Legal

Privacy Policy

Operated by Business And Profits, LLC · Last updated: September 7, 2026

This Privacy Policy explains how Business And Profits, LLC ("we," "us," or "our") handles information through LeaveAReview / LeaveAReview.co (the "Service"), including review capture pages, reporting, and Google Business Profile Auto Reply. It covers business customers, their authorized representatives, and visitors to pages we host.

1. Google Account Access and Data

Connecting Google is optional and is required for features that read or respond to your Google Business Profile reviews. Google handles sign-in and permission approval. We do not receive or store your Google password.

Auto Reply requests the https://www.googleapis.com/auth/business.manage permission. Google describes this as a broad Business Profile management permission; LAR uses it to find accounts and locations you can manage, connect a location, read its profile and reviews, and publish or update review replies. LAR does not request access to Gmail messages, Google Drive files, Calendar, or contacts.

During connection and use, we access or store:

Connection records: OAuth access and refresh tokens, token expiry, account and location identifiers, location names, available account contact information, connection status, and pending location-selection information.
Business and review content: profile descriptions, review identifiers, review text, star ratings, reviewer display names, review dates, and existing owner replies.
Reply records: selected examples of previous review/reply pairs, business-specific writing preferences, AI drafts, posting status, and reply timestamps.

When available, LAR imports up to ten previous owner-reply examples during setup to help match the business's writing style. An administrator can edit the business context and examples used for future drafts.

2. Other Information We Collect

Information you provide: business names, addresses, logos, review links, team-member names and aliases, writing instructions, example replies, and contact details in support requests.
Review-link activity: business/page identifiers, team-member referral identifiers, and click timestamps for reporting.
Operational information: server logs may include IP addresses, browser information, requested pages, timestamps, and errors. The click endpoint also uses an IP-derived identifier to limit excessive requests.

3. How We Use Information

Create and host business review pages and report review-link activity.
Connect the selected Business Profile, retrieve reviews, and personalize, generate, display, and publish replies for that business.
Support optional background reply processing while the business remains connected and automatic mode is enabled.
Provide business reporting, including review attribution to team members using names, aliases, click timing, or an administrator's manual assignment. These matches are estimates and can be corrected.
Answer support requests, maintain the Service, investigate errors or abuse, and meet applicable legal obligations.

4. AI Processing and Business Voice

We send review text, business context (which may include the Google profile description), tone instructions, and example review/reply pairs to Anthropic's Claude API to generate replies. Any personal information present in those texts is included in that processing. OAuth tokens and Google passwords are not included in the generation prompt.

The feature labeled "Training" personalizes prompts for your business using instructions and examples. LAR does not fine-tune model weights or use Google user data to develop, improve, or train general-purpose or non-personalized AI/ML models.

Anthropic processes API requests under its commercial terms and policies. Its published standard API retention is up to 30 days, with exceptions for agreed arrangements, safety enforcement, and legal requirements. This is Anthropic's policy, not a statement that LAR's own stored records expire in 30 days. See Anthropic's API retention explanation and Privacy Policy.

OpenAI — Planned Additional Provider

LAR currently generates replies through Anthropic. OpenAI is a planned additional AI provider; LAR does not currently send review data to OpenAI. If OpenAI reply generation is enabled, the OpenAI API would receive the same relevant prompt categories described above: review text, business context, tone instructions, and example review/reply pairs, including personal information within those texts. Google OAuth credentials would not be included.

Before activating OpenAI processing, we will identify the provider in the applicable product disclosure and obtain any required additional consent. The same purpose, Google-data use restrictions, and LAR retention controls apply regardless of provider. We will not opt Google user data into optional provider sharing for generalized model training.

OpenAI states that API inputs and outputs are not used to train its models by default. Its API retention varies by feature and account configuration: standard abuse-monitoring logs may contain customer content and be retained for up to 30 days, or longer when legally required or reasonably necessary to protect the services or others from harm. Some API features also retain application state. LAR does not claim an OpenAI zero-data-retention arrangement. See OpenAI's business-data commitments, API data controls, and Privacy Policy.

Only include information you are authorized to provide in business context and examples. Avoid unnecessary sensitive personal information. Replies posted to Google are public.

We do not sell personal information. We do not use or transfer Google user data for advertising, retargeting, data brokerage, credit decisions, or generalized AI model training.

