Privacy Policy
Last updated: April 3, 2026
1. Introduction
Reputable Signal (“we,” “us,” or “our”) operates the reputation management platform at reputablesignal.com. This Privacy Policy explains how we collect, use, and protect your information when you use our platform.
2. Information We Collect
Account Information: When you sign up, we collect your name and email address via Google OAuth sign-in.
Google Business Profile Data: When you connect your Google Business Profile, we access your business reviews, business location information, and review reply capabilities through the Google Business Profile API. We use thebusiness.manage scope to sync your reviews and post replies on your behalf.
Usage Data: We collect anonymous analytics about how you use the platform (page views, feature usage) via Vercel Analytics. No cookies or personal tracking are used for analytics.
Feedback: If you submit feedback through the in-app feedback form, we store your message along with the page you submitted it from.
3. How We Use Your Information
- Sync and display your Google Business Profile reviews
- Generate AI-drafted review responses for your approval
- Post approved responses to Google on your behalf
- Analyze review sentiment and themes to provide business insights
- Send email notifications about new reviews and funnel submissions (if enabled)
- Improve the platform based on usage patterns and feedback
4. Data Storage and Security
Your data is stored in Supabase (PostgreSQL) with row-level security policies. Google OAuth tokens are encrypted at rest. All data is transmitted over HTTPS. We do not sell, share, or transfer your data to third parties except as required to provide the service (e.g., Google API for review sync, AI providers for response generation).
5. Third-Party Services
- Google Business Profile API — to sync reviews and post replies
- Google Gemini AI — to generate review response drafts (review text is sent for processing; no personal data is stored by Google)
- Supabase — database hosting and authentication
- Vercel — application hosting and anonymous analytics
- Resend — transactional email delivery
- Sentry — error monitoring (no personal data is captured)
6. Google API Services User Data Policy
Reputable Signal's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only access the Google Business Profile data necessary to provide the review management features you have authorized.
7. Data Retention and Deletion
We retain your data for as long as your account is active. You can request deletion of your account and all associated data by contacting us at support@reputablesignal.com. When you disconnect your Google Business Profile, we revoke the OAuth tokens immediately.
8. Your Rights
You have the right to:
- Access the data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Disconnect your Google Business Profile at any time via Settings
- Revoke our access via your Google Account permissions
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new “Last updated” date.
10. Contact Us
If you have questions about this Privacy Policy, contact us at support@reputablesignal.com.