights: privacy@betool.fr. Operator information: see the Legal notice (/legal).