Legal
Privacy Policy
In short
- Smart Repute reads the Google reviews of the business profiles you connect, helps you draft replies with AI, and publishes a reply only after you approve it.
- We access your Google name, email address and profile picture to sign you in, and your Google Business Profile data (the businesses you manage, their reviews and rating) to provide the app. We request no other Google data.
- We never sell your data, never use it for advertising, and never use it to train AI models.
- Your customers' reviews are read from Google when you use the app. We do not keep a copy in our database.
- You can disconnect Smart Repute at any time, in the app or in your Google Account, and you can ask us to delete your data.
1. Who we are and what this policy covers
Smart Repute (www.smartrepute.com) is a web application operated by Dr. Abhinav Rao, Chennai, Tamil Nadu, India ("Smart Repute", "we", "us"). It helps people who manage a Google Business Profile to read their Google reviews, draft replies with the help of AI, approve those replies, and publish them to Google.
This policy explains what information we collect, including the Google user data the app accesses, how we use, store, share and protect it, how long we keep it, and how you can have it deleted. It applies to the Smart Repute website and app at www.smartrepute.com.
2. Google user data we access
When you click Connect, Google asks you to approve the permissions below. Smart Repute accesses the following Google user data:
| What we access | Google permission | Why we need it |
|---|---|---|
| Your Google account ID, email address, name and profile picture | openid, email, profile | To create and recognise your Smart Repute account, sign you in, and show who is signed in. |
| The Google Business Profile accounts and locations you manage, including each location's name, address and Google review link | https://www.googleapis.com/auth/business.manage | To let you choose which business to work on, and to give you the link customers use to leave a Google review. |
| The reviews of the location you select: the reviewer's display name, star rating, comment, date and any existing reply, plus the location's average rating and total number of reviews | https://www.googleapis.com/auth/business.manage | To show your reviews and rating, to draft replies, and to work out how many reviews it would take to reach your rating goal. |
| Permission to publish replies to reviews on your behalf | https://www.googleapis.com/auth/business.manage | To post a reply to Google, only for replies you have reviewed and approved yourself. |
We use these permissions only for the features described in this policy. Smart Repute does not edit your business information, opening hours, photos or posts, and does not access Gmail, Drive, Calendar or any other Google service. Google does not give us your reviewers' email addresses or contact details.
3. Other information we keep
- Account and consent records: your account ID, when you first and last signed in, and the date and version of the terms you accepted.
- Your sign-in credential: an encrypted Google refresh token, which lets Smart Repute keep working for you without asking you to sign in again for every action.
- Your settings: the business you last selected, the reply templates you write, and up to 10 reviews-and-replies that you choose to save as style examples for future drafts (these contain review text and your reply text).
- Usage counts: how many replies were generated and posted each day, used to apply fair-use limits and to understand how the service is used.
- Technical information: standard server logs kept by our hosting provider (such as IP address, browser type and pages requested) for security and troubleshooting.
4. How we use Google user data
We use Google user data only to provide and improve the user-facing features of Smart Repute that you ask for:
- to sign you in and show your business, reviews, rating and rating goal;
- to generate draft replies to your reviews and show them to you for editing and approval;
- to publish a reply to Google when, and only when, you approve it;
- to protect the service and your account from misuse, and to apply fair-use limits.
We do not use Google user data for advertising of any kind, including personalised, retargeted or interest-based advertising. We do not sell it or provide it to data brokers or information resellers, we do not use it to determine credit-worthiness or for lending, and we do not build databases of it for any other purpose.
We do not use Google user data to develop, improve or train any artificial-intelligence or machine-learning model, whether generalised or personalised. Review text is sent to an AI service only to produce the draft reply you asked for (see section 5).
Smart Repute's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. AI-generated replies
To draft a reply, Smart Repute sends the following to our AI service provider, Groq (Groq, Inc.): the review text, its star rating, the reviewer's display name, up to two of your saved style examples for that kind of review, and written instructions about tone and content. We do not send your email address, your Google credentials or any other account information.
The AI service processes this only to return a draft to you. Under Groq's published terms, inputs and outputs are not retained by default, may be logged temporarily only to investigate service faults or abuse, and may not be used to train or fine-tune AI models without the customer's instruction. We give no such instruction. Groq may process requests on infrastructure in the United States.
Drafts are suggestions only. Smart Repute never publishes an AI-written reply unless you have reviewed and approved it.
Reviews can contain personal or health-related details written by your customers. Our drafting instructions tell the AI not to repeat personal details in a reply, but you remain responsible for checking every reply before you approve it.
7. Who can see your data at Smart Repute
Our team does not read the content of your Google user data, such as your reviews and replies, except: when you ask for support and give us permission; where needed for security purposes or to investigate abuse; or to comply with the law. To run the service, the operator can see an overview of accounts showing each account's email address, selected business name, whether it is connected, and daily usage counts.
8. How we protect your data
- All traffic between your browser, our servers and Google is encrypted with HTTPS (TLS).
- Your Google refresh token is encrypted before it is stored (Fernet authenticated encryption), using a key held in our server configuration and not in the database.
- Sign-in sessions use signed, HttpOnly, Secure cookies, and the Google sign-in flow is protected against cross-site request forgery.
- Every request for data is tied to the signed-in account. One customer's information is never available to another.
- We do not keep your reviews. They are fetched from Google when you open the app and held in your browser's memory while you work. This also keeps us within Google's limit on storing review content.
- Access to our production systems is restricted to the operator.
9. How long we keep data, and how to delete it
- Reviews and ratings from Google: not stored by us.
- Google sign-in credential: kept until you disconnect or Google revokes it. When you click Disconnect in the app, we revoke the token at Google and delete it from our database straight away.
- Account details, settings, templates, saved style examples and usage counts: kept while your account is active, and deleted when you ask us to delete your account.
To delete your account and the data we hold, email us at the address in section 16 from the email address you signed in with. We will confirm and complete the deletion within 30 days. Copies in our hosting provider's routine backups are overwritten as those backups expire.
You can also withdraw Smart Repute's access to your Google account at any time in your Google Account permissions. This immediately stops Smart Repute from reading or posting anything on your behalf.
11. Your choices and rights
You can disconnect Smart Repute at any time using Disconnect in the app, or in your Google Account permissions. You can ask us what we hold about you, ask us to correct it or delete it, and withdraw your consent at any time. Depending on where you live you may have further rights, for example under India's Digital Personal Data Protection Act, 2023, or the EU and UK GDPR. We handle requests from everyone in the same way. Write to the contact address in section 16 and we will reply within 30 days.
12. Information about your customers
Reviews contain information written by your customers, such as their public Google display name and whatever they chose to write. We process it on your behalf, only to show it to you and help you reply. We do not contact reviewers, do not build profiles of them and do not use their reviews for any other purpose.
13. International processing
Our hosting provider and AI provider may process data in countries other than India, including the United States. We choose providers that commit to protecting customer data by contract.
14. Children
Smart Repute is a business tool and is not intended for anyone under 18.
15. Changes to this policy
If we change how we use Google user data, we will update this policy and the date above, and ask you to accept the updated terms in the app before you continue. We will not use Google user data for a new purpose without your consent.
16. Contact us
Smart Repute is operated by Dr. Abhinav Rao, Chennai, Tamil Nadu, India. For any question about this policy, to exercise your rights, or to ask for your data to be deleted, contact us at [YOUR CONTACT EMAIL].
See also our Terms of Service.