Privacy Policy
Effective: May 13, 2026 ・ Last updated: May 13, 2026
1. Who we are
OwnCrew Review Reply ("we", "us", "the Service") is operated by OwnCrew, an independent business based in Vancouver, Canada. We provide AI-drafted Google review replies to small and medium business owners. Contact: owncrewdemo@gmail.com.
2. What we collect
When you subscribe and use our Service, we collect:
- Account information: name, email, business name, contact info (provided during onboarding)
- Payment information: processed by Stripe; we never see your card number
- Brand voice preferences: your stated preferences for how AI replies should sound
- Google Business Profile data: with your authorization via OAuth, we access reviews on your Google Business Profile, your business name and location, and post replies on your behalf
- Usage data: timestamps, draft history, communication logs with you
3. How we use Google user data
Our use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We access your Google Business Profile reviews (read) and post AI-drafted replies (write), only for the purpose of providing the Review Reply Service you subscribed to.
- We do not sell Google user data.
- We do not transfer Google user data to third parties except as needed to provide the Service (e.g., LLM providers for draft generation; see Section 5), comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
- We do not use Google user data for serving ads, including retargeting or personalized advertising.
- Human access: humans (the founder operating the Service) read your reviews and drafts to verify quality before sending. No other humans access your data.
- AI processing: review text and your brand voice preferences are sent to large language models (currently Anthropic Claude) to generate reply drafts. Anthropic's terms prohibit using customer data to train their models.
4. Why we collect each piece
| Data | Purpose |
|---|---|
| Email + business name | Send draft notifications, weekly reports, billing |
| Brand voice answers | Personalize AI drafts to sound like you |
| Google reviews | Generate appropriate reply drafts |
| OAuth tokens | Read reviews and post replies on your authorized behalf |
| Draft & reply log | Quality control, weekly reports, audit trail |
5. Third parties we use
To run the Service, we rely on:
- Stripe — payment processing. Stripe Privacy
- Supabase — database (your data is stored encrypted at rest). Supabase Privacy
- Vercel — hosting. Vercel Privacy
- Resend — transactional email. Resend Privacy
- Anthropic — AI draft generation via Claude API. Anthropic Privacy. Anthropic does not train its models on API customer data.
- Cloudflare — DNS and DDoS protection. Cloudflare Privacy
6. Data retention
While your subscription is active, we retain your account data, OAuth tokens, brand voice setup, and reply history.
If you cancel your subscription:
- Your OAuth access is revocable by you at any time via your Google Account settings — once revoked, we can no longer access your Google Business Profile.
- We delete your OAuth tokens within 7 days of subscription cancellation.
- We retain your account data and reply log for 90 days for billing dispute resolution, then delete it.
- If you want immediate deletion, email owncrewdemo@gmail.com with the subject "Data Deletion Request" and we will delete within 7 days.
7. Security
OAuth tokens and personal data are stored in Supabase with encryption at rest. Transmissions between your browser and our servers use HTTPS. The founder is the only human with operational access. We use industry-standard practices to protect data, but no system is 100% secure.
8. Your rights
You have the right to:
- Access the data we hold about you (email us to request a copy)
- Correct inaccurate data
- Request deletion at any time (see Section 6)
- Revoke OAuth access via Google Account settings at any time
- Cancel your subscription via the Stripe customer portal (linked in your billing emails)
If you are located in the EU, UK, or California, you may have additional rights under GDPR / UK GDPR / CCPA respectively. Email us to exercise them.
9. Children
Our Service is for business owners. We do not knowingly collect data from anyone under 18.
10. Changes
We may update this Privacy Policy. Material changes will be emailed to active subscribers at least 14 days before they take effect. The "Last updated" date at the top of this page reflects the latest revision.
11. Contact
Questions, deletion requests, or complaints:
OwnCrew, Vancouver, British Columbia, Canada