Privacy Policy

1. Introduction

ProfileReflect ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Google Maps review analysis platform and services.

By using ProfileReflect, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

Personal Information

When you create an account with ProfileReflect, we collect:

• Contact Information: Your email address and full name
• Business Information: Your business name and related details
• Account Credentials: Username and securely encrypted password

Review Data

We analyze publicly available Google Maps reviews for your business locations. This includes:

• Review text content and ratings
• Review dates and reviewer information (as publicly available)
• Business location information and ratings

Technical Information

We automatically collect certain technical information through cookies and similar technologies:

• Browser type and version
• Operating system information
• IP address and geographic location
• Pages visited and time spent on our platform
• Referral sources and website navigation patterns

3. How We Use Your Information

Service Provision

• Generate AI-powered sentiment analysis and insights
• Create personalized dashboards and reports
• Provide customer recommendations and action items
• Monitor review trends and performance metrics

Account Management

• Create and maintain your account
• Process subscription payments through Stripe
• Send transactional emails (receipts, account notifications, password resets)
• Provide customer support and technical assistance

Platform Improvement

• Analyze platform usage through Google Analytics
• Improve our AI algorithms and analysis accuracy
• Develop new features and enhance user experience
• Ensure platform security and prevent fraud

Communication

• Send important service updates and announcements
• Provide customer support responses
• Send marketing communications (only with your consent and with easy opt-out options)

4. Data Storage and Security

Storage Location

Your data is securely stored on Amazon Web Services (AWS) servers located in the United States. AWS provides enterprise-grade security and compliance certifications.

Security Measures

• Industry-standard encryption for data transmission and storage
• Secure authentication and access controls
• Regular security audits and monitoring
• Limited access to personal data on a need-to-know basis

Data Retention

• Active Accounts: We retain your data while your account is active
• After Deletion: Data is permanently deleted within 3 months of account termination
• Legal Requirements: We may retain certain data longer if required by law

5. Third-Party Services

Payment Processing

We use Stripe to process subscription payments. Stripe handles all payment card information according to PCI DSS standards. We do not store your payment card details on our servers.

Analytics

We use Google Analytics to understand how users interact with our platform. This helps us improve our services and user experience. Google Analytics may use cookies and collect anonymous usage data.

Review Data API

We use third-party APIs to access publicly available Google Maps review data. These services only receive business location information needed to retrieve public reviews. No personal user data is shared with these providers.

6. Data Sharing and Disclosure

We may share your information only in these limited circumstances:

• Service Providers: With trusted third-party services (like Stripe for payments) that help us operate our platform
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfer: In the event of a merger, acquisition, or sale of business assets (with advance notice to users)
• Protection: To protect our rights, safety, or the safety of others

7. Your Privacy Rights

Access and Control

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your account and associated data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing communications at any time

GDPR and CCPA Compliance

If you are located in the European Union or California, you have additional privacy rights under GDPR and CCPA respectively. These include the right to data portability, the right to be forgotten, and the right to know what personal information is collected and how it's used.

8. Cookies and Tracking

ProfileReflect uses cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for basic platform functionality and security
• Analytics Cookies: Help us understand platform usage and improve services
• Preference Cookies: Remember your settings and preferences

You can control cookie settings through your browser preferences, though disabling certain cookies may affect platform functionality.

9. Children's Privacy

ProfileReflect is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

10. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. By using our services, you consent to this transfer. We implement appropriate safeguards to protect your data during international transfers.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify users of material changes via email or prominent notice on our platform. The "Last Updated" date at the top of this policy indicates when it was last revised.

12. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify affected users within 72 hours and provide details about the breach, potential risks, and steps we're taking to address the situation.

Your trust is essential to our success. We're committed to maintaining the highest standards of privacy protection while providing you with valuable business insights.