Join 200+ owners getting weekly growth tips. No spam, unsubscribe anytime.
Your data is protected by bank-grade encryption and hosted in Canada.
Last updated: March 30, 2026
We collect information you provide directly when you register for and use our Services, including: your business name, contact name, email address, phone number, business address, and Google Place ID. When you use our review automation services, we may process your customers' names and email addresses to send review requests on your behalf. We also collect usage data such as login activity, feature usage, and interaction with the Services.
We use the information we collect to: (a) provide, maintain, and improve the Services; (b) send review requests and marketing communications on your behalf; (c) generate performance reports and analytics; (d) process payments and manage your subscription; (e) communicate with you about your account, updates, and support requests; and (f) comply with legal obligations. We do not use your information for purposes unrelated to providing the Services without your consent.
We share your information only as necessary to provide the Services: (a) Stripe processes your payment information securely — we do not store credit card numbers; (b) Resend delivers emails on your behalf; (c) Google receives review-related data when you use our review automation features. We do not sell, rent, or trade your personal information to third parties. We may disclose information if required by law or to protect our rights.
We use the following third-party services to operate our platform: • Stripe (stripe.com) — Payment processing. Your payment information is processed directly by Stripe and never stored on our servers. Stripe is PCI DSS Level 1 certified. • Resend (resend.com) — Email delivery. Customer names and email addresses are transmitted to Resend to deliver review request emails on your behalf. • Cloudflare (cloudflare.com) — Content delivery and security. Web traffic passes through Cloudflare's network. We maintain Data Processing Agreements with each provider. Your data may be processed in the United States in accordance with these agreements.
We use artificial intelligence (Anthropic Claude) in the following ways: • Review request personalization: AI crafts job-specific review request messages. • Review response drafting: AI drafts responses to Google reviews for your approval. • Social media content: AI generates post suggestions from completed jobs. • Quote generation: AI creates quote estimates from job descriptions. • Customer inquiry handling (AI Receptionist): AI may respond to customer emails on behalf of your business, with your pre-authorization. • Business insights: AI analyzes your business data to provide recommendations. • Support triage: Incoming support requests may be automatically categorized. AI features are only active for Growth tier subscribers who have opted in. No AI-generated content is sent to your customers without your prior configuration and consent. All AI-generated content can be reviewed before sending. You may disable any individual AI feature at any time in your portal settings. Data sent to AI processing: business name, service descriptions, customer names, job descriptions, review text. Data NEVER sent to AI: payment information, passwords, personal addresses, financial data. We may extract anonymous product improvement signals from aggregated interactions (e.g., commonly requested features, trending topics). These signals contain NO personal data, NO customer names, NO dollar amounts, and are not linked to any individual account. They are used solely to prioritize platform improvements. Our AI provider (Anthropic) does not use your data to train their models. You have the right to request human review of any automated decision. Contact us at [email protected].
We retain your account data and business information for as long as your subscription is active. After cancellation or termination, we retain your data for 90 days to allow for account reactivation. After the 90-day period, your data is permanently deleted from our systems and backups. You may request earlier deletion by contacting us at [email protected].
Under the Quebec Act Respecting the Protection of Personal Information in the Private Sector (Law 25) and the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to: (a) access the personal information we hold about you; (b) request correction of inaccurate information; (c) request deletion of your personal information; (d) request portability of your data in a commonly used format; (e) withdraw consent to certain data processing; and (f) file a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada. To exercise these rights, contact us at [email protected].
We use minimal cookies necessary for the operation of the Services. Session cookies are used for authentication in the client portal. We do not use third-party tracking cookies or advertising pixels. We may use basic analytics to understand how the Services are used and to improve them.
We implement appropriate technical and organizational measures to protect your personal information, including: encryption of data in transit (TLS/SSL), encryption of data at rest, access controls limiting data access to authorized personnel, and regular security assessments. While we strive to protect your information, no method of transmission over the Internet is 100% secure.
The Services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
Your data is stored and processed in Canada. If any data is transferred outside of Canada, we will ensure that adequate safeguards are in place in accordance with applicable Canadian privacy legislation, including PIPEDA and Quebec Law 25.
For questions or concerns about this Privacy Policy or our data practices, please contact our privacy officer at [email protected]. You may also file a complaint with the Commission d'accès à l'information du Québec (CAI) or the Office of the Privacy Commissioner of Canada (OPC).
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. Changes take effect 30 days after posting. We encourage you to review this policy periodically.
This Privacy Policy is available in both English and French. Both versions are official. In the event of any inconsistency or discrepancy between the English and French versions, the French version shall prevail, in accordance with the Charter of the French Language (Quebec).