Privacy Policy

Last updated: October 10, 2026

TendReply (“we,” “us”) provides software and a managed service that helps small businesses such as restaurants, shops, and hotels read and reply to their Google reviews. This policy explains what information we handle, how we use it, who can see it, and the choices you have. We collect only what we need to run the service, and we never sell your data.

Who this covers

This policy applies to business owners and their staff who use TendReply (“customers”), and to the review data we process on their behalf. We are a business-to-business tool; we do not knowingly collect information from consumers directly, and the service is not directed to children.

Information we collect

• Account information — your business name, email address, a securely hashed password, and the settings you choose (business type, language, automation level, locations).
• Business content you provide — your brand voice settings, knowledge-base facts, and the replies you write or edit. If you ask us to, we also import content from your own website to suggest knowledge-base facts; you approve each suggestion before it is used.
• Google Business Profile data — when you connect your Google account, we access through Google’s official Business Profile APIs: the name and identifier of the listing(s) you authorize, the reviews on those listings (reviewer display name, star rating, review text, and dates), and the replies posted to them. We do not access your Gmail, contacts, calendar, or any other Google service.
• Billing information — payments are taken by Stripe. Your card details go to Stripe and never reach us; we keep your plan, its status and price, the amounts and dates of your payments, invoice links, and Stripe’s customer and subscription identifiers. To show prices in your currency, we read the country your connection comes from (as reported by our hosting provider); we don’t store it.
• Demo bookings — if you book a live demo on our website, we keep the name, email, business name, notes and time you give us, put the meeting on our calendar and email you a confirmation.
• Usage and diagnostic data — records needed to operate the service securely (for example, when a reply was posted, settings changes, the cost of AI drafting, and errors). We use no advertising or analytics trackers.
• Cookies — only ones the service needs: vc_session keeps you signed in (7 days); vc_location remembers which location a multi-location account is showing (30 days); g_oauth_state and g_oauth_return protect and route the Google connection step (minutes); gcal_state does the same for our own team’s calendar connection. Your browser also remembers one chart preference on your device. Stripe’s checkout pages, and the bot check on the demo booking form when it is on (Cloudflare Turnstile), set their own cookies under their own policies.

How we use information

• To read your incoming Google reviews and draft replies in your brand voice. Drafts are generated with the help of an AI model provider (currently Anthropic). The review text and your brand settings — and, if you ask us to import your website, that page’s text — are sent to that provider for this purpose only, under contract, and it does not use them to train its models.
• To personalize your drafts using the replies you have written or edited — your own content, used only for your account.
• To post replies to Google only in line with your settings — automatically only after your explicit opt-in, and never for the most severe reviews (health, safety, legal, or discrimination), which always wait for a human.
• To show you dashboards, insights, trends, and monthly reports about your own reviews.
• To bill you, send you account emails (confirming your address, password resets, notices about your account) and schedule demos you book.
• To secure the service, prevent abuse, and provide support.

Who can see your data

Your reviews and replies are yours, and only your own login can act on them. So that we can keep checking the service works for you, the TendReply team can open a read-only view of your dashboard. It shows the same pages you see, including the text of your reviews, replies, drafts, insights and settings. From that view our team cannot post, approve, edit, skip or delete a reply, or change any of your settings. Those actions belong to your login alone, and every time our team opens the view, it is recorded. The rest of our console shows counts (how many reviews came in, how many replies were posted, how many are waiting for you), ratings and sentiment as numbers, the health of your Google connection, and your billing, and it has no way to answer a review for you. The people who run the service can also technically reach the database behind it. Outside the read-only view, they look at review content only when you ask us to (for example in a support request, or to export or delete your data), to fix a problem that stops the service working for you, for security, or to comply with the law. Your data is never shown to another customer.

Google user data — Limited Use

TendReply’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google Business Profile data only to provide and improve the user-facing features described above: reading your reviews, drafting and posting replies, and your own dashboards and reports.
• We do not sell Google user data, do not use it for advertising, do not use it to determine credit-worthiness, and do not transfer it to data brokers or advertising platforms.
• We do not use Google user data to develop, improve, or train generalized artificial-intelligence or machine-learning models.
• We transfer Google user data to third parties only to provide those features (the service providers listed below), to comply with the law, for security, or as part of a merger or acquisition with notice to you and the same protections.
• Human access is limited as described in “Who can see your data.”

How we store and protect it

Access tokens for your Google account are encrypted at rest. Data is stored on cloud infrastructure in the United States, isolated per business so one customer can never see another’s data. We restrict internal access and log actions taken on your account.

Sharing

We share information only with service providers that help us run TendReply, each under confidentiality obligations and only for that purpose: Vercel (hosting), Neon (database), Anthropic (AI drafting and website import), Google (to read your reviews and post replies on your behalf), Stripe (payments and invoices), and Google Workspace (our own email and calendar — the account emails we send you and the demo meetings you book). We may disclose information if required by law. We do not sell your information.

Your choices and control

• Disconnect anytime — revoke TendReply’s access from your Google account settings or from within the app; this immediately stops all posting.
• Choose your automation level — full, balanced, or manual — and withdraw auto-post consent with one switch, at any time.
• Access, correct, or delete your data — email us and our team will provide a copy, correct it, or delete it within 30 days, subject to legal retention limits.

Retention

We keep your account data while your account is active. Review content obtained from Google — the reviews, the replies, and everything we derived from them (drafts, categories, reports) — is kept only to provide your own dashboards and reports. Our team deletes it within 30 days after you ask us to, after you disconnect your Google account (unless you reconnect), or after you cancel or close your account, unless the law requires us to keep it longer. This deletion is done by our team, not automatically.

Billing records (plan, payments, invoices) are kept as long as tax and accounting rules require; Stripe keeps its own. Our record of actions on your account (for example “reply posted” or “settings changed”, and what AI drafting cost) is kept while your account exists; the parts that describe a review are removed when your review data is deleted. Our hosting provider keeps request logs (addresses and pages requested, errors) for a limited period set by its plan. Demo-booking details are kept as long as we need them to hold the demo and follow up, and deleted on request.

Businesses outside the United States

If your business is outside the United States (for example, in Mexico), your data is processed and stored in the United States as described above, and this policy serves as our privacy notice to you. By using the service you consent to that transfer.

Changes

We may update this policy; we will post the new date above and, for material changes, notify you.

Contact

Questions or requests: patricio@tendreply.com.