Privacy Policy

SyncMyReviews ("us", "we", or "our") operates the https://syncmyreviews.com website (the "Service").

This page outlines our policies concerning the gathering, utilization, and disclosure of personal data when you use our Service, as well as the options available to you in relation to that data.

We employ your data to provide and enhance the Service. By using the Service, you consent to the collection and use of information as described in this policy. Unless otherwise defined in this Privacy Policy, terms used herein have the same meanings as those in our Terms and Conditions, accessible from https://syncmyreviews.com.

Definitions

  • Service: The https://syncmyreviews.com website operated by SyncMyReviews.
  • Personal Data: Information about an individual who can be identified from that data.
  • Usage Data: Data collected automatically, either generated through the use of the Service or from the Service infrastructure itself.
  • Cookies: Small data pieces stored on your device.
  • Data Controller: The entity determining the purposes and manner of processing personal information. We act as a Data Controller for your Personal Data.
  • Data Processors (or Service Providers): Parties processing data on behalf of the Data Controller.
  • Data Subject (or User): A living individual using our Service and the subject of Personal Data.

Information Collection and Use

We collect various types of information to enhance our Service for you.

Types of Data Collected

  • Personal Data: Includes personally identifiable information such as email address, first and last name, cookies, and usage data.
  • Usage Data: Information on how the Service is accessed and used.
  • Tracking & Cookies Data: We employ cookies and similar tracking technologies to monitor Service activity.

Use of Data

SyncMyReviews uses collected data for various purposes including:

  • Maintenance and improvement of the Service.
  • Notification of Service changes.
  • Facilitation of interactive Service features.
  • Provision of customer support.
  • Analysis to enhance Service quality.
  • Monitoring Service usage.
  • Detection and resolution of technical issues.
  • Providing news, special offers, and information on goods and services.

SMS / Text Messaging

If you consent to receive text messages from us, we will use your mobile number solely to send review requests and related reminders. We do not sell, rent, or share mobile opt-in information or consent with any third party for their marketing purposes.

  • Purpose limitation: Mobile numbers collected for SMS consent are used only to send review requests and related reminders. They are never used for unrelated marketing.
  • Message frequency: Message frequency varies; up to 2 messages per review request.
  • Rates: Message and data rates may apply.
  • Opt-out and help: Reply STOP to unsubscribe at any time, or reply HELP for assistance.
  • No third-party sharing: Mobile numbers collected for SMS consent are not sold, rented, or shared with third parties for their marketing purposes.

Google User Data (Google Account and Google Business Profile)

SyncMyReviews connects to Google so you can manage your business reputation from a single dashboard. When you sign in with Google and authorize our app, we request only the scopes required to deliver the features you signed up for, and we handle the resulting data in accordance with the Google API Services User Data Policy, including the Limited Use requirements. The sections below describe exactly what we access, how we use it, how it is stored, and how you can revoke access.

What we access from your Google Account

  • Email address and basic profile — requested through the userinfo.email, userinfo.profile, and openid scopes. We use these solely to create and secure your SyncMyReviews account, identify you when you sign in, and contact you about your account and the Service.
  • Google Business Profile data — requested through the business.manage scope, which lets SyncMyReviews work with the Google Business Profile locations you manage, including:
    • your Business Profile accounts and the locations they contain (business name, address, and basic location details), so you can choose which locations to connect;
    • the reviews and star ratings left on those locations, which we sync into your review inbox;
    • review replies, so that you — or Miles, our AI assistant, when you enable it — can respond to reviews and publish the reply back to Google;
    • local posts, so you can schedule and publish Google Business Profile posts from SyncMyReviews;
    • basic performance information for the connected locations, used to produce the reports in your dashboard.

How we keep your reviews in sync

New reviews are delivered to us in near real time through Google’s official Pub/Sub notifications; we never scrape Google. We act only on the locations you explicitly connect, and publishing actions — such as review replies and posts — happen only when you, or an assistant you have enabled, take an explicit action in the dashboard.

