Privacy Policy

This Privacy Policy explains how Qvipe ("Qvipe", "we", "us") collects, uses, shares, and protects information when you use our review-management service and website at qvipe.com (the "Service"). By using the Service you agree to this policy.

Who we are

Qvipe is a service that helps a business monitor customer reviews and interactions on third-party platforms — starting with Google Business Profile — drafts replies with AI, and publishes them after the business owner approves. You can reach us at [email protected] for any privacy question, including access or deletion requests.

Information we collect

• Account data. Your email address and, if you sign in with Google, your basic Google profile (name, email). We sign you in with a one-time email code or Google — we never store a password.
• Business data you provide. Business and location details and your AI profile settings (tone of voice, languages, response instructions).
• Connected-platform data. When you connect an account (e.g. Google Business Profile), we access reviews, comments, and related metadata for the locations you choose, and we store OAuth access/refresh tokens so we can sync on your behalf and publish replies you approve.
• Replies and reports. Draft and published replies, and aggregated insight reports we generate from your reviews.
• Billing data. Subscription status and plan. Card details are handled by our payment processor (Stripe) — we do not store full card numbers.
• Early-access requests. If you submit the sign-up form, we store your email address to contact you about access.
• Technical data. Basic request metadata (e.g. browser type, referring page) and analytics about site usage.

How we use information

• Provide the Service: sync reviews, draft replies, publish approved replies, produce reports.
• Detect a review's language and generate on-brand draft replies with AI.
• Authenticate you, operate your account, and provide support.
• Process subscriptions and prevent abuse (including rate-limiting and spam protection).
• Communicate with you about the Service and, if you asked, early-access onboarding.

Replies are drafted automatically but are not published without the owner's approval. You remain the author of anything posted from your account.

How connected-platform data is used

Data obtained from a connected platform (such as Google Business Profile, and in future Instagram, Facebook, TikTok, or YouTube) is used only to provide features you requested — showing your reviews in one inbox, drafting replies, publishing approved replies, and generating your reports. We do not sell this data, use it for advertising, or share it for purposes unrelated to the Service. Our use of information from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers we share with

We share data with vendors that process it on our behalf, under contract, only to run the Service:

• Anthropic — the AI model that drafts replies and report themes.
• Stripe — payment processing.
• Google — the Business Profile platform you connect.
• Email provider — to send sign-in codes and reports.
• Telegram — only if you connect it to receive reports or approve replies.
• Hosting and analytics — infrastructure and site measurement.

We do not sell your personal information.

Security

We take reasonable measures to protect your data. Connected-platform OAuth tokens are stored encrypted (AES-256-GCM) at rest. Sessions use signed, HTTP-only cookies. Access to production data is limited. No method of transmission or storage is perfectly secure, but we work to protect information proportionate to its sensitivity.

Data retention

We keep account and business data while your account is active. If you disconnect a platform, we stop syncing and you can request deletion of the stored tokens and synced data. When you close your account, we delete or anonymize your personal data within a reasonable period, except where we must keep records (e.g. for tax or legal obligations).

Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to withdraw consent. To exercise any of these, email [email protected]. You can disconnect a platform at any time from your settings, and you can revoke Qvipe's access from the platform's own account settings (for example, your Google Account permissions page).

International transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

Children

The Service is for businesses and is not directed to children under 16.

Changes to this policy

We may update this policy. We will change the "last updated" date above and, for material changes, take reasonable steps to notify you.

Contact

Questions or requests: [email protected].