Privacy

Graviola is a recruiting workspace operated by Heuv Tecnologies. Contact toni@krxlab.com for privacy questions or data access, correction, and deletion requests.

Information we process

We process your sign-in profile, workspace membership, recruiting projects, professional contact information, notes, searches, messages you compose, integration settings, and usage records. Stripe processes payment details; Graviola stores billing references and subscription status.

Connected email accounts

Connecting Gmail or Microsoft 365 is optional. We use the permissions you grant to identify your mailbox, send messages you request or queue, and read incoming message information to detect replies and unsubscribe requests. Reply detection stops queued follow-ups. Background synchronization may run while the workspace is closed.

OAuth credentials are encrypted before storage. Mailbox access is used for these user-facing email features, not for advertising or training generalized AI models. Graviola’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Other integrations and AI

Connecting HubSpot lets you preview and sync selected contact fields. Slack notifications go to the configured destination. AI features process the instructions and recruiting context submitted for search or writing assistance. Hosting, AI, email, and payment services process information needed to deliver those features.

Workspace access and storage

Workspace owners manage membership and access. Authorized collaborators can access information according to their role. Recruiting records, integration events, and operational records remain stored until deleted or otherwise required for service operations, billing, dispute resolution, or legal obligations.

Disconnecting and deletion

Use Integrations to disconnect a mailbox or CRM connection. Disconnecting removes the stored connection credentials; it does not automatically delete existing workspace records or messages already sent. You can also revoke access in your Google or Microsoft account settings. Contact us to request deletion of retained account and integration data.

Updates

We will update this page when our data practices change. Last updated: November 10, 2026.