Trust
How your data is handled
Connecting a store account means handing over a credential that can post publicly as your company. Here is exactly what happens to it.
Last updated
Credentials
An App Store Connect key or a Play service account is not a password — it is a capability to act as your company in public. It is encrypted with AES-256-GCM before it is stored, with a unique initialisation vector per value, so two identical keys never produce identical ciphertext and modification is detectable rather than silent. Once stored it is never returned to a browser, not even to the page that submitted it.
Review data
Reviews live under your account and are readable only by it. Every request is checked against a verified session rather than an account identifier supplied by the caller — the distinction matters, because the second kind of check is what lets one customer read another's data by changing a number in a URL.
What the AI sees
Generating a reply sends the review text, the star rating, and your brand voice settings to the model. It does not send your store credentials, your billing details, or anything about other customers. Review text is passed as clearly delimited data with instructions not to follow anything inside it, because reviews are written by the public and a review is a perfectly good place to hide an instruction.
Publishing
Nothing is posted publicly unless you approve it, or unless you have explicitly set a star threshold above which replies publish themselves. Drafts that fail a quality check — leaked assistant boilerplate, wrong language, over a store's length limit — are held rather than sent.
Deleting your account
Deletion removes the account, its reviews, drafts, connections and stored credentials permanently, and cancels any active subscription first so you are not billed for a product you can no longer sign in to. There is no backup we can restore from. Replies already published to a store stay there — they belong to the store, and we cannot take them back.
Common questions
How are store credentials stored?
Encrypted with AES-256-GCM before they are written, with a unique initialisation vector per value so identical credentials never produce identical ciphertext. Tampering is detectable rather than silent. They are never sent back to a browser, including to the page that submitted them.
Who can see my review data?
Reviews are stored under your account and are only readable by it. Access is checked on every request against a verified session, not against an identifier supplied by the caller.
What happens to my data if I delete my account?
The account, its reviews, drafts, connected store accounts and stored credentials are removed permanently, and any active subscription is cancelled first so you are not billed again. There is no backup to restore from, which is the point.
Which third parties process my data?
Firebase and Google Cloud for authentication and storage, Groq for generating reply drafts, Resend for email, and our payment processor for billing. Card details are handled entirely by the payment processor and never reach us.
Doing this by hand does not scale
BeenuLabs reads every App Store and Google Play review as it arrives, works out what it means, and drafts a reply in your brand voice and the reviewer's own language. You approve it — or set a star threshold above which it publishes itself.
Start freeFree forever on one app. No card required.