Privacy policy

Last updated October 21, 2026.

Reputation & Reviews ("the app", "we") is a review-management tool for small local businesses. It is operated by Robust Paint Protection & Auto Detailing, Napa, California, USA. Contact: info@robustd.com.

Who uses the app

Business owners and managers sign up for an account for their own business. People who write reviews do not use the app; their public reviews appear in it only when the business connects a review source.

Google user data we access

When a business owner chooses Connect Google, Google asks them to grant the business.manage permission for their Google Business Profile. With it, the app accesses only:

• Business Profile accounts the owner manages (account name and ID), to find their business.
• Locations in those accounts (location name, title and city), so the owner can pick which business to connect.
• Reviews for the chosen location: reviewer display name, star rating, review text, review date, and any existing owner reply.
• Posting an owner reply to a review, only when the logged-in owner approves a specific reply, ticks a confirmation box and presses Post to Google. The app never posts automatically, never posts in bulk, and never changes any other part of the Business Profile.

We do not access the owner's Gmail, contacts, calendar, files or any other Google data.

Other data we collect

• Account details the business enters: business name, login name, a hashed password, phone, city and setup preferences.
• Job and customer details the business enters or uploads (for example a customer's first name and the service performed).
• Reviews from other sources the business connects (public review pages, forwarded review-alert emails, Yelp, Facebook, Trustpilot).
• Basic server logs (request paths and times) for security and troubleshooting.

How we use it

Only to provide the app's features to the business that connected it: showing its reviews in one place, drafting replies and review requests for the owner to edit and approve, avoiding asking customers who already left a review, showing trends, and posting a reply when the owner explicitly asks. We do not use Google user data for advertising, we do not sell any data, and we do not use it to build profiles of reviewers.

AI processing

To draft replies and answer the owner's questions, the app sends the relevant review text, reviewer display name, star rating and the business's name and tone preferences to the xAI API (operated by xAI) and receives draft text back. This happens only when the owner asks for a draft or uses the in-app assistant, or when a new review arrives and a draft is prepared for approval. Drafts are never posted without the owner's approval. We do not use Google user data to train AI models, and we use the xAI API only to generate text for the business that owns the data.

Sharing

We share data only with service providers needed to run the app: Render (hosting and database storage, United States) and xAI (AI drafting, as described above). We do not otherwise share, transfer or disclose data, except if required by law.

Storage and security

Data is stored in a SQLite database on a private disk attached to our server on Render. Google and Facebook refresh tokens are encrypted before storage (Fernet, with a key derived from a server secret kept outside the database). Passwords are stored only as salted hashes. All traffic uses HTTPS.

Retention and deletion

• Data is kept while the business's account is active.
• Disconnect Google (Connections → Google Business Profile → Manage → Disconnect) revokes the app's Google token with Google and deletes the stored token.
• Delete my shop (Settings → Delete my shop) revokes Google and Facebook tokens and permanently deletes the business's account, reviews, drafts, jobs and connection data.
• The owner can also remove the app's access at any time at myaccount.google.com/permissions.
• Anyone else, including people whose reviews appear in the app, can email info@robustd.com with the subject "Data deletion". See Data deletion.

Google API Services User Data Policy

Reputation & Reviews's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google user data only to provide and improve the user-facing features described above; we do not transfer it except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice; we do not use it for advertising; and no person reads it except with the owner's consent for support, for security purposes, or to comply with law.

Children

The app is for businesses and is not directed to children under 13.

Changes

We'll update this page and its date when this policy changes, and tell account holders in the app about material changes.

Contact

Robust Paint Protection & Auto Detailing, Napa, California, USA · info@robustd.com