Google: receives authenticated requests and the reply text you or your authorized operator approve for posting, including replies produced under an authorized automatic-reply arrangement.
Anthropic: receives the prompt information described above to provide reply generation.
OpenAI (planned): would receive the disclosed prompt information only when OpenAI processing is introduced with the notice and consent described in Section 4.
Hosting and delivery providers: Railway hosts the application and database services; GitHub supports storage and publishing of review-page files and assets. Public page information is visible to visitors. Page fonts may be requested from Google Fonts, which receives normal connection information such as IP address and browser headers.
Authorized operators: the business's designated service operators manage its connection, review content, drafts, and settings. Support access to Google content is limited to your permission for specific assistance, security or abuse investigation, or legal necessity.
Legal disclosures and business transfers: information may be disclosed where required by law. A transfer of Google user data in a merger, acquisition, or sale of assets requires your explicit prior consent.

These restrictions on Google data use and transfer reflect the Google API Services User Data Policy, including its Limited Use requirements. Service-provider processing is limited to delivering the disclosed features and the permitted security and legal purposes.

6. Storage, Retention, and Deletion

LAR removes a review's local Auto Reply record, including its text, reviewer details, and draft, after a successful reply. Any separate local attribution copy for that review is also removed. Before posting, LAR checks Google's current reply status to avoid answering a review that already has a reply.

Temporary Google content: unanswered review records, Google profile content, and imported owner-reply examples expire after 29 days in the active application database, providing a margin below Google's 30-calendar-day storage ceiling. Saving settings does not extend the original expiry of imported content. Cleanup runs at startup, once per minute while the service runs, and before database requests. Expired content is excluded from reply generation. When needed, LAR may retrieve current content from Google again; if retrieval fails, expired copies are not used.

Business voice and connections: imported examples are temporary prompt inputs, not permanent model training. LAR can retrieve fresh examples when needed. Customer-authored tone instructions and examples can remain while the service is active. Google-prefilled business text keeps its source expiry, including when edited. OAuth credentials and account/location identifiers needed to maintain your authorized connection are kept separately from the temporary content; content expiry does not require monthly reconnection. LAR may keep the time of its last successful reply without retaining the review content.

Disconnect in LAR: the admin panel's Disconnect action removes that business's main OAuth connection record, pending connection records, Auto Reply review/draft records, review-attribution records, and writing settings from the active database, and attempts to revoke the Google token. This stops future processing through that saved connection. It is not a guarantee that Google accepted the revocation or that a request already in progress was canceled.

Full deletion: Disconnect does not itself remove every category of information, including review-click reports, team settings, or hosted review pages. Contact support@leaveareview.co with the business name and page URL to request deletion of remaining LAR-held data or closure of the service. We may verify your authority before acting. Do not send passwords or access tokens.

Support, operational, and business records may be retained where needed to resolve requests, protect the Service, or satisfy legal obligations. The active-database expiry described here does not establish the retention period of infrastructure backups or provider-held logs. Provider-held copies follow the applicable provider's retention and legal requirements. Copies held by Anthropic are covered by the provider-processing explanation in Section 4.

Disconnecting LAR does not delete reviews or replies already published on Google. Authorized business managers can manage their replies using Google's available controls. Removing a hosted review page also does not erase printed QR codes or physical tap cards.

7. Your Choices and Requests

Stop automatic replies: switch the business out of Auto Mode in the admin panel, or contact your LAR operator to do so. Already posted replies remain on Google.
Revoke Google access: remove LeaveAReview from your Google Account's third-party connections. Revocation stops future authorized API access but does not itself delete LAR-held records. A Google authorization may cover more than one connected location.
Disconnect or delete: use the controls and support route in Section 6. Business owners without admin-panel access can contact us directly.
Access or correction: contact us to request a copy of information associated with your business or correction of inaccurate data. Reviewers can also contact us about their information; identify the relevant business and review.

Depending on applicable law, you may have additional access, deletion, correction, objection, or portability rights. We handle requests subject to identity verification and applicable legal requirements.

8. Security and Browser Storage

The public Service uses HTTPS. Google authorization uses OAuth rather than collecting your Google password, and the server uses HTTPS to communicate with Google and Anthropic. OAuth tokens are stored in the backend database; application service credentials are configured on the server. These measures do not guarantee that every record is encrypted at rest or that unauthorized access is impossible.

Admin tools use browser storage or session mechanisms for operational settings and access state. Review pages use click reporting as described above. We do not use advertising cookies or cross-site advertising tracking.

9. Children's Privacy

The Service is intended for adult business users, not children under 18. If you believe a child provided personal information directly to us, contact us so we can investigate and address it.

10. Changes to This Policy

We post revisions here with an updated date. Material changes to Google data access, sharing, or purposes require notice and any necessary additional consent before the new use begins; continued use alone does not authorize a new Google-data purpose.

11. Contact

Business And Profits, LLC
LeaveAReview.co
Privacy, deletion, and support: support@leaveareview.co
leaveareview.co