Privacy Policy

Last updated: [DATE]

This Privacy Policy explains what information [YOUR BUSINESS NAME] ("we", "us") collects through our review collection platform (the "Service"), and how it's used.

1. Information We Collect

• Account data: name, email, hashed password, business name.
• Business data: location details, Google Business Profile connection (via OAuth), review content, replies, and AI-generation settings you configure.
• End-customer review data: when a customer scans your QR code, we process their rating, language/aspect selections, and any AI-drafted or private feedback text they submit.
• Usage data: QR scan events, AI usage logs, and basic analytics needed to operate and bill the Service.

2. How We Use It

We use this data to operate the Service — generating review drafts, posting replies to Google, managing your subscription, sending you account and billing emails, and improving the product.

3. Google Business Profile Access

If you connect your Google Business Profile, we access it only to read/sync your reviews and post replies on your behalf, using the permissions you explicitly grant via Google's OAuth consent screen. You can revoke this access at any time from your Google Account settings.

4. Data Retention

We keep account and review data for as long as your account is active. Some short-lived operational data (e.g. anonymous scan logs, abandoned review sessions, rate-limit counters) is automatically deleted after a limited retention window.

5. Sharing

We don't sell your data. We share data only with service providers necessary to run the platform (e.g. hosting, database, email delivery, AI provider) and with Google, where required to post reviews or replies you initiate.

6. Your Choices

You can request access to, correction of, or deletion of your account data by contacting us. End customers using the public review flow are not required to create an account.

7. Contact

Questions about this Policy? Contact us at [YOUR CONTACT EMAIL].