What we deliberately do NOT do with Google data

  • We do not sell, rent, or transfer your Google user data to third parties.
  • We do not use your Google user data for advertising.
  • We do not use your Google user data to train generalized or generative AI/ML models.
  • We allow humans to read your Google user data only with your explicit consent, to resolve a support issue you have raised, when required by law, or where necessary for security or to comply with the Google API policies.

Storage, security, and sub-processors

Google access and refresh tokens, along with any reviews, replies, and location data we import, are stored on our managed servers and protected with the same access controls as the rest of your account data. Images you design and publish to a Google Business Profile post are stored with Cloudinary, our image-hosting sub-processor, under a folder namespaced to your account. We share Google user data with sub-processors only to the extent required to operate the Service and in compliance with the Google API Services User Data Policy.

How to revoke access

You can disconnect Google at any time from Connections → Google in your dashboard, which revokes the tokens we store. You can also review and remove SyncMyReviews’ access directly from your Google Account permissions page. To delete the Google-derived data we hold, delete your SyncMyReviews account (see Deleting Your Account), or email support@syncmyreviews.com.

Limited Use statement

SyncMyReviews’ use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We store your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by applicable law. Deleting your SyncMyReviews account also deletes the Google-derived data we hold; see Deleting Your Account for how deletion works and the limited records we keep.

Meta Platform Data (Facebook Pages and Instagram)

SyncMyReviews integrates with Meta’s platforms (Facebook and Instagram) to help small business owners monitor their reviews and publish content from a single dashboard. This integration is governed by the Meta Platform Terms and Developer Policies. The sections below describe exactly what data we access, how we use it, and how you can revoke access.

What we access from your Facebook Pages

When you connect a Facebook Page to SyncMyReviews, we request the minimum permissions Meta requires to deliver the features you signed up for:

  • Page identity — the Page’s id, name, and category, so we can display the connected Page in your dashboard and route publishing actions to the correct Page.
  • Page reviews and ratings — the public reviews left on your Page, so we can sync them into your review inbox and let you reply.
  • Publishing on your Page — only when you explicitly click “Publish” or “Schedule” on a post you created in our dashboard. We never auto-post; we never publish without your explicit action.
  • Page access token — stored server-side, used to make the Graph API calls listed above. Tokens are not shared with third parties.

What we deliberately do NOT do

To keep our use of Meta data narrow and predictable, the following are explicit boundaries we enforce in code:

  • We do not read your existing Instagram feed, stories, reels, or saved posts.
  • We do not read your followers list, following list, or audience insights.
  • We do not read direct messages, comments on other accounts’ posts, or notifications.
  • We do not auto-post, auto-reply, or auto-schedule on your behalf without an explicit action you take in our dashboard.
  • We do not share, sell, or trade your Meta data, tokens, or content with advertisers, data brokers, or any third party for marketing purposes.
  • We do not use your Meta data to train generative AI models.

Storage, retention, and sub-processors

Long-lived Page access tokens and any reviews we’ve imported are stored on our managed servers and protected with the same access controls as the rest of your account data. Images you design and choose to publish are stored on Cloudinary (our image-hosting sub-processor) under a folder namespaced to your account. We retain this data for as long as your connection is active and your account exists; we prune unused exported images on a nightly schedule and delete all Meta-related data when you disconnect a Page or close your account, except where applicable law requires retention.

Your controls and how to revoke access

You can disconnect SyncMyReviews from your Facebook Page at any time by visiting Connections → Facebook in your dashboard and clicking Disconnect. This revokes our access token on our side. To fully revoke our app’s access on Meta’s side as well, go to Facebook Settings → Business Integrations and remove SyncMyReviews. You can also delete all stored data, including any Meta data, by deleting your SyncMyReviews account from your account settings, or by emailing support@syncmyreviews.com.

Data deletion request

In line with Meta’s Platform Terms, if you would like us to delete any Meta-derived data we hold about you outside of the normal account-deletion flow, email support@syncmyreviews.com from the email address associated with your SyncMyReviews account. We will confirm receipt within two business days and complete deletion within thirty days, except where applicable law requires us to retain specific records.

