Privacy Policy

This Privacy Policy describes how Business And Profits, LLC ("we," "us," or "our") collects, uses, and shares information when you use LeaveAReview.co (the "Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

Information You Provide

When you use the Service, you may provide:

• Business information — your business name, address, Google review link, and related details used to create your review capture page.
• Contact information — your name and email address if you contact us directly.
• Google account credentials — if you connect your Google Business Profile to use the Auto Reply feature, we store OAuth access tokens to communicate with Google on your behalf. We do not store your Google password.

Information Collected Automatically

When visitors interact with your review capture page, we may collect:

• Click data — when a visitor clicks your Google review link, we log a click event (timestamp and referrer) for your reporting dashboard.
• Usage data — standard web server logs including IP addresses, browser type, and pages visited. This data is used for security and service reliability.

Google Business Profile Data

If you connect your Google Business Profile, we access and store:

• Your business location name and Google account identifier
• Reviews posted to your Google profile (text, star rating, reviewer name)
• AI-generated draft replies created by the Service
• Your business profile description (used to personalize AI reply tone)

This data is used solely to operate the Auto Reply feature on your behalf and is never sold or shared with third parties for marketing.

2. How We Use Your Information

• To create and host your review capture page
• To generate and post AI-drafted replies to your Google reviews (Auto Reply feature)
• To provide click-through analytics for your review link
• To communicate with you about your account or the Service
• To maintain the security and reliability of the Service
• To comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share it in the following limited circumstances:

• Service providers — third-party vendors that help us operate the Service (e.g., cloud hosting, database services). These providers are contractually bound to protect your data.
• Google APIs — when you use Auto Reply, we communicate with Google's APIs on your behalf using your stored OAuth token.
• Anthropic (Claude API) — review text is sent to Anthropic's Claude API to generate reply drafts. Anthropic's privacy policy applies to that processing.
• Legal requirements — if required by law, court order, or to protect our rights.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you disconnect your Google account using the Disconnect feature in the admin panel, we immediately delete all associated review data, training configuration, and OAuth tokens from our systems and revoke the app's access on Google's side.

Review capture page files hosted on our platform are not automatically deleted when you disconnect and must be removed separately upon request.

5. Cookies and Tracking

The Service uses minimal tracking. Review capture pages may use a lightweight click-tracking call when a visitor taps your Google review link. We do not use advertising cookies or cross-site tracking.

6. Third-Party Services

The Service integrates with:

• Google APIs — subject to Google's Privacy Policy
• Anthropic Claude API — subject to Anthropic's Privacy Policy
• Railway — our hosting provider, subject to Railway's Privacy Policy

7. Security

We implement commercially reasonable security measures to protect your information, including encrypted storage of OAuth tokens and API keys. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights regarding your personal data:

• Access — request a copy of the information we hold about you.
• Correction — request that inaccurate data be corrected.
• Deletion — request deletion of your data. For connected Google accounts, use the Disconnect button in the admin panel for immediate deletion.
• Opt-out — you may revoke our Google access at any time via your Google Account settings (myaccount.google.com → Security → Third-party apps).

California residents may have additional rights under the CCPA, including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, contact us at the address below.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact:

Business And Profits, LLC
support@leaveareview.co
leaveareview.co