Privacy policy
Draft. Not reviewed by an attorney. See the note in `terms.md`.
Last updated 10 September 2026.
The short version
We hold as little as we can. We never store the text of your Google reviews beyond a short working window, we never store the text of anyone else's, and the review drafts we write are built only from facts you confirmed.
If you are a customer scanning a card
You do not have an account with us and we do not ask for your name, your email or your phone number.
When you scan, we record that a scan happened, which card it came from, the rating you tapped, whether you copied the text, whether you changed it, and whether you continued to Google. We do not record what you typed. We do not know whether you posted anything, because once you leave for Google we cannot see what happens.
Your browser is given an opaque random token so the page can tell a returning device from a new one and so the same words are not handed to two people. It is random. It is not a fingerprint, and it identifies nothing about you.
If you are a business using the service
We hold your email address and password, kept by our authentication provider, hashed. We never see your password.
For each location we hold what you gave us or confirmed: the business name and branch, its Google listing, coordinates, the review link, your logo, your colour, and the facts you ticked. Against each approved fact we record who approved it and when, because that record is what makes a draft defensible.
We hold counts: scans, ratings, copies, redirects, and the rating and review count your listing shows over time.
Google data
If you connect your Google Business Profile, we hold a token that lets us read your reviews and post replies, encrypted, and you can revoke it at any time from your Google account or from ours.
Review text is held for at most 30 days and then deleted, keeping only counts. This is a condition of Google's API terms and we hold to it.
We never store or derive from Google Places review text, meaning the public reviews visible on any listing. Not yours, not anyone's. The vocabulary in your drafts comes from your own reviews through your own connection, from your website, and from what you typed.
Where we show data from Google, we say so and attribute it.
Who else sees it
Our sub-processors are listed at /subprocessors. We do not sell data, and we do not share it for advertising.
How long we keep it
- Google review text: 30 days.
- Authentication events, which record sign ins and password changes and never
passwords or tokens: 90 days, then reduced to counts.
- A closed account: personal data deleted, with the store record kept as a
tombstone so printed codes keep resolving to a neutral page.
- Anonymous scan and rating counts: kept, because they carry nothing personal.
Your rights
Ask us and we will give you a copy of what we hold, or delete it. Closing your account from the billing page does both. If you are in the UK, EU or California you have rights under your own law, and we will honour them wherever you are.