Privacy Policy

What we collect

Account information. Your email address and, if you sign up with a password, that password (handled by our authentication provider, Supabase. We never see or store it in plain text). If you use “Continue with Google” instead, we receive your Google account's email address and basic profile from Google. We also keep the name of your business or location, and your billing details (handled by Paddle. We don't store your card number).

Google Business Profile access. When you connect your Google Business Profile, we store an encrypted OAuth refresh token that lets us read new reviews and post replies on your behalf. This token is encrypted before it ever reaches our database, using a key that is never stored alongside the data it protects, so a database compromise alone cannot decrypt it. We only request the Google permissions needed to read reviews and post replies, nothing broader.

Review content. The text, star rating, and reviewer name of reviews left on your connected locations, along with the replies we generate and whatever edits you make to them.

Voice settings. The tone and any custom notes you provide to shape how your replies sound, and the star-rating threshold you set for auto-posting.

Usage data. Basic application logs (sign-ins, errors, which features you use) that help us keep the service running and fix problems.

How we use it, and who we share it with

We use your data to operate Starproof: pulling in new reviews, generating replies, posting them back to Google, billing your subscription, and emailing you about your account, including, once those notifications are available, when a review needs your approval. We don't sell your data, and we don't use your reviews or replies to train any model.

A few outside services necessarily see part of your data, because they're how Starproof works:

• Google: lets you sign in with “Continue with Google”, and, once you connect your Business Profile, reads your reviews and posts replies via the Google Business Profile API.
• Anthropic: your business name, each review's star rating, text and reviewer name, your voice settings, and replies you've edited (as style examples) are sent to Anthropic's Claude API to draft each reply. Anthropic processes this text to generate a response; it is not used to train Anthropic's models under our agreement with them.
• Supabase: hosts our database, handles sign-in, and sends the sign-up confirmation and password-reset emails. Row-level security ensures your data is only ever readable by your own account.
• Vercel: hosts the application. It sees the traffic to and from it, including IP addresses and standard request logs.
• Cloudflare (Turnstile): checks that a person, not a bot, is using the login, sign-up and password-reset forms. It receives your IP address and browser signals on those pages only.
• Have I Been Pwned: when you set a password, we check it against known breaches by sending only the first 5 characters of a hash of it — never the password itself, and never your email.
• Paddle: is the merchant of record for your subscription — it handles payment, tax/VAT collection and remittance, and we never see your card details, only confirmation that you're paid up.
• Resend: delivers email sent from Starproof, such as approval notifications once they're available.

The full list, what each service receives, and whether it's in use yet is on our subprocessors page.

We may also disclose information if required by law, or to protect the rights, property, or safety of Starproof, our users, or others.

How long we keep it

We keep your account, review, and reply data for as long as your account is active, so your reply history stays intact. You can delete your account yourself at any time from your Account page. That removes your account, locations, reviews, replies, voice settings and Google connection from our database straight away, and cancels your subscription.

Two things are outside that. Paddle, our payment provider, keeps its own record of past payments for tax and accounting purposes, and we can't remove it. And we don't currently keep database backups, so deleted data isn't retained in one; if that changes, we'll say here how long deleted data can remain in them.

Your rights

From your Account and Reply settings pages you can, at any time, download a copy of your data, correct your reply settings, and delete your account. If you'd like to disconnect your Google Business Profile without deleting your account, or you're in a jurisdiction (like the EU/UK under GDPR, or California under the CCPA) that gives you additional rights over your personal data, contact us at privacy@starproof.app. We'll respond within 30 days.

Security

All traffic to Starproof is encrypted in transit (TLS). OAuth tokens are encrypted at rest as described above. Access to your data is restricted by row-level security policies scoped to your account, verified against cross-account access before any real customer data is stored.

Children's privacy

Starproof is a business tool and isn't directed at children. We don't knowingly collect personal information from anyone under 16.

Changes to this policy

If we make a material change to how we handle your data, we'll email the address on your account before it takes effect.

Contact

Questions about this policy? Write to privacy@starproof.app.