1Introduction & Scope
This Privacy Policy describes how SmbFlo ("we," "our," or "us") collects, uses, and discloses your information when you use our website, local search automation tools, and application services (collectively, the "Service").
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree to the practices described here, please do not authenticate your Google accounts or access our workspace dashboard.
2Information We Collect
We only collect data necessary to provide operational, high-impact review automation and performance analytics for local storefront nodes.
- Personal Data: While using our Service (including signing up for our waitlist or registering an account), we may ask you to provide certain personally identifiable parameters, such as your business email address, business name, phone number, and support criteria.
- Google Account Credentials (OAuth): When you link your Google Business Profile to our platform, we request secure read/write authorization via Google OAuth. We store your unique Google Account ID, Location IDs, business metadata (e.g., storefront name, address, zip code), and API access/refresh tokens.
- Review Data: We ingest and store customer review content, reviewer names, reviewer profile images (if publicly available), and ratings associated with your authorized Google Business locations to generate local SEO-optimized drafts and dashboard graphs.
3. Google API User Data Policy Compliance ("Limited Use")
SmbFlo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We only request OAuth permissions strictly necessary to display reviews and post owner-authorized replies (specifically the `https://www.googleapis.com/auth/business.manage` scope).
- We do not sell, rent, or transfer your Google user data to third-party databases, advertising networks, or data brokers.
- Your Google API data is used strictly to power your automated response queue, notifications, and dashboard analytics. No raw review strings are permanently saved for external advertising contexts.
4How We Use Your Data
We leverage data internally to compile, analyze, and automate replies for your storefront review pipeline:
- To generate automated and draft review responses using modern artificial intelligence models (such as Google Gemini APIs). No customer PI data is passed to external models for model training purposes.
- To dispatch real-time SMS and email de-escalation alerts directly to your designated support destination when low rating reviews (1, 2, or 3-stars) are captured.
- To monitor review volumes, average response latencies, and sentiment statistics to present inside your analytics command console.
- To manage subscription scopes, billing states, and trial allocations via our payment processor (Stripe).
5Data Retention & Deletion Rights (GDPR / CCPA Compliance)
You hold full administrative authority over your connected listings and can disconnect our platform at any moment:
- Disconnecting Service:You can revoke SmbFlo's API access permissions at any time directly through your Google Account Security Dashboard under "Third-party apps with account access."
- Data Erasure Request: You have the right to request the complete erasure of your stored email context, meta-locations, refresh tokens, and historical logs. Contact us directly at support@smbflo.com, and our database systems will complete the request and confirm within 5 business days.
6Third-Party Sub-Processors
We route encrypted transaction requests through standard providers to secure API executions:
- Stripe: Secure billing operations. We do not store financial card data.
- Gemini: Review processing and response drafting.
- Supabase: For authenticated database isolation and login encryption.