Privacy Policy

1. Information We Collect

When you sign up for SmallBizReply, we collect your name, email address, and business name. When you connect your Google Business Profile, we receive an access token that allows us to read your reviews and post replies on your behalf. We do not store your Google password.

2. How We Use Your Information

We use the information we collect to:

• Read and respond to your Google reviews
• Send you weekly review digests and account notifications
• Improve our service and develop new features
• Communicate with you about your account

3. Google Data

We access your Google Business Profile data solely to provide our review management service. We request only the permissions necessary to read reviews and post replies. You can revoke access at any time through your Google Account settings.

4. Data Storage & Security

Your data is stored securely using industry-standard encryption. We use Supabase for database hosting and Vercel for application hosting. We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Cookies

We use essential cookies to keep you signed in. We also use analytics and advertising cookies and similar technologies (described in “Analytics and session recording” below) to understand how visitors use our site and to measure our marketing. You can control non-essential cookies through your browser settings.

6. Analytics and Session Recording

To understand how people use SmallBizReply and to improve it, we use the following third-party services, which may set cookies and collect usage data such as the pages you visit, the links and buttons you click, your device and browser type, approximate location (derived from your IP address), and the site that referred you:

• Google Analytics and Google Tag Manager (Google)
• Meta Pixel (Meta), used to measure the performance of our advertising
• Vercel Analytics (Vercel), aggregate traffic and performance
• PostHog, product analytics and session recording. Session recordings capture how visitors interact with our pages (mouse movement, clicks, scrolling, navigation, and text entered into forms) so we can find and fix confusing or broken steps. Password fields are always masked, and we never use recordings to sell or share your information.

We do not run these tools on our internal admin pages, and we do not sell your personal information. You can opt out of Google Analytics using Google’s browser add-on, and limit ad measurement through your device and Meta ad settings.

7. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data and revoke all Google access tokens within 30 days.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Revoke Google access at any time

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or through a notice on our website.

10. Contact Us

If you have questions about this privacy policy or your data, contact us at hello@smallbizreply.com.