01About this policy
This policy covers the Boldo Bioma apps: Alinha, Aprova, Calcula, Rende, Sincroniza, the Bioma app and Bioma MCP, and the Boldo Account that signs you in to all of them (conta.boldo.ag). It says what each one keeps, what for, who it is shared with and how you remove access, with special attention to data that comes from Google accounts.
Boldo (Gipsy Lab Design e Comunicação Ltda, CNPJ 36.363.318/0001-84, Av. Paulista, 1636, conj. 4, 15º andar, Bela Vista, São Paulo, SP, 01310-200, Brasil) is the controller of the personal data described here. You can reach us at bioma@boldo.ag.
Our data protection officer (LGPD, art. 41) is Bruno Cavenaghi, at the same email.
02In short
- A Bioma app only reaches your Google account if you connect it, and only for the features you use.
- Boldo does not sell your data, does not use it for advertising and does not use Google data to train AI models.
- Nobody at Boldo reads your Google data, except in the cases listed in section 05.
- You can remove any app's access to your Google account at any time.
03What each app keeps
Your Boldo Account. Name, work email, password (stored only as a hash), second-step settings, the apps you can use and your role in each, and a record of your sign-ins (date, IP address and device).
What you create in the apps. Schedules (Alinha), videos, comments and approvals (Aprova), financial records (Calcula), render jobs (Rende) and your mail settings, such as tabs and signatures (Bioma).
Technical data. Our servers log the date, IP address and request, for security and to fix errors.
Alinha
Alinha does not access data from Google accounts.
Aprova
When you connect Google Slides, Aprova keeps the permission on its server, encrypted (AES-256-GCM), so you can import again later. Imported slides become images inside the storyboard and stay there until you delete the storyboard or the project.
Nothing else from your Google account is stored. "Disconnect Google", in the import window, removes the permission at Google and deletes it here. You can also remove the access at myaccount.google.com/permissions.
Calcula
Calcula keeps the Gmail permission encrypted on its server and a record of each email it sent (recipients, subject, date and which package went), without the message body.
It reads nothing from your mailbox. Disconnecting Gmail in Calcula deletes the permission and revokes it at Google at the same time.
Rende
Rende does not access data from Google accounts.
Sincroniza
Sincroniza runs entirely on your Mac and talks to Google Drive directly: your files and your Google permission never go to a Boldo server.
On the Mac it keeps the permission, in the Keychain; a local database with your backup folders, the list of uploaded files and the history of each run; the Drive file list that Finder shows; and copies of the files you opened or kept offline.
You can purge the cache, reset the databases or remove Sincroniza from Finder inside the app. Signing out deletes the permission from the Mac; to remove it at Google too, use myaccount.google.com/permissions.
Bioma
Bioma keeps, on Boldo's server in Brazil (conecta.boldo.ag): your Google permission, encrypted; a copy of your Gmail labels, threads and messages and of the attachment details, so the inbox opens fast and search works; and a copy of your calendar events, for Bioma MCP.
When you delete or move an email in Gmail, the copy follows. Removing a Google account in Settings › Google removes Bioma's access in your Google Account and deletes its permission and all of its copies, for Bioma and Bioma MCP at once. You can also remove the access at myaccount.google.com/permissions.
Bioma MCP
Bioma MCP keeps no Google data of its own. It uses the permission and the copies that Bioma already keeps on Boldo's server, and reads Google live when you ask for something the copy doesn't have.
What Claude reads goes into your Claude conversation, under the terms of your Claude account. Boldo doesn't use your Google data to train AI models. Removing the connector in Claude, or the Google account in Bioma, cuts the access.
