Respondso
Log inTry it FREE

Privacy Policy

Last updated: June 26, 2026

This Privacy Policy explains how Respondso (“Respondso”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects information when you use our website at https://respondso.com and the related application (together, the “Service”). It also describes how we handle data obtained from Google APIs, including Google Business Profile, in compliance with the Google API Services User Data Policy, including the Limited Use requirements.

1. Who we are

Respondso provides a tool that helps business owners generate and publish professional responses to Google reviews. You can contact us at support@respondso.com for any privacy related question or request.

2. Information we collect

We collect the following categories of information:

  • Account information. When you sign up, we receive your email address, name, and profile picture from your authentication provider (Google sign-in or email/password).
  • Google account and Google Business Profile data. If you choose to connect your Google Business Profile, we receive: your Google account identifier and email, the list of Google Business Profile accounts and locations you manage, business details (name, address, category, phone, website and similar listing information), and the reviews left on those locations including reviewer name, rating, text, and timestamps, together with any replies you publish through the Service.
  • OAuth tokens. We store the access token and refresh token issued by Google so the Service can call Google APIs on your behalf. Tokens are stored in our database with row-level security and are never shared with other users or third parties.
  • Content you create. Custom instructions you set for the AI, draft replies, edits, and replies you publish to Google.
  • Billing information. When we launch paid plans we will use a third-party payment provider (planned: Lemon Squeezy or Paddle). The provider processes your payment details directly; we receive only a customer identifier, plan, billing country, and invoice metadata. We do not store full card numbers.
  • Technical and usage data. IP address, browser and device information, pages viewed, actions taken in the Service, and error diagnostics. This is used to operate, secure, and improve the Service.
  • Communications. Messages you send us (e.g. support emails).

3. How we use Google user data

We access Google user data only to provide features you have explicitly requested and only within the scopes you authorize during Google sign-in. Specifically, we use Google user data to:

  • Authenticate you and create or sign you into your Respondso account.
  • List the Google Business Profile accounts and locations you manage so you can select which ones to use inside the Service.
  • Fetch reviews left on the locations you select, display them in your dashboard, and generate suggested replies using AI.
  • Publish, edit, or delete review replies on Google on your behalf when you click the corresponding button.
  • Refresh access tokens so the above features keep working without re-prompting you on every visit.

Limited Use disclosure. Respondso’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not allow humans to read it except (a) with your explicit consent, (b) for security purposes (e.g. investigating abuse), (c) to comply with applicable law, or (d) where the data has been aggregated and anonymized and is used for internal operations. We do not use Google user data to train, fine-tune, or develop general-purpose AI or machine learning models.

4. AI processing of review content

When you ask the Service to generate a reply, the relevant review text and your custom instructions are sent to our AI provider (Lovable AI Gateway, which routes requests to large language model providers) solely to generate the suggested reply that is returned to you. We do not send Google account identifiers, OAuth tokens, or reviewer contact details. The AI provider is contractually prohibited from using this content to train its models.

5. Legal bases for processing (GDPR)

If you are in the European Economic Area or the United Kingdom, our legal bases are:

  • Performance of a contract — to provide the Service you signed up for.
  • Consent — for connecting your Google account and granting specific Google API scopes. You can withdraw consent at any time by disconnecting your Google account inside the Service or revoking access at myaccount.google.com/permissions.
  • Legitimate interests — to secure the Service, prevent abuse, debug, and improve product quality.
  • Legal obligation — to keep billing records and respond to lawful requests.

6. Sharing of information

We share information only with the following categories of recipients, and only as needed to run the Service:

  • Google — when we make API calls on your behalf at your request (e.g. publishing a reply).
  • Hosting and infrastructure — Cloudflare (edge hosting and CDN) and Supabase (database, authentication, storage).
  • AI provider — Lovable AI Gateway, used to generate suggested replies as described in Section 4.
  • Payment provider — once paid plans launch, Lemon Squeezy or Paddle will process your payments.
  • Analytics and error monitoring — limited technical data used to keep the Service healthy.
  • Authorities — when required by law, regulation, legal process, or to protect rights, safety, or security.
  • Successors — in connection with a merger, acquisition, or sale of assets, subject to the protections in this Policy.

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

7. Data retention

  • OAuth tokens — kept while your Google connection is active; deleted within 30 days after you disconnect or delete your account.
  • Cached Google Business Profile and review data — kept while your connection is active so the dashboard remains usable; deleted within 30 days after disconnect or account deletion.
  • AI-generated drafts and published replies — kept for up to 12 months for your reference, or until you delete them or your account.
  • Billing records — kept for up to 10 years to comply with tax and accounting laws.
  • Server and security logs — kept for up to 90 days.

8. Security

We use industry-standard measures to protect your data, including encryption in transit (TLS), encryption at rest for our database, row-level security so each user can only access their own data, scoped API keys, and strict access controls for our team. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

9. Your rights and choices

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data or complete incomplete data.
  • Delete your data (“right to erasure”).
  • Restrict or object to certain processing.
  • Export your data in a portable format.
  • Withdraw consent at any time, without affecting the lawfulness of prior processing.
  • Lodge a complaint with your local data protection authority.

You can disconnect your Google account at any time inside the Service, and you can revoke Respondso’s access to your Google account at myaccount.google.com/permissions. To delete your Respondso account and associated data, email support@respondso.com — we will process the request within 30 days.

10. International data transfers

Our service providers may process data outside your country, including in the United States and the European Union. Where required, transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with information, contact us and we will delete it.

12. Cookies

We use cookies and similar technologies that are strictly necessary to keep you signed in and to keep the Service secure. We do not use advertising cookies.

13. Changes to this Policy

We may update this Policy from time to time. If we make material changes we will notify you by email or via a notice in the Service before the changes take effect. The “Last updated” date at the top of this page indicates the latest revision.

14. Contact us

Questions, requests, or complaints? Email us at support@respondso.com.