Privacy Policy
Last updated: October 10, 2026
Plain-language notice: this policy is written in plain English and has not been reviewed by an attorney. It is a starting point, not legal advice. Have a qualified attorney review it before relying on it for a real business.
What we collect
Account information. When you sign up, we collect your name and email address so we can identify your account and send you sign-in links.
Google Business data you authorize. If you connect your Google Business Profile, we access only what you approve through Google's authorization screen: your business locations, the reviews left on them, and the replies you post. We store copies of this data so the dashboard works even when Google is slow or unreachable.
Payment information. Subscriptions are processed by Stripe. We never see or store your full card number — Stripe handles that, and we keep only your customer ID, subscription ID, and billing status.
Basic usage logs. Like most web services, our hosting provider records technical data (such as IP addresses and error logs) needed to keep the service running and secure.
How we use it
- To run the service: syncing your reviews, drafting replies, and showing your dashboard.
- To sign you in (magic-link emails) and keep your account secure.
- To bill your subscription and handle cancellations.
- To fix bugs and improve reliability.
We do not use your business's review data to train AI models.
What we don't do
- We do not sell your personal data. Not to advertisers, data brokers, or anyone else.
- We do not share your data except with the service providers needed to operate (hosting, email delivery, payments, and the Google APIs you authorized) — and only as much as each one needs to do its job.
- We do not contact your customers. Replies you post come from your business, under your control.
Your choices
Disconnect Google any time from onboarding — we'll stop syncing new data. Cancel your subscription any time; the service stays active until the end of your billing period.
Delete your account: email us (see contact below) and we'll delete your account, business, synced reviews, and connection tokens. Backups may retain copies for a short window before they roll off.
Security
Google OAuth tokens are stored encrypted, connections use HTTPS throughout, and access to production data is limited. No system is perfectly secure, but we take reasonable steps to protect your information.
Children
This service is for businesses, not children. We do not knowingly collect data from anyone under 13.
Changes to this policy
If we change this policy in a meaningful way, we'll note the new "last updated" date above. Continued use of the service after changes means you accept them.
Contact
Questions about privacy? Email hello@clearstackstudio.com.