Last updated: September 20, 2026
This page identifies the company that operates Beeving and explains, in detail, what personal data we collect through beeving.com and app.beeving.com, why we collect it, how long we keep it, who we share it with, and how you can exercise your rights. It includes a dedicated section on the data we receive from Google and Microsoft when you connect a mailbox.
Company name: GROUPE GARAN
Trading name: Beeving
Legal form: SAS, Simplified Joint Stock Company (Société par Actions Simplifiée)
Share capital: 100,00 €
Registered office: 200 rue de la Croix Nivert, 75015 Paris, France
SIREN: 953 558 582
SIRET (head office): 953 558 582 00029
RCS: 953 558 582 R.C.S. Paris
VAT number: FR64953558582
NAF/APE code: 82.11Z (Services administratifs combinés de bureau)
Date of incorporation: June 8, 2023
President: Armand Bouchard
Chief Executive Officer (Directeur Général): Grégory Julien
Grégory Julien, Directeur Général of GROUPE GARAN.
Website (beeving.com): Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States.
Application and data (app.beeving.com): dedicated servers operated by GROUPE GARAN and located in the European Union. Your data, including mailbox data received from Google and Microsoft, is stored there.
The data controller is GROUPE GARAN, a French SAS with a share capital of 100 €, registered under SIREN 953 558 582 (RCS Paris), headquartered at 200 rue de la Croix Nivert, 75015 Paris, France, trading as Beeving.
Beeving is a B2B outreach platform. Customers use it to send email campaigns and sequences from their own mailboxes, manage contacts, run LinkedIn automation, enrich contacts, warm up mailboxes and track results.
For the contacts our customers import and email through Beeving, the customer is the data controller and Beeving acts as a data processor on their instructions. This policy covers the data for which GROUPE GARAN is the controller: data about our users, and the mailbox data we receive from Google and Microsoft to operate the Service.
When you create a Beeving account, we collect your name, email address, company name, and authentication credentials. If you invite teammates, we collect their name and email address.
To send campaigns, you connect one or more email accounts. Depending on the provider, we store:
The contacts you import (names, email addresses, company, job title, LinkedIn URL and any custom fields), the templates and sequences you write, the messages sent on your behalf, and their events: deliveries, opens, clicks, replies, bounces and unsubscribes.
Payments are processed by Stripe. We do not store your full card number. Stripe acts as an independent data controller for payment data. See Stripe's privacy policy.
When you connect a Google Workspace or Gmail account to Beeving, you authorize Beeving to access your mailbox through Google APIs, under the permissions (scopes) you explicitly grant on Google's consent screen. This section describes what we access, why, what we store, how we protect and share it, and what we never do with it.
| Google scope | What it allows | Why Beeving needs it |
|---|---|---|
| openid userinfo.email | Read the email address of the Google account | Identify which mailbox you connected and display it in your sender list. |
| gmail.send | Send email on your behalf | Send the campaign emails, sequence follow-ups and warmup emails you schedule, from your own mailbox, so they land in your Sent folder and replies come back to you. |
| gmail.readonly | Read messages, threads, labels and mailbox history | Detect replies, bounces and out-of-office responses to the messages Beeving sent, so a sequence stops as soon as a prospect answers, and show those replies in your Beeving inbox. |
| gmail.modify | Change labels on messages (read/unread, inbox, spam, archive) | Mailbox warmup: when another warmup mailbox in the network emails yours, Beeving moves that message out of spam, marks it as read and archives it, which teaches mailbox providers that your address is trusted. Only warmup messages carrying a Beeving marker are touched. |
Beeving never deletes your messages, never changes your Gmail settings, never reads your contacts or calendar, and never accesses Google Drive or any other Google service.
We use Google user data only to provide the features you see and use in the product: sending your outreach, stopping sequences on reply, showing replies in your inbox, reporting deliverability, and warming up your mailbox. We do not use Google user data for advertising, for profiling, or to develop, improve or train generalized artificial intelligence or machine learning models.
We do not store or index the rest of your mailbox. Messages that are not related to your Beeving outreach or warmup are read only transiently, to determine whether they are a reply, and are not retained.
Google user data is stored on servers located in the European Union, in a database encrypted at rest, and transmitted only over TLS. Access to production systems is restricted to a small number of GROUPE GARAN engineers, authenticated with individual credentials and multi-factor authentication.
We do not transfer Google user data to anyone, except to our hosting infrastructure as necessary to operate the features described above, for security purposes such as investigating abuse, to comply with applicable law, or with your explicit consent. We never sell it, never use it for advertising, never share it with data brokers, and never use it to determine credit-worthiness or for lending purposes.
No one at Beeving reads your Google user data unless you ask us to (for example, to investigate a support request), it is necessary for security or to comply with the law, or the data has been aggregated and anonymized for internal operations.
Beeving's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect a Google account at any time from your Beeving sender settings, or revoke Beeving's access from your Google account permissions. When you disconnect an account, delete it from Beeving, or delete your Beeving account, we delete the associated OAuth tokens immediately and the associated mailbox data within 30 days. You may also request deletion by email at .
When you connect a Microsoft 365 or Outlook.com account, Beeving requests the openid, profile, email, offline_access, Mail.Send and Mail.ReadWrite permissions through Microsoft Graph. They serve exactly the same purposes as the Google scopes above: identify the mailbox, send your outreach and warmup emails, detect replies, and move warmup messages out of junk.
Everything in section 4 about use, storage, sharing, human access and deletion applies identically to Microsoft user data. You can revoke Beeving's access from your Microsoft account permissions or, for Microsoft 365, from your organization's admin center.
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and manage your account, provide the platform | Performance of contract (Art. 6(1)(b)) |
| Access your Google or Microsoft mailbox to send, detect replies and warm up | Consent (Art. 6(1)(a)), given on the provider's OAuth consent screen |
| Process the contacts you import and the messages you send | Performance of contract (Art. 6(1)(b)); Beeving acts as processor |
| Process payments and issue invoices | Performance of contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)) |
| Analyze usage to improve the product | Legitimate interest (Art. 6(1)(f)) |
| Secure the Service and prevent abuse | Legitimate interest (Art. 6(1)(f)) |
| Send service-related emails | Legitimate interest (Art. 6(1)(f)) |
We share personal data only with the following processors, strictly for the purposes described above:
We may also disclose data when required by law, court order or a request from a public authority, and in connection with a merger, acquisition or sale of assets, in which case this policy continues to apply.
We do not sell your data. We do not share it with advertisers or data brokers. Where a processor is located outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.
You can delete your account from your settings or by writing to . Backups are rotated within 30 days.
We protect your data with industry-standard measures:
No method of transmission or storage is completely secure. If we become aware of a breach affecting your data, we will notify you and the competent authority as required by the GDPR.
Under the GDPR, you have the right to:
To exercise any of these rights, email us at . We will respond within 30 days. You may also file a complaint with the CNIL, the French data protection authority: www.cnil.fr.
The entire content of this website and of the Beeving application (structure, texts, logos, images, videos, software, databases) is the exclusive property of GROUPE GARAN or its partners and is protected by French and international intellectual property law.
Any reproduction, representation, modification, publication or adaptation of all or part of these elements, by any means, is prohibited without prior written authorization from GROUPE GARAN. The terms of service govern your right to use the Service.
We may update this page from time to time. Significant changes will be communicated by email or in-app notification. The "last updated" date at the top reflects the most recent revision. If we ever want to use Google or Microsoft user data for a purpose not described here, we will ask for your consent first.