Privacy Policy

1. Information We Collect

Information You Provide Directly

When you sign up for or use our Service, you may provide us with:

• Account Information: Name, email address, phone number, business name, business address
• Business Profile Information: Details about your business, including business category, hours, services offered, and tone preferences for review responses
• Payment Information: Your bank details are entered on Stripe's page and held by Stripe; we keep the bank's name and the last four digits.
• Acceptance Record: When you accept your agreement we record the name you type, the time, your IP address and your device's browser details, as the record that you accepted.
• Photos: Photos your staff email to your photo address, to post on your profile.
• Communication Records: Records of your communications with us, including emails, phone calls, and support requests

Information Collected Automatically

When you access or use our Service, we may automatically collect:

• Usage Data: Pages visited, features used, time spent on the Service, click patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Tracking Technologies: Standard web cookies for authentication, preferences, and analytics

Information from Third-Party Sources

To deliver our review management service, we access certain information from Google through your Google Business Profile, with your explicit authorization. This may include:

• Your business's Google Business Profile information
• Customer reviews left on your Google Business Profile
• Owner reply history
• Business performance metrics from Google Business Profile

We only access information you have explicitly granted us permission to access by adding us as a Manager on your Google Business Profile.

2. How We Use Your Information

We use the information we collect to:

• Provide the Service: Generate AI-drafted review responses in your business's voice and post them to your Google Business Profile, and, on the Full Profile Management plan, publish posts and photos and keep your profile's services and description current
• Maintain Your Account: Authenticate users, manage subscriptions, and provide customer support
• Process Payments: Process subscription fees through Stripe
• Communicate With You: Send service updates, billing notifications, monthly reports, and respond to inquiries
• Improve the Service: Analyze usage patterns to enhance features and performance
• Ensure Quality: Conduct human review of AI-generated responses to maintain quality standards
• Comply with Legal Obligations: Meet our legal, regulatory, and contractual requirements

3. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

• With Google: To post review responses, and on Full Profile Management to publish posts and photos and keep your profile's services and description current, on your behalf through the Google Business Profile API, with your explicit authorization
• With Service Providers: Third-party vendors who help us operate the Service, including:
  • Stripe (payments and the bank authorization you set up on its page)
  • Anthropic (AI drafting of review replies, posts and your profile description)
  • Vercel (website and application hosting)
  • Supabase (data storage)
  • Resend (the emails we send and the photos you email to us)
• For Legal Reasons: When required by law, court order, or government regulation
• With Your Consent: When you explicitly authorize us to share specific information
• In Business Transfers: If Delatte Reviews is acquired, merged, or undergoes a similar transaction, your information may be transferred as part of that transaction

We require all third-party service providers to maintain reasonable security measures and use your data only for the purposes we specify.

4. Data Security

We implement reasonable security measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS)
• Encrypted data storage for sensitive information
• Access controls limiting who can view your data
• Regular security reviews and updates
• Secure payment processing through PCI-compliant providers

While we work hard to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your information for as long as:

• Your account is active
• Necessary to provide you with the Service
• Required to comply with legal obligations, resolve disputes, and enforce our agreements

If your service ends, we retain your account information for up to 90 days in case you wish to reactivate. After that period, we delete or anonymize your account information, except where retention is required by law (such as tax records, which we retain for 7 years). We keep your accepted agreement, the record of your acceptance, and your invoices and payment records, as the record of what was agreed and paid.

6. Your Rights and Choices

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correct: Update or correct inaccurate information
• Delete: Request deletion of your account and personal information (subject to legal retention requirements)
• Export: Request a copy of your data in a portable format
• Opt Out: Unsubscribe from marketing communications (transactional communications related to your account will continue)
• Revoke Access: Remove us as a Manager from your Google Business Profile at any time, which will stop our ability to access your reviews

To exercise any of these rights, contact us at derek@delattereviews.com. We will respond within 30 days.

7. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Analyze usage patterns
• Improve the Service

You can control cookies through your browser settings. Disabling cookies may limit functionality of the Service.

8. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review their privacy policies before providing any information.

9. Children's Privacy

Our Service is intended for use by businesses and is not directed to children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will delete it promptly.

10. International Users

Our Service is operated from the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

11. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect
• The right to request deletion
• The right to opt out of sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your rights

To exercise these rights, contact us at derek@delattereviews.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email to your account email address for material changes

Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us: