Privacy Policy

What we collect

We collect the email you register with, the password hash (never the password itself), and the Google Business Profile data you choose to connect (locations, reviews, reply history). We store OAuth tokens encrypted at rest and never share them with third parties.

Why we collect it

To let you manage reviews and grow your Google Business Profile. That is the entire scope. We do not sell your data and we do not build advertising profiles. Everything we show you comes from the Google account you connected.

Google user data

When you connect Google, we request the minimum scopes needed to read your profile, list your locations, read reviews, and post replies you approve. We do not read your Gmail, Drive, Calendar, or any other Google service. Tokens are stored encrypted with a key that lives only on our server. You can disconnect at any time from Settings - that revokes the token in our database.

AI providers

Dropwebs uses AI models to draft review replies and analyze review text. The provider is selected in our admin panel (typically Groq, Gemini, OpenRouter, or a self-hosted model). When AI is used, review text is sent to that provider under their terms. AI is never sent your OAuth tokens, passwords, billing details, or personal data outside review content.

Payment data

PayPal payments are handled by PayPal - we never see your card number. For Wise payments, we only store the reference you enter so an admin can match your transfer.

Cookies

Only a session cookie for keeping you signed in. No advertising cookies. No third-party trackers on app pages.

Data retention

Your account and its data are kept while your account is active. Delete your account by emailing us and we will remove your data within 30 days, except records we must keep for accounting or legal reasons.

Your rights

You can export your data, correct it, or delete it. Email [email protected].

---

Contact: [email protected]