Security and privacy

We read reviews and post replies through Apple's, Google's and Meta's own APIs, using access you granted.

No scraping, no browser automation, no logging in as you. That matters beyond principle: unofficial access is what gets listings flagged, and your listing is the thing being protected here.

Sign-in is a one-time code sent to your email. There is no password, which means there is no password to reuse, leak, or phish.

One active session at a time, and a session goes idle after 72 hours. Signing in somewhere new ends the old session.

The tokens and keys you connect are encrypted at rest and never sent to the browser. Nothing in the interface will show you a stored secret, not even to you. The UI reports whether a credential is present and working, not what it is.

We hold what is needed to fetch your reviews and post your replies. Nothing else about your store account is read.

Reviews and messages from the sources you connected, the replies drafted for them, and what happened to each one. That history is what makes the analytics and the digests possible.

Reviewer data comes from what the platform gives us with the review: the same public text and display name anyone reading your listing can see.

Delete permanently on a connector purges the reviews, drafts and messages that came from it. Analytics exports the integrations summary to CSV whenever you want it.

For a full copy of what we hold, or to have it deleted, ask us. Depending on where you live you have the right to access, correct, delete or export your data, and the request routes are in the policies below.

We do not sell any of it. The details are in the privacy policy and the data deletion policy, and there is a signed Data Processing Agreement if your compliance team needs one. See the DPA.

The last control is the one that matters most in public: nothing posts under your name unless you turned auto-send on for that app, and low ratings are held even then.

If you are ever unsure what the automation would do, switch Auto Send off. Drafting continues, and every reply waits for a human again.