Privacy Policy

Information we collect

• Account data: Name, email, and authentication identifiers supplied by Google or entered manually when creating an account.
• Google user data: Google Business Profile locations, review text, ratings, review IDs, and approval decisions. When you authorize Gmail send access we store a refresh token (encrypted) and email metadata needed to send outreach messages on your behalf.
• Billing data: Stripe customer IDs, subscription IDs, plan selections, and payment status. We never collect or store raw card numbers.
• Operational data: Activity logs, support requests, and product usage metrics (e.g., number of drafts created). Raw logs are retained for up to 30 days for debugging and security purposes.

How we use the data

• Draft and queue review replies inside Review Pilot.
• Send outreach emails you approve through Gmail using the Gmail API scope.
• Display analytics (pending reviews, reply status) only to authenticated teammates.
• Manage billing, trials, and subscription notifications.
• Detect fraud, troubleshoot errors, and improve the product roadmap.

We do not sell, rent, or share Google user data with advertisers. Gmail message bodies are generated on demand, sent to Google, and are not used to train internal or external ML models.

Storage & security

Review data and account metadata are stored in Supabase (managed Postgres) hosted in the United States. OAuth refresh tokens are encrypted at rest using environment-specific keys and are only used to refresh access tokens when sending email or syncing reviews. Access to production infrastructure is limited to vetted personnel using SSO and hardware-backed MFA. We run least-privilege IAM roles for all background jobs and review access logs routinely.

Data sharing & processors

We rely on the following processors to deliver Review Pilot:

• Google Cloud & Google APIs (authentication, Gmail, Google Business Profile).
• Vercel (application hosting/CDN) and Supabase (database + authentication).
• Stripe (billing and subscription management).
• Slack or email providers for operational alerts you explicitly enable.

Each processor only receives the minimum data needed to perform the contracted service and may not use it for independent purposes.

Your choices

• Disconnect Google: You can revoke Google access at any time from your Review Pilot settings or directly via Google Account Security.
• Data deletion: Email hello@theboxbridge.com and we will delete review data, outreach logs, and tokens within 30 days (unless retention is required by law).
• Access & corrections: Contact us to obtain a copy of your stored data or to correct inaccuracies.

Contact

BoxBridge LLC
5900 Balcones Dr STE 4209, Austin, TX 78731
hello@theboxbridge.com