Privacy Policy
Last updated: 16 May 2026
1. Introduction
Star Reply ("we," "our," or "us") operates the website www.getstarreply.com and provides AI-powered review response services for local businesses. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services, including our integration with the Google Business Profile API.
2. Information We Collect
Account Information
When you create an account, we collect your name, email address, business name, and billing information (processed securely through Stripe). We do not store payment card details on our servers.
Review Data
We collect the review content associated with your business, including reviewer names, star ratings, review text, and the platform of origin (e.g., Google). This data is used solely to generate AI-powered response drafts for your review. We do not sell or share review data with third parties for any other purpose.
Google Business Profile Data
If you connect your Google Business Profile to Star Reply, we access the following data via the Google Business Profile API on your behalf:
- Your business name, address, and location details (to identify your listing)
- Customer reviews posted publicly on your Google Business Profile (review text, star rating, reviewer display name, and review date)
- Your existing review responses, if any (to avoid duplicating responses already posted)
We use this data exclusively to: display your reviews in your Star Reply dashboard, generate AI-drafted response suggestions for your approval, and (where you choose to enable it) post approved responses to your Google Business Profile on your behalf.
We do not use Google Business Profile data for advertising, profiling, or any purpose beyond the review response workflow described above. Google Business Profile data is stored only as long as your account is active and is deleted upon account closure or disconnection of the Google integration, whichever comes first.
Star Reply's use of Google API data adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Usage Data
We automatically collect certain information when you visit our website, including your IP address, browser type, operating system, referring URLs, and pages viewed. We use Plausible Analytics (privacy-preserving, no cookies) to understand how our website is used.
3. How We Use Your Information
We use the information we collect to: provide, maintain, and improve our services; generate AI-powered review response drafts tailored to your business; process transactions and send related information including purchase confirmations and invoices; send you technical notices, updates, security alerts, and support messages; and respond to your comments, questions, and customer service requests. We do not use your data to train AI models or for any advertising purpose.
4. Data Security
We implement appropriate technical and organisational security measures to protect your personal information. All data is transmitted over encrypted connections (TLS/SSL). Your data is stored securely using Supabase with row-level security policies ensuring no user can access another user's data. Payment information is processed by Stripe and is never stored on our servers. OAuth tokens used to connect your Google Business Profile are stored encrypted and are never exposed to other users.
5. Third-Party Services
We use the following third-party services to operate Star Reply:
- Google Business Profile API — to sync your reviews and post responses on your behalf, with your explicit authorisation
- Stripe — for payment processing
- Supabase — for data storage and authentication
- Anthropic (Claude AI) — for generating review response drafts. Review text is sent to Anthropic's API for processing. Anthropic does not use this data to train models under its standard API terms.
- Resend — for transactional email delivery
- Vercel — for website hosting
- Twilio — for SMS review request delivery (where used)
Each of these services has their own privacy policies governing their use of your data.
6. Data Retention
We retain your account information and review data for as long as your account is active or as needed to provide you with our services. Google Business Profile data (reviews and OAuth tokens) is deleted when you disconnect the Google integration or close your account. If you wish to cancel your account or request deletion of your data, please contact us at hello@getstarreply.com.
7. Your Rights
You have the right to: access the personal information we hold about you; request correction of inaccurate data; request deletion of your data; withdraw consent for Google Business Profile access at any time by disconnecting the integration in your settings; opt out of marketing communications; and export your data in a portable format. To exercise any of these rights, please contact us at hello@getstarreply.com.
8. Cookies
Star Reply does not use advertising cookies or tracking cookies. We use a session cookie for authentication purposes only (to keep you logged in). Our analytics tool (Plausible) does not use cookies and does not track you across websites.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email and by posting the new Privacy Policy on this page with an updated date. Your continued use of the service after any changes constitutes acceptance of the new Privacy Policy.
10. Contact Us
If you have any questions about this Privacy Policy, including about how we use your Google Business Profile data, please contact us at hello@getstarreply.com.