This policy explains what data we collect, how we use it, and your rights over it.
What we collect
- Account info. Your email address (used for sign-in via magic link).
- Business info you provide. Company name, owner name, service area, phone, voice preferences, pricing rules, and any files you upload or edit in the Service.
- Customer interactions. Inbound SMS and email from your customers, conversation history, leads, jobs, quotes, and reviews. This data belongs to you.
- Usage data. Page views, agent runs, error reports. Used to operate and improve the Service.
How we use it
We use the data only to operate the Service for you: powering your AI helpers with the rules you set, processing customer conversations, displaying your dashboard. We do not sell your data to third parties. We do not use your customer interactions to train AI models without your explicit opt-in.
Subprocessors
We use the following subprocessors to operate the Service:
- Supabase (database + authentication)
- Vercel (hosting)
- Anthropic (AI model provider)
- Twilio (SMS + voice)
- Resend (email delivery)
- Google (Business Profile API, when you connect your Google account)
Each is under contractual obligations to handle data securely.
Google account data (Google API Services User Data Policy)
When you connect your Google account to the Service so the SEO and Reviews & Referrals agents can manage your Google Business Profile, we receive a limited set of Google user data through the Business Profile API. We handle that data as follows:
- What we receive. Read and write access to the Google Business Profile locations you own, your basic Google profile (name, email, picture) for display in our dashboard, and the OpenID identifier returned by Google during sign-in. Scopes requested:
https://www.googleapis.com/auth/business.manage,openid,userinfo.email,userinfo.profile. - How we use it. Solely to operate features you have explicitly enabled: reading your Business Profile info so the agents can write accurate posts and review replies; publishing posts and review responses on your behalf, only after your configured approval flow (auto / quick / manual modes you set during onboarding). We never read, share, or write to anything outside your Business Profile.
- How we store it. Access and refresh tokens are stored in our database scoped to your business account only, accessible only to our backend service code. They are deleted immediately when you disconnect via the Disconnect button or when you delete your account.
- Who we share it with. Nobody. We do not sell, lease, or trade Google user data. We do not transfer it to any third party for advertising. We do not use it for credit-worthiness or lending. Our subprocessors above access it only to the extent strictly required to host, run, and back up our database (e.g. Supabase and Vercel infrastructure providers).
- Humans accessing your data. Our team does not read your Google user data except (a) with your explicit permission, (b) for security purposes, (c) to comply with applicable law, or (d) when the data has been aggregated and anonymized for internal operations.
- Training AI models. We do not use Google user data to develop, improve, or train generalized or non-personalized AI/ML models.
The Service's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke our access to your Google account at any time by clicking Disconnect in the app or visiting your Google account permissions page.
Your rights
- You can export your data by request.
- You can delete your account; data is removed within 30 days.
- You can ask what data we hold about you at any time by emailing us.
Cookies + storage
We use cookies for sign-in sessions and localStorage for UI state (your dashboard layout, draft progress). No third-party tracking cookies, no advertising cookies.
Customer messaging + TCPA
When the Service sends SMS on your behalf, it uses your registered AI line and follows TCPA opt-in / opt-out. Customers can reply STOP at any time to be removed from all future messages across all agents in your account, permanently.
Changes
We may update this policy. Material changes will be communicated before they take effect.
Contact
Questions about your data: nathan@byzaheer.com