Privacy Policy

We collect only what the service needs to work:

• Account details — your name, email address, and password (stored only as a salted hash), or the name and email address Google gives us when you sign in with a Google account.
• Business details — your business name, city, Google Business Profile listing, preferred language, and brand voice notes.
• Customer contact details — phone numbers and email addresses that you, our business customer, upload or enter so we can send review invitations on your behalf.
• Google review data— publicly available reviews of your business, including the review text, star rating, the reviewer’s public display name and public profile photo, the publication date, and any reply you have already posted.
• Private feedback — comments customers submit through your private feedback link, which are never published.
• Billing information — handled entirely by Stripe. We store a customer reference and your plan status. We never see or store full card numbers.

Where you use InsightLoop to send text-message review invitations, the phone numbers involved and the consent records attached to them are treated as strictly confidential. We commit to the following without exception:

Mobile numbers and opt-in records are used for one purpose only: delivering the messages you have asked us to send, through the messaging carrier that carries them. They are never sold, rented, licensed, or disclosed for anyone else’s marketing.

Message frequency varies with your own sending. Message and data rates may apply. Recipients can reply STOP at any time to stop receiving messages, or HELP for assistance. An opt-out is honoured immediately and permanently for that number.

• To run your account, authenticate you, and show you your reviews.
• To draft suggested replies to reviews, including replies written in the reviewer's own language.
• To produce the summaries, themes, and alerts on your Insights dashboard.
• To send the review invitations you ask us to send, to the recipients you provide.
• To notify you about reviews that need attention, at the threshold you set.
• To take payment and manage your subscription.

Review text and private feedback are sent to our AI provider to generate drafts and summaries. We send the review content and your business’s language and brand-voice settings — not your customer list, phone numbers, or billing details. We do not permit that provider to train models on your data, and we do not sell your data to anyone.

We use a small number of providers to deliver the service. Each receives only what its job requires:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting and delivery.
• Google — the Google OAuth sign-in you may choose, and public business and review data from Google Maps and the Places API.
• Apify — collects the publicly available reviews of your business so we can show you your full review history.
• Groq — the AI provider that drafts replies and summarises feedback.
• Resend — delivers transactional email, including review invitations and alerts.
• Twilio — delivers text messages where SMS invitations are used, subject to section 2 above.
• Stripe — processes payments and stores card details.

Every business’s data is isolated at the database level by row-level security, so one account cannot read another account’s reviews, customers, or feedback. Data is encrypted in transit and at rest. Access by our team is limited to what support and operation of the service require.

We keep your account and review data for as long as your account is open. If you close your account, we delete your business data within 30 days, except where we must keep billing records to meet tax and accounting obligations. Opt-out records for phone numbers are kept indefinitely, because deleting them would risk messaging someone who asked us to stop.

• Access or correction — email us and we will provide or correct the data we hold about you.
• Deletion — email insightloopco@gmail.com with the subject “Data deletion request”. We action it within 30 days and confirm when it is done.
• SMS opt-out — reply STOP to any message. No account is needed and the opt-out is immediate.
• Email opt-out — use the unsubscribe link in any non-transactional email.

If you are a customer of a business that uses InsightLoop and you want your details removed, contact us directly at the address above — you do not need to go through that business.

InsightLoop is a business tool and is not directed at children. We do not knowingly collect information from anyone under 13.

If we change this policy in a way that materially affects you, we will email account holders before the change takes effect and update the effective date at the top of this page.

InsightLoop, Houston, Texas, United States. insightloopco@gmail.com. See also our Terms of Service.