Privacy Policy

1. Information We Collect

When you use Ovation, we collect:

• Account information: Name and email address from your Google account when you sign in.
• Google Business data: Business locations, reviews, and review replies accessed through the Google Business Profile API. We only access data necessary to provide our review management service.
• Payment information: Processed by Stripe. We do not store credit card numbers.
• Usage data: Pages visited, features used, and actions taken within the application.

2. How We Use Your Information

• To provide and maintain the Ovation service
• To generate AI-drafted replies to your Google reviews
• To publish review replies on your behalf when you approve them
• To send notifications about new reviews and service updates
• To process payments and manage subscriptions

3. Google API Data

Ovation accesses Google Business Profile data through Google's APIs. Our use of this data complies with the Google API Services User Data Policy, including the Limited Use requirements.

We only access the minimum data needed to provide review management. We do not sell, share, or use your Google data for advertising purposes. Google OAuth tokens are encrypted at rest.

4. AI Processing

Review text is sent to Anthropic's Claude API to generate reply drafts. Review content is processed in real-time and is not stored by the AI provider beyond the API request. We do not use your review data to train AI models.

5. Data Storage and Security

Your data is stored on secured servers. Google OAuth tokens are encrypted at rest using AES-256 encryption. All connections use HTTPS/TLS encryption in transit.

6. Data Sharing

We do not sell your data. We share data only with:

• Stripe: For payment processing
• Anthropic: For AI reply generation (review text only)
• Google: To publish approved replies to your business profile

7. Data Retention and Deletion

You can request deletion of your account and all associated data by contacting us at [email protected]. Upon deletion, we remove all stored data including Google tokens, review history, and account information within 30 days.

8. Contact

For privacy questions or data deletion requests, contact us at [email protected].