Deleting Your Account

You can delete your account at any time from Settings → Profile, in the Danger zone section, or by emailing support@syncmyreviews.com. If you are an account owner, the deletion removes the entire account, including every team member’s access. If you are a team member, you can delete only your own login; the account’s shared data stays with the account owner.

14-day grace period and how to cancel

Nothing is deleted right away. When you request deletion, your account is scheduled for deletion 14 days later and stays fully usable until then. You can cancel at any time before the deletion date: sign in and choose Keep my account when prompted, or click Cancel deletion in Settings → Profile. Once the deletion has started on the deletion date, it can no longer be canceled.

What happens to your billing

Billing stops when you request deletion: your subscription will not renew and you will not be charged again. Any open past-due subscription is canceled. If you cancel the deletion, your subscription’s renewal is restored; if your subscription ended during the grace period, you will need to choose a plan again. For refunds of unused paid time, see our Terms of Service.

Deletion is permanent

After the deletion date, your account and its personal data are permanently deleted from our systems. The deletion cannot be undone, and we do not restore deleted accounts or data from backups. Copies held in backups are removed as those backups age out of our retention schedule.

What we keep after deletion

  • Billing records: a pseudonymized billing ledger (Stripe customer, subscription and invoice ids, amounts, currency and billing periods, without your name or email address), kept for 10 years to meet our tax obligations and to handle payment disputes.
  • Email opt-out record: a one-way hashed record of your email address (never the address itself), kept so we continue to honor your email opt-outs.
  • Server logs: our application logs are rotated daily and deleted after 7 days.

Content on other platforms

Posts, review replies and other content you already published to Google, Facebook or Instagram through SyncMyReviews are not removed when your account is deleted. Delete them on those platforms if you want them gone. If you connected Zapier, Zaps that use your SyncMyReviews account stop working.

Legal Basis for Processing Personal Data Under General Data Protection Regulation (GDPR)

We process Personal Data based on:

  • Performance of a contract.
  • Consent.
  • Legitimate interests not overridden by your rights.
  • Legal obligations.

Retention of Data

We keep Personal Data only as long as required for purposes in this Privacy Policy or to meet legal obligations. Application logs are rotated daily and deleted after 7 days. After your account is deleted, we keep a pseudonymized billing ledger for 10 years and a hashed email opt-out record; see Deleting Your Account.

Transfer of Data

Data may be transferred to computers located outside your jurisdiction where data protection laws differ. By using the Service, you consent to this transfer.

Disclosure of Data

We may disclose your Personal Data when required by law, to protect rights or property, to prevent wrongdoing, or to protect personal safety.

Security of Data

While we use commercially acceptable means to protect Personal Data, no method of transmission over the Internet or electronic storage is entirely secure.

Your Data Protection Rights Under General Data Protection Regulation (GDPR)

Residents of the European Economic Area (EEA) have specific data protection rights, including access to, correction of, deletion of, or restrictions on Personal Data usage.

Service Providers

We may employ third-party companies and individuals to assist with our Service, analyze usage, and perform services. Our service providers include:

  • Stripe — payments, subscriptions and invoices.
  • Auth0 — sign-in and account authentication.
  • Mailgun — email delivery.
  • Cloudinary — image hosting.
  • Statsig — feature flags and product analytics.
  • Google Analytics — website usage analytics.
  • QStash (Upstash) — scheduling and running background tasks.
  • Zapier — the automations you choose to connect to your account.

Links to Other Sites

Our Service may contain links to other sites. We are not responsible for the content, privacy policies, or practices of these sites.

Children's Privacy

Our Service does not address individuals under the age of 18 ("Children"). We do not knowingly collect personal information from children.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any changes by posting the new Privacy Policy on our website and via email or a prominent notice on our Service. Please review this Privacy Policy occasionally for any changes. Changes become effective when posted on this page.

Language

LinkedIn