Privacy Policy
Last updated: October 15, 2026
Welcome to https://telosa.cx/ (the “Site”), operated by Telosa Services Pvt. Ltd. (“Telosa”, “we”, “us”). We understand that privacy online is important to users of our Site, especially when conducting business. This statement governs our privacy practices with respect to those users of the Site who visit without transacting business (“Visitors”) and businesses that register for and use the various services offered by Telosa (collectively, the “Services”) (“Authorized Customers”). It also explains how we handle data we receive from Google APIs.
Personally Identifiable Information
refers to any information that identifies or can be used to identify, contact, or locate the person to whom such information pertains, including, but not limited to, name, address, phone number, email address, and financial profiles. Personally Identifiable Information does not include information that is collected anonymously (that is, without identification of the individual user) or demographic information not connected to an identified individual.
What Personally Identifiable Information is collected?
We may collect basic user profile information from all of our Visitors. We collect the following additional information from our Authorized Customers: the names, addresses, phone numbers and email addresses of Authorized Customers, the nature and size of the business, and information about the business locations, communication channels and advertising accounts that the Authorized Customer chooses to connect to Telosa.
What organizations are collecting the information?
In addition to our direct collection of information, our third-party service vendors (such as payment processors, cloud hosting providers and analytics providers) may collect this information from our Visitors and Authorized Customers. We do not control how these third parties use such information, but we ask them to disclose how they use personal information provided to them from Visitors and Authorized Customers. Some of these third parties may be intermediaries that act solely as links in the distribution chain, and do not store, retain, or use the information given to them.
How does the Site use Personally Identifiable Information?
We use Personally Identifiable Information to customize the Site, to provide, support and improve our Services, and to fulfil requests made through the Site. We may email Visitors and Authorized Customers about our Services or information related to the subject matter of the Site. We may also use Personally Identifiable Information to contact Visitors and Authorized Customers in response to specific inquiries, or to provide requested information.
With whom may the information be shared?
We do not sell Personally Identifiable Information and we do not share Personally Identifiable Information about one Authorized Customer with other Authorized Customers. We may share aggregated, non-identifying information about our Visitors, including demographics, with our affiliated agencies and third-party vendors. We may also share information with service providers that help us operate the Services, and as required by law. We offer the opportunity to ‘opt out’ of receiving information or being contacted by us or by any agency acting on our behalf.
How is Personally Identifiable Information stored?
Personally Identifiable Information collected by Telosa is securely stored and is accessible only to authorized personnel and service providers who need it to operate the Services, for use as indicated above.
What choices are available to Visitors regarding collection, use and distribution of the information?
Visitors and Authorized Customers may opt out of receiving unsolicited information from or being contacted by us and/or our vendors and affiliated agencies by responding to emails as instructed, or by contacting us at [email protected]
Are Cookies Used on the Site?
Cookies are used for a variety of reasons. We use Cookies to obtain information about the preferences of our Visitors and the services they select. We also use Cookies for security purposes to protect our Authorized Customers. For example, if an Authorized Customer is logged on and the site is unused, the system may automatically log the Authorized Customer off.
How does Telosa use login information?
Telosa uses login information, including, but not limited to, IP addresses, ISPs, and browser types, to analyze trends, administer the Site, track a user’s movement and use, and gather broad demographic information.
What partners or service providers have access to Personally Identifiable Information from Visitors and/or Authorized Customers on the Site?
Telosa has entered into and will continue to enter into partnerships and other affiliations with a number of vendors. Such vendors may have access to certain Personally Identifiable Information on a need-to-know basis to provide services to us. Our privacy policy does not cover their collection or use of this information. We will disclose Personally Identifiable Information in order to comply with a court order or subpoena or a request from a law enforcement agency to release information. We will also disclose Personally Identifiable Information when reasonably necessary to protect the safety of our Visitors and Authorized Customers.
How does the Site keep Personally Identifiable Information secure?
All of our employees are familiar with our security policy and practices. The Personally Identifiable Information of our Visitors and Authorized Customers is only accessible to a limited number of qualified employees who are given a password in order to gain access to the information. We audit our security systems and processes on a regular basis. Sensitive information, such as payment details, is protected by encryption protocols in place to protect information sent over the Internet. While we take commercially reasonable measures to maintain a secure site, electronic communications and databases are subject to errors, tampering and break-ins, and we cannot guarantee or warrant that such events will not take place and we will not be liable to Visitors or Authorized Customers for any such occurrences.
