Privacy policy

Thanksmith is operated by Suprha SVC LLC (“we”). It helps businesses reply to their Google reviews. This policy explains what we collect, why, and the choices you have. Questions: use our contact page.

What we collect

• Your account: when you sign in with Google we receive your name, email address and a Google account identifier.
• Google Business Profile data: when you connect a Business Profile we access the list of accounts and locations you manage, the reviews on the locations you choose (reviewer display name, rating, text and dates), and the replies on them.
• What you do in Thanksmith: the replies you approve, edit or dismiss, your settings (such as your reply tone), and a log of important actions for security.
• Billing: your plan, its status and the dates it renews or ends. Card details go straight to Stripe, our payment processor; we never see or store card numbers.
• Technical data: standard server logs (such as time and error details) used to keep the service running and secure.

How we use it

• To show you your reviews and draft replies for you to approve.
• To post the replies you approve (or that you chose to post automatically).
• To summarize what customers say about your business and flag reviews that look fake.
• To email you about new reviews, drafts and your account.
• To bill for your subscription.
• To secure the service, fix problems and support you when you ask.

We do not sell your data or use it for advertising. Neither we nor Amazon Bedrock, the AI service that writes drafts, use your reviews or other data to train AI models.

Google user data

Thanksmith’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to provide the features described above, and people at Thanksmith read it only with your permission, for security, or where the law requires.

Who processes it

We run Thanksmith on Amazon Web Services in the United States. Drafts and summaries are written by AI models we use through Amazon Bedrock in our AWS account: we send the model the review text (and, for drafts, your reply settings) for that purpose only. Amazon Bedrock does not use this data to train models or share it with the companies that make the models, and we don’t train models on it either. Emails are sent through Amazon SES. Payments are handled by Stripe, which processes your payment details under its own privacy policy; we share with Stripe only what it needs to bill you, such as your email and business name. We share data with no one else, except where the law requires.

Security

Data is encrypted in transit and at rest. Your Google access token is encrypted with a key that only Thanksmith’s servers can use, and access inside Thanksmith is limited to the people who run the service.

Keeping and deleting data

We keep your data while your business uses Thanksmith. You can disconnect Google at any time, and you can remove Thanksmith’s access from your Google account permissions. To delete your account and data, ask us on our contact page; we delete it within 30 days, except records we must keep by law.

If your subscription ends or your free trial runs out without one, Thanksmith pauses for your business. We keep a paused business’s data for 90 days so you can pick up where you left off, then delete it. Stripe keeps payment records as the law requires.

Changes

If we change this policy in a meaningful way, we’ll tell you by email or in the app before it takes effect.