Privacy Policy

1. Data we process

Restaurant Reputation Tools processes Google Business Profile reviews (author name, rating, content, date) on behalf of its restaurant operator users. We do not collect personal data from end customers leaving the reviews.

2. Google User Data

This section details how we handle data obtained from Google APIs (Google Business Profile API specifically). It complements the general data principles described elsewhere on this page.

2.1 What Google data we collect

• Review content (author display name, rating, text, timestamp) fetched from Google Business Profile.
• Business profile metadata (business name, address, location identifier) needed to associate reviews with the correct restaurant.
• OAuth tokens (access token and refresh token) issued by Google during the connection flow, stored encrypted at rest.

2.2 How we use Google data

• Display reviews in the operator's dashboard so they can see what needs a response.
• Generate AI-assisted reply drafts via Anthropic's Claude API (review content is sent as input ; no personally identifiable information beyond what is already public on Google is included).
• Publish the operator's approved response back to Google Business Profile via the API.

2.3 Retention

Google data is retained as long as your Google Business Profile is connected to Restaurant Reputation Tools. Upon disconnection, we stop fetching new data immediately. Historical data we have already stored is deleted within 30 days of an explicit deletion request sent to contact@restaurant-reputation-tools.fr.

2.4 Sharing

We share Google user data only with the following processors, and only to the extent necessary to operate the service:

• Anthropic (Claude API)— to generate reply drafts. Review text is transmitted at draft generation time. Anthropic's data usage is governed by their commercial terms ; they do not train models on this data.
• Supabase (EU region) — encrypted storage of reviews, drafts, and OAuth tokens.

We do not share Google user data with any third party for advertising purposes. We do not sell Google user data.

2.5 Your rights

You can disconnect Restaurant Reputation Tools from your Google Account settings at any time, which immediately stops all data access. To request export or deletion of historical data we have stored, email contact@restaurant-reputation-tools.fr. Deletion is performed within 30 days of receipt.

2.6 Limited Use disclosure

Restaurant Reputation Tools' use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve user-facing features that are prominent in the requesting application. We do not transfer this data to others unless doing so is necessary to provide and improve these features, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users. We do not use this data for serving advertisements. We do not allow humans to read this data unless we have the user's affirmative agreement for specific messages, doing so is necessary for security purposes such as investigating abuse, to comply with applicable law, or our use is for internal operations and the data has been aggregated and anonymized.

3. Subprocessors

We use the following third-party services to operate our application. Each subprocessor processes data only as necessary to provide their service to us:

• Anthropic (United States) — provides the Claude AI model that generates draft replies. We send the review content and your configured tone of voice. Claude does not retain this data beyond the API call. https://www.anthropic.com
• Supabase (European Union) — provides our database and authentication infrastructure. Stores encrypted user accounts, restaurant configurations, reviews, drafts, and approved replies. https://supabase.com
• Vercel (United States) — hosts our application. Processes inbound web requests. Does not have direct access to our database. https://vercel.com

We update this list whenever we add or remove a subprocessor. Last update: May 10, 2026.

4. Purpose

Reviews are read to generate AI-assisted reply drafts and published back to Google Business Profile via the official API with the operator's explicit consent on each publication.

5. Storage

Reviews are not stored on our servers. AI-generated drafts are ephemeral and discarded after publication. Audit logs of API calls are retained for 30 days for diagnostic purposes only.

6. Third parties

We use Anthropic Claude (AI) and Google Business Profile API. No data is shared with marketing or analytics third parties.

7. Contact

For any privacy-related question, contact us at contact@restaurant-reputation-tools.fr.