How can Visitors correct any inaccuracies in Personally Identifiable Information?
Visitors and Authorized Customers may contact us to update Personally Identifiable Information about them or to correct any inaccuracies by emailing us at [email protected]
Can a Visitor delete or deactivate Personally Identifiable Information collected by the Site?
We provide Visitors and Authorized Customers with a mechanism to delete/deactivate Personally Identifiable Information from the Site’s database by contacting [email protected]. However, because of backups and records of deletions, it may be impossible to delete a Visitor’s entry without retaining some residual information. An individual who requests to have Personally Identifiable Information deactivated will have this information functionally deleted, and we will not sell, transfer, or use Personally Identifiable Information relating to that individual in any way moving forward.
What happens if the Privacy Policy Changes?
We will let our Visitors and Authorized Customers know about changes to our privacy policy by posting such changes on the Site and updating the “Last updated” date above. However, if we are changing our privacy policy in a manner that might cause disclosure of Personally Identifiable Information that a Visitor or Authorized Customer has previously requested not be disclosed, we will contact such Visitor or Authorized Customer to allow such Visitor or Authorized Customer to prevent such disclosure.
Links:
https://telosa.cx/ contains links to other web sites. Please note that when you click on one of these links, you are moving to another web site. We encourage you to read the privacy statements of these linked sites as their privacy policies may differ from ours.
Google API Services User Data
Telosa uses Google APIs — specifically the Gmail API, the YouTube Data API v3 and the Google Ads API — to power the customer-communication, reputation-management and advertising-reporting features described on our website. When you (a business admin) connect a Gmail account or YouTube channel to Telosa through Google's OAuth 2.0 flow, we access, use, protect, retain, and delete the resulting data as follows. Our use of the Google Ads API is described separately in the “Google Ads API Data” section below.
What Google user data we access.
- Gmail: message metadata (message ID, thread ID, historyId), message content (subject, sender, recipients, body, attachments), inbox and label state via the Gmail History API, and the connected account's profile email address. We use
gmail.readonlyfor read operations,gmail.sendfor sending replies,gmail.modifyexclusively for theusers.watchandusers.stopendpoints that register Google Cloud Pub/Sub push notifications so incoming customer email reaches you in real time, anduserinfo.emailfor displaying the connected account address to the business admin. Telosa does not modify, label, or delete any Gmail message; thegmail.modifyscope is the minimum Google requires for thewatch/stopendpoints even when no message state is changed. - YouTube: connected channel identity and metadata, uploaded video metadata and statistics, comment threads and individual comments on the connected channel's videos, and commenter profile enrichment (subscriber count, handle, description, avatar) via
youtube.force-ssl.
How we use Google user data.
- Render the connected mailboxes and channels inside Telosa's Unified Inbox so business teams can see and manage customer conversations in one place.
- Generate AI-drafted reply suggestions for human agents to review before sending. Drafts are generated at inference time per message; Google user data is not retained in any training corpus or model weight update.
- Deliver approved replies via
users.messages.send(Gmail) andcommentThreads.insert(YouTube). - Subscribe to real-time push notifications via
users.watch(Gmail) and WebSub (YouTube) so incoming customer messages surface in Telosa within seconds.
How we share Google user data.
Telosa does not sell Google user data and does not transfer it to third parties for advertising, retargeting, or any commercial purpose outside operating the service. We share Google user data only with sub-processors strictly required to run Telosa, under written Data Processing Agreements: our cloud hosting provider (Amazon Web Services), and the AI inference providers we use for reply drafting (Amazon Bedrock — Anthropic Claude; Google Vertex AI). Each of those providers is contractually forbidden from using submitted content to train their foundation models.
How we protect Google user data.
Encryption in transit via TLS 1.2 or higher; encryption at rest via AES-256; OAuth refresh tokens are stored under envelope encryption; role-based access controls limit which Telosa personnel can view any Google user data (and, in practice, no Telosa personnel access customer message content in the course of ordinary support); every access event is audit-logged; the service undergoes independent security review at least annually.
