Scopes we request
For account sign-in we request basic profile and email scopes (openid, email, profile). For Business Profile features we request the business.manage scope, which is the minimum scope required to read reviews and publish replies and posts on the owner's behalf.
How we use Google user data
Google Business Profile data, including review text, ratings, and reviewer display names provided by Google, is used to draft reply suggestions, schedule Google Posts that the owner approves, generate branded review graphics from approved reviews, and produce the weekly owner summary email.
Limited use commitments
ReviewsRelay does not transfer Google user data to third parties except as needed to provide or improve user-facing features that are prominent in our product, comply with applicable law, or as part of a merger or acquisition with continued enforcement of these commitments.
ReviewsRelay does not use Google user data to serve advertisements, and we do not allow humans to read Google user data unless we have the user's affirmative agreement, it is needed for security purposes, or it is required to comply with applicable law.
Google user data is never used to develop, improve, or train generalized or non-personalized AI or machine learning models.
Storage and security
OAuth access and refresh tokens issued by Google are encrypted at rest using AES-256-GCM with a key managed by the ReviewsRelay server. Reviews and posts pulled from Google are stored only inside the workspace database that the owner authorized.
How owners revoke access
Owners can disconnect ReviewsRelay from inside the workspace at any time, which removes the encrypted Google tokens we hold. Account deletion also removes stored Google connection rows and encrypted tokens from the ReviewsRelay database. Owners can also revoke ReviewsRelay's access at any time from their Google Account permissions page at https://myaccount.google.com/permissions.
Contact
Questions about Google data handling can be sent to Swift Pixel LLC at [email protected].