Privacy Policy

Last updated: September 2026

1. Information we collect

Account information (email, password hash); business information you give us (business name, location names, Google Business Profile / Yelp identifiers); review content pulled from Google and Yelp on your behalf; customer lists you upload for win-back outreach (name, email, phone, last-visit date); and basic usage data about how you use the dashboard.

2. How we use it

To operate the service you signed up for: fetching and tagging your reviews, drafting reply suggestions, generating your periodic report, sending win-back emails on your behalf, processing billing, and improving the product. We don't use your customer lists or review content to train models we sell to anyone else.

Win-back emails are sent to your past customers on your behalf, and each one includes your business's postal address and an unsubscribe link. Anyone who unsubscribes is never emailed again by that business, and we record only their email address and the business's account so that the choice is remembered.

3. Third-party services we use

Google Business Profile API and Yelp Fusion API (to read your reviews); Anthropic's Claude API (to tag sentiment/topic and draft replies and reports — review text is sent to Anthropic for this processing); Stripe (to process payments — we don't store your card number ourselves); Resend (to send transactional and win-back emails); and Plausible Analytics (privacy-focused, cookieless site analytics on our marketing pages). Each handles data under its own privacy policy.

4. Data retention

We keep your account and review data for as long as your account is active. If you close your account, we delete your business data within 90 days except where we're required to keep records (e.g. billing history) longer.

5. Data sharing

We don't sell your data. We share it only with the service providers listed above, as needed to run the product, and when required by law.

6. Your rights

You can request a copy of your data, ask us to delete it, or ask us to stop processing it, by emailing us at the address below. If you've uploaded customer contact information, you're responsible for having the right to use it for outreach and for handling requests from your own customers about their data.

7. Security

Passwords are hashed (never stored in plain text). Access to production data is limited to what's needed to operate the service. No system is perfectly secure, and we can't guarantee absolute security of information you send us.

8. Children's privacy

HearBack is a business tool and isn't directed at children. We don't knowingly collect data from anyone under 16.

9. Changes to this policy

We'll update the date above if this policy changes and, for material changes, let you know via email.

10. Contact

Questions about this policy or your data: privacy@hearback.ai