How long we retain Google user data, and how we delete it.
Connected-account tokens and cached Google user data (messages, comments, metadata) are retained for the duration of the business's active service term. When a business admin disconnects a Gmail account, Telosa calls users.stop to unsubscribe the Pub/Sub watch, revokes the stored refresh token, and deletes cached content within 30 days. When a business admin disconnects a YouTube channel, Telosa revokes the stored refresh token and deletes cached content within 30 days. Businesses may request accelerated deletion by writing to [email protected]; requests are actioned within 30 days.
Google Ads API Data
Telosa provides Google Ads management services to its clients alongside its software platform. To report on the performance of those advertising accounts, authorized Telosa personnel authorize the Google Ads API (scope https://www.googleapis.com/auth/adwords) through Google's OAuth 2.0 flow, using a Google account that has access to Telosa's Google Ads manager account. The Google Ads accounts covered are only those that our clients have linked to Telosa's manager account and authorized us to manage.
What Google Ads data we access.
- Account-level and campaign-level performance reporting data: account name and ID, impressions, clicks, click-through rate (CTR), cost, and average cost per click (CPC), for selected date ranges.
- We use the Google Ads API in a read-only manner for reporting. Through this integration, we do not create, edit, pause, or delete campaigns, ads, keywords, bids, or budgets.
- We do not use this integration to retrieve personal information about the people who view or click on advertisements.
How we use Google Ads data.
- To monitor and analyze the performance of each client's Google Ads account and to produce performance reports for that client.
- To store the retrieved metrics in access-restricted Google Sheets within Telosa's own Google account, so our team can review results in one place.
- Each client's data is used only for that client's own account. It is not combined with, or used to benefit, any other advertiser.
How we share Google Ads data.
Telosa does not sell Google Ads data. We do not use it, or transfer it to others, for serving advertisements, retargeting, personalized or interest-based advertising, or to develop, improve, or train generalized AI/ML models. We share a client's Google Ads data only with that client (the owner of the account), with service providers strictly necessary to operate our reporting (such as Google Workspace, which hosts the Google Sheets), where required by law, or as part of a merger, acquisition, or sale of assets with notice to affected users.
How we protect Google Ads data.
Access is limited to authorized Telosa personnel who need it to manage and report on client accounts. Google Sheets containing this data are access-restricted and not shared publicly. OAuth credentials, refresh tokens, and API tokens are stored securely, kept out of shared documents, and are never exposed to the public.
How long we retain Google Ads data, and how we delete it.
Google Ads reporting data is retained for as long as we manage the relevant client account. It is deleted within 30 days after the client relationship ends, or earlier on written request to [email protected]. Access can also be withdrawn at any time by revoking Telosa's access in your Google Account permissions (myaccount.google.com/permissions) or by unlinking your account from Telosa's manager account in Google Ads, after which we stop retrieving data and delete stored credentials.
Limited Use
Telosa's use and transfer of information received from Google APIs (including the Gmail API, the YouTube Data API v3 and the Google Ads API) to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- Google user data is used only to provide or improve user-facing features that are prominent in the Telosa application's user interface, or to provide the reporting services described above.
- Google user data is not transferred to others unless necessary to provide or improve those user-facing features or services, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to affected users.
- Google user data is not used or transferred for serving advertisements — including retargeting, personalised, or interest-based advertising.
- Google Workspace, YouTube and Google Ads user data is not used to develop, improve, or train generalised AI/ML models, and is not transferred to third-party AI/ML services for such training. AI-generated reply drafts are produced at inference time on a per-request basis and are not retained in any training corpus.
- No human at Telosa reads Google user data unless (a) the affected user has given affirmative agreement, (b) it is necessary for security purposes (e.g. investigating abuse), (c) it is necessary to comply with applicable law, or (d) the data is aggregated and used for internal operations in accordance with applicable privacy law. For Google Ads reporting data, authorized Telosa personnel review the performance metrics of the accounts they manage as part of providing the advertising management service the client has requested.
Contact Us
Telosa Services Pvt. Ltd.
Website: https://telosa.cx/
Email: [email protected]
Questions about this policy or about our use of Google user data can be directed to the email address above.
