Privacy Policy

1. Information We Collect

Account information: Email address and password when you create an account.

Business information: Name, business type, city, owner name, and business description you provide during onboarding.

Google Business Profile data: When you connect your Google account, we access your business reviews and post replies on your behalf. We store OAuth tokens to maintain this connection. We do not access your Gmail, contacts, or any other Google services.

Usage data: Number of reviews processed, replies posted, and subscription usage metrics.

2. How We Use Your Information

• → To provide the Service — reading your Google reviews and generating AI replies
• → To send daily digest emails summarizing replies posted on your behalf
• → To send transactional emails (account confirmation, password reset, billing)
• → To enforce subscription plan limits and reset monthly usage counters
• → To improve our AI reply quality over time (using anonymized patterns only)

3. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL) with row-level security enabled, meaning each user can only access their own data. Google OAuth tokens are stored encrypted and are used solely to interact with the Google Business Profile API on your behalf.

We use industry-standard TLS encryption for all data in transit. We do not sell your data to third parties under any circumstances.

4. Third-Party Services

AdvayaAI uses the following third-party services to operate:

• → Anthropic Claude API — to generate AI review replies (review text is sent to Anthropic for processing)
• → Google Business Profile API — to read reviews and post replies
• → Supabase — for secure database storage and authentication
• → Stripe — for payment processing (we never store card details)
• → Resend — for transactional email delivery
• → Vercel — for application hosting

5. Data Retention

We retain your account data for as long as your account is active. Review data and reply history are kept for 12 months. When you delete your account, all personal data is permanently deleted within 30 days, except where required by law for billing records.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time from your account Settings page. You can disconnect your Google account at any time, which immediately stops all Google API access. To request account deletion, email us at hello@advayaai.com.

7. Google API Disclosure

AdvayaAI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google account data to provide and improve the AdvayaAI service, and we do not use it for advertising, sell it to third parties, or use it for any purpose unrelated to the service.

8. Cookies

We use only essential session cookies required for authentication. We do not use tracking cookies or advertising cookies.

9. Contact

For privacy questions or data requests, contact our privacy team at privacy@advayaai.com.