Privacy Policy

• Account data - your name, email address, business name, and a hashed password. We never store passwords in plain text.
• Business and review data - the Google businesses you add, their public ratings and reviews, and the replies posted to those reviews.
• Google account data - if you connect your Google Business Profile, we store an OAuth token and the permissions you granted. Section 4 explains this in detail.
• Team data - names, email addresses, and roles of teammates you invite, and which reviews and card scans are credited to each person.
• Scan data - when someone taps or scans a card, we record the time, the card, the scan method (QR or NFC), the IP address, browser user agent, and referrer. IP addresses give us approximate location; we do not collect precise GPS location.
• Customer feedback - ratings and comments customers choose to send privately, with the name and contact details they optionally include.
• Order and billing data - your orders, shipping address, and subscription status. Payments run through Stripe; we never see or store your card number.
• Keywords and rank scans - the search keywords you track and the map ranking results we collect for them.

We use this data to run the product: show your dashboard, sync your reviews, credit reviews and scans to teammates, draft and post review replies you enable, track your map rankings, fulfill card orders, bill subscriptions, and answer support requests.

We do not sell your personal data. We do not share it for targeted advertising. We have no advertising partners.

Some features send text to AI providers: drafting replies to your reviews and generating sample content. When you use these features, the review text, your business name, and your tracked keywords are sent to an AI provider to generate the response. We do not use your data to train AI models, and our agreements with these providers do not permit them to train on it.

Connecting your Google Business Profile lets us sync your reviews first-party and post replies through your own profile. We access: your Business Profile account and location information, your reviews, and the ability to post review replies. We use this access only to provide the features you see in the dashboard.

Our use of Google user data follows the Google API Services User Data Policy, including the Limited Use requirements. We never sell Google user data, never use it for advertising, and never let humans read it except with your permission, for security, or where the law requires.

You can disconnect Google at any time from the Businesses page - this deletes the stored token immediately. You can also revoke our access from your Google account permissions.

Only service providers that run the product, and only what each one needs:

• Stripe - payments and subscriptions.
• Fly.io - hosting and databases.
• Google - Business Profile sync and review replies.
• DataForSEO - public review and map-ranking data collection.
• AI providers (via OpenRouter) - reply drafting, as described in section 3.
• Resend - transactional email (order updates, invites, feedback alerts).

We may also disclose data when the law requires it, or as part of a merger or sale of the business - in which case this policy still applies to it.

SMS review requests are not live yet. When they launch, we will collect customer phone numbers only with the consent required by law, send only the messages the business requested, and honor STOP and HELP replies automatically. This policy will be updated before the feature ships.

We keep your data while your account is active. To delete your account and its data, email support@gitmoreviews.com - we delete personal data within 30 days, except records we must keep for tax, billing, or legal reasons. Disconnecting Google deletes the stored token immediately; synced review copies are removed with account deletion.

All traffic is encrypted in transit (TLS). Passwords are hashed. OAuth tokens and database access are restricted to the systems that need them. No method of storage is perfectly secure - if we learn of a breach that affects your data, we will notify you.

You can ask us to access, correct, export, or delete your personal data at any time by emailing support@gitmoreviews.com. We honor these requests regardless of where you live, including rights under the CCPA and GDPR where they apply. We do not sell or share personal data as those laws define it, so there is nothing to opt out of.

gitmoreviews is a business tool. It is not directed at children under 13, and we do not knowingly collect their data.

If we change this policy, we update the date at the top; material changes get an email to account holders. Questions: support@gitmoreviews.com, or the support page. See also our Terms of Service.