Privacy policy

Who we are

Google Review Agent is operated by Regulance. This policy explains what we collect, why, and who sees it.

What we collect about you (the business)

• Your email address, name, business name, timezone, and Google review link.
• Settings you choose: message templates, timing, and any integration keys you paste in. Keys are stored so we can verify webhooks and look up customer details; we never display them back in full.
• Billing details are handled by Stripe. We store your Stripe customer id and subscription status, never your card number.
• Login codes and session records so you can sign in without a password.

What we collect about your customers

• Name, mobile number, and optionally email, as provided by you or by the tool you connected.
• The messages we send on your behalf, delivery status, whether the review link was tapped, any reply, and opt outs.

We process your customers' data only to send the review request you asked for and to show you what happened. We do not sell it, use it for advertising, or contact your customers for any other reason.

Who else sees it

• Messaging and carrier providers, to deliver texts.
• Stripe, for billing. Resend, for the emails we send you. Our hosting and database providers.
• Google, when we look up your listing's rating and review count.
• Square or Calendly, only when you connect them and only to receive the events you configured.

Each provider only receives what it needs to do its job.

Opt outs

When a customer replies STOP, we record the opt out and never text them for your business again. You can see opted out customers in your dashboard but cannot re-add them.

Retention and deletion

We keep your data while your account is active. If you cancel, we keep it for 90 days in case you come back, then delete it, except records we must keep for legal or billing reasons and opt out records, which we keep so we continue to honor them. Email us to delete your account sooner or to get a copy of your data.

Security

Data is encrypted in transit. Sessions use secure, httpOnly cookies. Login codes expire in ten minutes and work once. Access to production systems is limited to the people who run the service.

Your choices

You can update your business details and templates any time in Settings. You can sign out of every device from Settings. For anything else, email us at the address above.