Privacy policy

This policy explains what data Tendstar (tendstar.app) processes, why, who we share it with and what rights you have. It covers the website and the Tendstar app, which helps businesses reply to their Google reviews.

1. Data controller

The controller of your personal data is [full name or company name, address, tax ID] (“Tendstar”, “we”). For any data protection matter, email antekmiszczyk11@gmail.com.

For the data of review authors that we process for your business, we act on your behalf as a processor. The details are set out in the data processing terms that form part of our Terms of service.

2. What data we process

Account data

When you sign in with Google, we receive your name, email address, profile picture and Google account ID.

Google Business Profile data

After you give explicit consent on Google’s consent screen, we access the business profiles you manage:

• business information: name, address, locations, category and profile identifiers;
• reviews: the author’s display name, star rating, text, date and any existing owner replies.

Data you enter in the app

Your business description, services, team, preferred tone, signature, rules (for example what the AI must never promise), and the replies you edit, approve or publish.

Billing data

Payments are handled by Stripe. We never store card numbers. Stripe tells us your plan, payment status and the details needed to issue an invoice.

Technical data

Server logs (IP address, browser type, request time) used for security and troubleshooting, and the essential cookies described in section 10.

3. How we use Google data

We use access to Google Business Profile only to read your business’s reviews and to publish the replies you approve or have covered with an auto-publish rule, and to show you those reviews and related statistics in your dashboard. We do not use this data for any other purpose.

We request the https://www.googleapis.com/auth/business.manage scope because Google offers no narrower scope that allows replying to reviews.

4. Google API Services User Data Policy (Limited Use)

Tendstar’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

• we use Google data only to provide and improve the user-facing features of the app, namely reading reviews and publishing replies;
• we transfer it to others only when necessary to provide those features (the providers listed in section 6), when required by law, or as part of a merger or acquisition under the same protections;
• we do not use it for advertising, including personalised, retargeted or interest-based ads;
• we do not sell it or transfer it to data brokers or other information resellers;
• we do not use it to train generalised artificial intelligence or machine learning models, and we do not allow our providers to do so;
• we do not use it to determine creditworthiness or for any purpose unrelated to the service;
• no human reads this data unless you give consent (for example in a support request), it is necessary for security or to comply with the law, or the data is aggregated and anonymised for internal operations.

5. AI-written replies (Anthropic)

To draft a reply, we send Anthropic, PBC (Claude API) the review text, rating, the author’s display name as shown on Google, the review language and the business information you entered in your settings. Anthropic processes this data solely to generate the reply text and returns it to Tendstar.

Under Anthropic’s commercial terms, data sent through the API is not used to train Anthropic’s models. Anthropic may retain it for a limited period for abuse detection, in line with its data retention policy.

Draft replies are generated automatically and may contain mistakes. Replies to 1–3★ reviews are never published without your approval.

6. Who we share data with

We use the following providers (processors):

• Supabase, Inc.: database and authentication (account, business settings, reviews, replies, encrypted Google access tokens). Storage region: [to be confirmed, planned EU].
• Vercel, Inc.: website and app hosting, server logs.
• Stripe (Stripe Payments Europe, Ltd. and affiliates): payments and subscriptions.
• Anthropic, PBC: drafting replies (Claude API), as described in section 5.
• Email provider [name, to be added in step 6]: notifications and alerts about new reviews.

Some providers are based in the United States. Transfers outside the European Economic Area rely on the European Commission’s adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses.

7. Legal bases (GDPR)

• Art. 6(1)(b) GDPR: performance of a contract, i.e. providing the Tendstar service;
• Art. 6(1)(c) GDPR: legal obligations, such as accounting and tax;
• Art. 6(1)(f) GDPR: legitimate interests, namely keeping the service secure, answering enquiries and handling legal claims.

8. How long we keep data

We keep data for as long as your account exists. After you delete your account we erase it within 30 days (and from backups within a further 30 days). Billing records are kept for the period required by tax law, usually 5 years from the end of the tax year. Server logs are kept for no more than 30 days.

9. Deleting your account and revoking Google access

Deleting your account and data

Delete your account in the Tendstar dashboard under account settings with the “Delete account” button, or email antekmiszczyk11@gmail.com from the address linked to your account. We then erase your account data, business settings, fetched reviews, draft replies and Google access tokens. Replies already published on Google stay on your business profile; you can remove them directly in Google.

Revoking access in your Google account settings

1. Go to myaccount.google.com/connections (Google Account → Security → Your connections to third-party apps & services).
2. Select Tendstar.
3. Click “Delete all connections you have with Tendstar” and confirm.

From then on Tendstar can no longer read reviews or publish replies. Revoking access does not erase data already stored in Tendstar; to erase it, delete your account as described above.

10. Cookies

We only use essential cookies:

• NEXT_LOCALE: remembers your chosen site language (up to 12 months);
• a sign-in session cookie (once sign-in launches): keeps you logged in to the app.

We do not use advertising or analytics cookies.

11. Security

Connections are encrypted (TLS). Google access tokens are stored encrypted. Only people who need access to run the service can access the data.

12. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability, and to object to processing based on legitimate interests. You may also lodge a complaint with a supervisory authority, such as the Polish President of the Personal Data Protection Office (UODO) or the authority in your country.

13. Children

Tendstar is a service for businesses and is not intended for anyone under 18.

14. Changes to this policy

We will tell you about material changes by email or in the app at least 14 days in advance. The current version is always available at tendstar.app/en/privacy.

15. Contact

Privacy questions: antekmiszczyk11@gmail.com.