Privacy Policy | discovr

1. About this policy

Discovr by Bord Labs ("Discovr", "we", "us") provides business research and outreach tools. This policy explains how we handle information on trydiscovr.com, in the application at app.trydiscovr.com, and in related account, billing, support and communications activities.

We handle information about customers and team members, and information about people that customers research or include in contact lists. You do not need a Discovr account to appear in a customer's research.

For privacy questions or requests, contact support@bordlabs.ai. For website, waitlist and newsletter matters, you can also contact hello@trydiscovr.com.

We use account information, such as your name, email address, account identifiers, verification status and account activity, to create and maintain your account, authenticate you and provide access to your workspaces. We also handle profile photos you upload, team memberships, roles and invitations. Authentication providers help us process sign-in details and verification information.

When you choose Google sign-in, Google shares basic identity information, including your name, email address, email-verification status, an account identifier and profile-picture information when supplied. We use this information to recognize you, maintain your account and provide workspace access. It is stored in your authentication profile and Discovr account records, as relevant to those functions, and processed by our authentication, hosting and storage providers. Google handles your Google password; Discovr does not receive it through Google sign-in.

Your account email may also be shared with our payment processor if you select it as your receipt address at checkout. We use account information when providing account support.

Google sign-in does not grant access to your Gmail messages, Google Drive files, Google Contacts or Google Calendar. Connecting Gmail to send email requires separate authorization, as described in section 5.

You can manage your Google connection through Google's third-party connections settings. Signing out or removing a connection does not delete information already held in your Discovr account. To request account closure or deletion of stored Google-derived account information, contact us as described in section 12.

3. Information customers provide

We process information you submit to use Discovr, including company and audience descriptions, websites, search instructions, notes, conversations, uploaded contact lists and outreach content. We use it to carry out research, organize results, maintain your work, generate or edit drafts and support collaboration.

Contact records may contain names, job titles, employers, email addresses, phone numbers, professional-profile links and other contact details you provide or choose to import. We associate this information with the relevant account or workspace and retain information about its source and sharing settings.

Information submitted in searches and conversations may be processed by the research and AI services described in section 9. Include information appropriate for the work you want Discovr to perform.

4. Prospects, research and enrichment

We research people and organizations based on customers' instructions. Information may come from customers, public websites and search results, professional profiles, research and enrichment services, and accounts customers authorize us to connect.

Research may include names, roles, employers, professional biographies, company details, profile links, relevant public statements or activity, and available business contact information. We combine this information with a customer's criteria to produce summaries, relevance assessments, recommendations and outreach drafts. We store results, supporting sources and research history so customers can review and continue their work.

Research and AI-generated assessments may be incomplete, outdated or incorrect. Customers should review results before relying on them. People described in research can contact us about access, correction or removal under section 12.

Customers decide how to use information they receive in their own business and communications. Their practices also apply to copies they retain or export. A request to Discovr is separate from unsubscribing from a customer's communications.

5. Connected services and apps

When you choose to connect an external service, we process the connection and authorization information needed to provide the features you request. Depending on the connection, this may include account and profile information, contacts, relationship information and communications. Service providers help us establish connections and carry out supported actions.

For outreach you initiate or authorize, we process recipient details, message content, sending-account information and delivery or reply information. Relevant information is shared with the connected service and the intended recipient.

You may also authorize an external app to work with your workspace. Within the access you grant, that app may receive research, contacts or drafts and perform supported actions on your behalf. Its provider's privacy practices apply to information it receives. Use the available connection controls to manage or disconnect services and apps. Disconnection does not erase information previously received by Discovr or the external service; contact us about deletion requests.

Gmail sending

Connecting Gmail is optional and separate from Google sign-in. With your permission, Discovr identifies your Google account and uses Gmail's send permission (gmail.send) to send email you initiate or authorize, including through an external app you authorize. We store your Gmail address, Google account identifier, granted permissions and encrypted authorization credentials to maintain the connection. This connection does not read or search your inbox, import your mail or Google contacts, or read replies, bounces or delivery confirmations.

For emails prepared or sent through Discovr, we process and store sender and recipient details, the subject and body, drafts, sending status and timestamps, and message identifiers and thread identifiers returned by Google. We share outgoing messages with Google for transmission to the intended recipients. Our hosting and storage providers help us process these records. Sending history helps you review outreach and avoid contacting someone repeatedly. Workspace members may see that a prospect was contacted and when; access to message content follows the controls described in section 6. A sent status means Gmail accepted the message, not that it was delivered or read.

You can disconnect Gmail in Discovr's connected-account settings or remove access through Google's third-party connections settings. Disconnecting removes the saved authorization credentials used for future Gmail sends and asks Google to revoke access. It does not delete saved drafts or sending history, recall messages already sent, or remove copies held by Google or recipients. Sections 11 and 12 explain retention and how to request deletion.

You may not use Discovr, including any Gmail connection, to send unsolicited commercial email or bulk email to people who have not consented to receive it. You are responsible for obtaining the recipient's prior consent to receive commercial communications from you and for making sure your communications comply with applicable law and Google's policies, including the Google Workspace API User Data and Developer Policy.

You must honor opt-out requests and requests not to be contacted, including requests you receive outside Discovr, and stop sending further messages to those recipients. Recipients can ask the sender to stop contacting them and can contact us under section 12 to request removal from Discovr research.

We may suspend Gmail sending or close accounts used to send spam or to contact people who have opted out.