04The Google permissions
Aprova, Calcula, Sincroniza and Bioma ask for Google account permissions; Bioma shares its connection with Bioma MCP. Alinha and Rende do not ask. Each app asks only for what its features need:
Boldo Aprova
presentations.readonlyImport a storyboard from Google Slides. After you click "Connect Google Slides", Aprova reads only the presentation you choose and the slides you ask for (up to 40), and turns each slide into a scene. It never edits your presentations. Google is not used to sign in.Boldo Calcula
gmail.sendThe "Send to accountant" button (Mandar pro contador) emails the month's package from your own Gmail address, after a confirmation step, so it lands in your Sent folder. Calcula only sends when you click, and it cannot read your mailbox.Boldo Sincroniza
driveShow your whole Google Drive in Finder, open and edit those files from Finder, and back up the folders you choose into a Drive folder. Finder has to reach every file you can see in Drive, not only the ones the app created, so a narrower permission is not enough.Boldo Bioma
gmail.modifyBioma: show your inbox and conversations, search your mail and open attachments; archive, mark, star, label, move, snooze, move to trash or report spam and save drafts, when you do it in the app; and send, reply and forward the emails you write. Bioma MCP: let your Claude search and read your mail when you ask, and create a draft for you to review and send. Bioma MCP never sends email. Neither one permanently deletes email.calendar.readonlyBioma MCP: let your Claude see your calendars and find free time. The Bioma app itself does not show your calendar.calendar.app.createdBioma MCP: create a separate "Boldo · Reminders" calendar and put your Boldo to-dos into its free slots. It only touches that calendar: your other calendars and events are never changed.drive.readonlyBioma: browse your folders when you save an attachment to Drive. Bioma MCP: find and read the files and spreadsheets you ask about.drive.fileBioma and Bioma MCP: save an attachment to the folder you pick, and create a spreadsheet and add rows to it. It only touches files it created.openid · email · profileKnow which Google account you connected, so each mailbox shows up with the right name and photo.Bioma MCP
gmail.modifySearch your mail and read messages and attachments when you ask, and create a draft for you to review and send. It never sends, archives or deletes email.calendar.readonlyList your events and find free time.calendar.app.createdCreate a separate "Boldo · Reminders" calendar and put your to-dos into it. Your other calendars and events are never changed.drive.readonlyFind, list and read the Drive files, folders and spreadsheets you ask about.drive.fileSave an attachment, create a spreadsheet and add rows to it, only in folders an admin allowed.05Limited Use
Boldo Bioma's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Read Google's policy
In practice:
- We use Google user data only to provide and improve the user-facing features you see and use in the app that asked for it, as described above.
- We do not transfer this data to anyone, except: to the service providers that run those features (section 07), when required by law, or in a merger, acquisition or sale of the company, with notice to you.
- We never use or transfer Google user data for advertising, including personalized, retargeting or interest-based ads.
- We do not sell Google user data.
- We do not use Google user data, including data from Google Workspace APIs, to develop, improve or train generalized AI or machine-learning models.
- People at Boldo do not read your Google data, unless: you ask us to (for example, help with a specific email); it is necessary for security (investigating abuse or a bug that threatens the service); it is required by law; or the data is aggregated and anonymized for internal operations.
06Artificial intelligence
Bioma does not send your data to any AI provider. Bioma MCP does not run an AI model either: when you use it, your own Claude (by Anthropic) calls its tools, and what it reads goes into your conversation, under the terms and settings of your Claude account.
Alinha, Aprova and Calcula also have Claude connectors, limited to the records of each app, with no Google data. Boldo does not use Google user data to train AI models.
07Service providers
| Provider | What for | Where |
|---|---|---|
| Hostinger | The servers that run the apps and store their data | Brazil |
| Amazon Web Services | Encrypted database backups | Brazil (São Paulo) |
| Cloudflare | Files in Aprova and Rende (videos, images, scenes and rendered frames) | Global network |
| Gmail, Calendar, Drive and Slides, and the new-mail notifications | According to your Google account | |
| Microsoft | Teams inside Bioma, and your Teams chats in Bioma MCP, if you connect it | According to your Microsoft account |
| monday.com | Monday boards in Bioma MCP, if you connect it | According to your Monday account |
| Fireflies.ai | Meeting notes in Bioma MCP, if you connect it | According to your Fireflies account |
When a provider is outside Brazil, the transfer follows the Brazilian data protection law (LGPD, art. 33), under contracts that require the same level of protection.
08Security
- Every connection uses HTTPS.
- In Bioma, Bioma MCP, Aprova and Calcula, your Google permission is encrypted (AES-256-GCM). In Sincroniza, it is kept in the macOS Keychain.
- Database backups are kept in Brazil, encrypted.
- Signing in with the Boldo Account always requires a second step.
- Only the people who maintain the systems can access the servers.
09How long we keep data
- Your Google permission: until you disconnect the account or delete your Boldo Account.
- Copies of your mail and calendar (Bioma): while the account stays connected. An email deleted in Gmail disappears from Bioma too; removing the account deletes all of its copies.
- Slides imported into Aprova: they become part of the storyboard and stay until you delete the storyboard or the project.
- Backups: replaced within 30 days.
- Server logs: only as long as needed for security and to fix errors.
10Your choices and rights
- Remove any app's access to your Google account at any time at myaccount.google.com/permissions. In Bioma, Calcula and Sincroniza, you can also disconnect inside the app.
- Ask us for access to, correction, a copy or deletion of your data at bioma@boldo.ag. We answer within 15 days.
- Deleting your Boldo Account deletes your data from every app within 30 days, and from backups within 30 more.
- You have the rights listed in article 18 of the LGPD and may complain to Brazil's data protection authority (ANPD).
11Children
Bioma is a set of work tools made for adults. It is not intended for anyone under 18.
12Changes to this policy
When this policy changes, the date at the top changes too. If the change is significant, we will tell you by email or inside the apps before it takes effect.
13Contact
Questions about this policy: bioma@boldo.ag · Av. Paulista, 1636, conj. 4, 15º andar, Bela Vista, São Paulo, SP, 01310-200, Brasil.