Privacy Policy

• Account details — your name, email address and profile picture, from Google Sign-In.
• App store data — the apps on your Apple App Store and Google Play developer accounts, and the reviews customers leave on them, including reviewer nicknames, ratings and review text, retrieved through Apple's and Google's APIs using the credential you supply.
• Content you create — brand voice settings, automation rules, and reply drafts (AI-generated or written by you).
• Billing information — your plan, subscription status and usage counts. Card details are handled entirely by Razorpay; we never receive or store them.
• Technical data — logs and error reports generated while operating the service.

• To retrieve your reviews and generate reply drafts — the core purpose of the service.
• To publish replies to Google when you approve them or your automation rules allow it.
• To apply your plan's limits and bill you correctly.
• To send the notifications and digests you have enabled.
• To diagnose faults, keep the service secure, and meet legal obligations.

The key you supply is granted only the access needed to read your reviews and post replies — on Google Play that is “View app information” and “Reply to reviews” and nothing else. Credentials are encrypted with AES-256-GCM before they are stored, are never returned to your browser, and are used solely to operate features you have asked for. You can revoke them at Apple or Google at any time, independently of us.

We do not sell Google user data, use it for advertising, or use it to train AI models. You can disconnect at any time from your account settings or by revoking access in your Google account, which stops all future syncing.

To draft a reply, the review text and your brand voice settings are sent to our AI provider (OpenAI). This is required to produce the draft. We do not permit your content to be used to train third-party models.

We share data only with providers that operate parts of the service:

• Google — to read reviews and publish replies.
• Groq — to generate reply drafts.
• Firebase / Google Cloud — authentication and database hosting.
• Razorpay — payment processing.
• Resend — sending notification emails.

We do not sell your personal data.

We keep your account data while your account is open. If you close your account, we delete or anonymise your personal data within a reasonable period, except where we must retain records — for example billing records kept for tax and accounting purposes.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to certain processing, and to complain to a data protection regulator. To exercise any of these, email support@beenulabs.com from your registered address and we will respond within the period required by law.

Access to your data is restricted, transport is encrypted, and third-party access tokens are stored encrypted at rest. No system is perfectly secure, but if a breach affects your data we will notify you and the relevant regulator as required.

The service is intended for businesses and is not directed at children.

Questions or data requests: support@beenulabs.com. Beenulabs.com, Thane Belapur Road, Navi Mumbai, India, 400701.