Privacy policy

ReviewDesk is operated by WebBuddy Agency. You can reach us about anything on this page at finance@webbuddy.agency.

We hold four kinds of data.

• Your account. Your name, email address, and a one-way hash of your password. We never store your password itself, and we never ask for your Google password.
• Your business. Location names, addresses, phone numbers, websites, opening hours, and the plan you are on.
• Your customers. Names, and the phone number or email address you enter so the desk can send a review request. You supply this — we do not buy or scrape contact lists.
• Data from Google. Described in the next section.

When you connect a Google account, we ask for two permissions. We ask for nothing else, and we only ever act on the profiles that the connected account already manages.

• business.manage — lets us list the locations on your Business Profile, read the reviews left on them, publish the replies you approve, and create the posts you write. This is the core of the product.
• calendar.readonly — optional, and only if you connect Calendar from Settings. We read event times so the desk knows a visit happened and can ask for a review afterwards. We do not read attachments or write to your calendar.

We store the review text, star rating, reviewer display name, and reply status that Google returns, so the desk can show you an inbox rather than re-fetching everything on every page load. We also store the refresh token Google issues, because without it you would have to sign in again every hour.

We do not use Google data for advertising, we do not sell it, and we do not use it to train machine-learning models.

ReviewDesk’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use a small number of processors to run the product. Each one sees only what it needs to do its job.

• OpenAI — when you ask the desk to draft a reply, the review text, the reviewer’s display name, the star rating, and your location name are sent to OpenAI’s API to generate that draft. The draft is shown to you for approval; nothing is published until you approve it. OpenAI does not train its models on data sent through its API.
• Resend — sends review request emails and low-star alerts on your behalf.
• Twilio — sends review requests by SMS or WhatsApp, where you have enabled them.
• Stripe — handles subscription billing. Card details go to Stripe directly and never touch our servers.
• Fly.io — hosts the application and its database.

We do not sell personal data, and we do not share it with anyone else except where the law requires it.

Account, location, customer, and review data is kept while your desk is open. Close your account and we delete it within 30 days, except where we are required to keep billing records for tax purposes.

Disconnect Google on the Locations page withdraws our access at Google and deletes the stored token. From that moment we can no longer read your reviews or publish anything on your behalf. Listings and reviews already on the desk stay where they are — they simply stop updating.

You can also revoke our access directly from your Google account permissions page, which has the same effect and does not depend on us.

To delete everything we hold, email finance@webbuddy.agency and we will confirm once it is done.

The application is served over HTTPS, the database is not exposed to the public internet, and access to production is limited to the people who operate the service. Passwords are stored only as hashes. No system is perfect, and we will tell affected customers promptly if something goes wrong.

You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Write to finance@webbuddy.agency.

If we change how we handle data, we will update this page and move the date at the top. Material changes will be emailed to account owners. The current terms are at /terms.