Google API Limited Use

Discovr's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We do not use data obtained through Google Workspace APIs to develop, train or improve generalized AI or machine-learning models.

6. Teams and workspace visibility

Research, conversations, drafts and outreach activity are associated with a workspace and available according to its access controls. Owners and administrators have additional workspace-management permissions. Invitations include the invited person's email address and role.

Contacts have their own sharing settings. Your contacts are available to you, and contacts you share become visible to other members of that workspace. Changing a contact's visibility does not recall copies already received by others or remove related information from workspace research and outreach records.

7. Website enquiries and communications

We process information you submit through website forms or correspondence, such as your name, email address, website, research brief, intake answers and communication preferences. We use it to respond, manage early access and referrals, understand requests and send communications you select. Submissions may also include country, referral, campaign and email-deliverability information.

Hosting, email-delivery and support or team-communication providers help us handle submissions and respond. If you choose to join an external community, its provider and other participants may receive information you share there, according to that community's settings.

If you use the website's domain-check feature, we process the domain you submit and public domain information to provide the report. Downloading a free resource does not require an optional support payment, newsletter subscription or community membership.

We do not sell or rent our waitlist or newsletter subscriber list, or publish your submitted website brief to data brokers. You can change supported email preferences or unsubscribe through our emails. Unsubscribing does not close your application account or automatically delete your previous submissions.

8. Payments

Payment processors handle application subscriptions and any optional website support payments offered to you. They receive payment and billing information provided at checkout, including your selected receipt email and any billing address collected.

We maintain billing and subscription records associated with your account or workspace, including transaction references, plan, subscription status and billing periods. We use this information to provide paid features, manage usage, reconcile payments and handle billing enquiries. Subscription management is separate from signing out or disconnecting a service.

9. AI and other service providers

AI and research providers help us research prospects and generate summaries, recommendations and drafts. Information sent for these tasks may include your instructions, company information, notes, conversation context, prospect details, source material and existing drafts. Research and enrichment providers may receive search terms or identifying information needed to find or match relevant records. We retain results and associated work so you can use and continue them.

We also share information with providers that support authentication, hosting, storage, service operations, payments, communications and optional analytics, for the functions described in this policy. Workspace members, authorized external apps and message recipients receive information through the features you use.

We may disclose information in response to a binding official request, to address fraud or abuse, to protect rights and safety, or in connection with a business transaction, with notice or permission where required.

10. Cookies, analytics and operational information

Optional Google Analytics

Google Analytics is optional on supported public marketing pages. Google Analytics does not load before you opt in. If you allow it, Google receives analytics identifiers and information about page visits, referring sites and browser or device activity to help us understand website use.

You can change your choice through Analytics settings in the website footer. Withdrawing consent stops further tracking through this integration but does not erase information already received by Google. We store your consent choice for 180 days and configure these analytics cookies to expire after 180 days; browser controls may shorten that period. Google explains its processing in its privacy policy and information about sites using Google's services.

First-party measurement and service operation

We separately collect first-party website usage and interaction information, referral and campaign information, approximate country and session identifiers to understand visits, signup flows and referrals. Campaign information may include advertising click identifiers. First-touch attribution is kept in your browser for up to 90 days, and attribution associated with a submitted form may be retained with that submission.

This first-party measurement is separate from optional Google Analytics and is not turned off by declining Google Analytics. Browser controls can clear or restrict cookies and local storage, which may reset preferences or affect sign-in and referral attribution.

We also use cookies and similar technologies for sign-in, workspace selection and preferences. Operational information may include account and request identifiers, network information, timestamps, errors, usage and service-performance information. We use it to operate and secure the service, prevent abuse, manage usage and troubleshoot problems. These operational activities are separate from the marketing analytics preference.

11. Storage, protection and retention

We store information with service providers supporting the functions described in this policy. Their processing may take place outside your country. We use access controls and secure connections to help protect information. No system or transmission can be guaranteed completely secure.

We retain information for account and workspace operation, preserving requested work, billing, support and security. Retention depends on the type of information and the purpose for which it is held. Google-derived account information is retained as part of account management; signing out does not erase it.

You can request deletion through the contact details below. Signing out, disconnecting a service and unsubscribing from communications are separate from deletion requests. Copies may remain in operational records and backups, or with recipients that previously received them. The browser-storage periods in section 10 do not determine how long all other records are retained.

12. Your choices and requests

Available product controls let you manage profile photos, supported contact details, contact sharing, workspace settings and service connections. You can also change optional analytics preferences and unsubscribe from our newsletter.

Contact support@bordlabs.ai to request access to information about you, correction, account closure or deletion, or to raise a privacy concern or objection. Account users should identify the relevant account and workspace. If you appear in prospect research, provide a profile link or contact detail that helps us locate the information. Do not send passwords or authentication codes.

We may need to verify your identity and connection to the information requested. Requests involving information supplied or managed by a customer may require that customer's involvement. You can contact that customer directly and can still contact us about Discovr's handling of the information. Available rights and exceptions depend on the requirements that apply to your request.

For website and newsletter matters, hello@trydiscovr.com is also available. A deletion request is separate from cancelling a subscription or changing email preferences.

13. Business use and children

The public website is intended for business users and is not directed to children under 13. If you believe a child has provided us with personal information, contact support so the issue can be reviewed.

14. Changes to this policy

We will update this policy when our practices change and identify the effective date of the revision. Where additional notice or permission is required, we will take that step. The current policy is available at trydiscovr.com/privacy.