Privacy Policy

Last updated: April 2026

What we collect

We collect your email address, name, and billing information when you sign up. We also access your Google Business Profile reviews via OAuth, which you explicitly authorise. We do not access your personal Google account, Gmail, or any data outside of your business reviews.

How we use your data

• To generate AI-drafted responses to your reviews using Anthropic's Claude API
• To send you email notifications (negative review alerts, weekly digest)
• To process payments via Stripe
• To improve our service through aggregate, anonymised analytics

Google API data

We access your Google Business Profile reviews and post responses on your behalf. Your Google OAuth tokens are stored encrypted. We request the minimum scopes necessary (business.manage). You can revoke our access at any time from your Google account permissions.

Data storage

Your data is stored in Supabase (PostgreSQL), hosted on AWS infrastructure in the United States. Review text and AI-generated responses are stored to power your dashboard. We retain your data while your account is active and for 30 days after deletion.

Third-party processors

• Anthropic — AI response generation (review text is sent to their API)
• Stripe — Payment processing
• Resend — Transactional email delivery
• PostHog — Product analytics (anonymised)

Your rights

You can request a copy of your data, correction of inaccurate data, or deletion of your account at any time by emailing privacy@reviewreply.ai.

Contact

Questions? Email us at privacy@reviewreply.ai.