Privacy Policy

Account information: your name, email address, and password (stored as a secure hash).

Practice information you provide: your practice name, services, website address, and any reference material you upload to calibrate content generation.

Google Business Profile data: when you connect your profile, we access your business listing, posts, reviews, and performance metrics through Google’s official API, using credentials you grant and can revoke at any time.

Billing information: payments are processed by Stripe. We never see or store your full card number.

Usage information: basic product analytics such as pages visited and features used, to improve the product.

Conmetior Connect’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We access your Google Business Profile solely to provide the features you signed up for: publishing posts you approve, responding to reviews under your settings, monitoring profile health, backing up your profile, and reporting performance.

We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except with your permission, for security purposes, or to comply with law.

Disconnecting your profile from the Connections page revokes our access. You can also revoke access from your Google Account settings at any time.

Scope requested: https://www.googleapis.com/auth/business.manage (Google Business Profile). We request no other Google scopes.

Data we read through this scope: your business listing details (name, address, phone, hours, categories, website), the posts on your profile, your reviews and any replies to them, the photos in your profile media library, and profile performance metrics such as views and searches.

Data we write through this scope: posts you approved, review replies you approved or enabled through your review settings, and nothing else.

Why we read each item: listing details to fill in your practice profile and monitor profile health; posts to avoid repeating themes and to publish approved content; reviews to draft replies for your approval and to alert you to low ratings; photos so approved posts can use images you already own; performance metrics to show you what changed since you started.

Where it is stored: in our database hosted by Supabase in the United States, with your OAuth tokens encrypted at rest using AES-256-GCM. Daily profile backups are stored in the same place so you can restore your listing if it is ever damaged.

Who else processes it: Anthropic receives the text of your reviews and your practice profile only to draft replies and posts, and does not train models on it. Vercel hosts the application. Resend delivers your notification emails, which may quote a review you received. No other third party receives Google user data, and we never sell it or use it for advertising.

How long we keep it: for as long as your Google Business Profile stays connected and your account is active. Disconnecting your profile stops all access immediately and deletes the stored tokens. Deleting your account removes all stored Google data, including backups, within 30 days.

Human access: no one on our team reads your Google data except to resolve a support request you raised, to investigate abuse or a security incident, or when required by law.

We never sell your data.

We never store patient information. Our content engine is built to refuse patient-identifying details, and we ask you never to include them in reference materials.

We never post to your profile without a post being approved, either by you directly or through automation settings you turned on.

We keep your data while your account is active. If you cancel, your content remains available until the end of your billing period.

To delete your account and data entirely, email support@conmetior.com and we will complete the deletion within 30 days.

OAuth tokens are encrypted at rest with AES-256-GCM. Data is stored with our infrastructure providers (Vercel and Supabase) in the United States. To draft your posts and review replies we send your practice profile and the reference material you provide to Anthropic, our content generation provider, which does not train models on it. Transactional email is delivered by Resend. Access to production systems is limited to the Conmetior Connect team.

Questions about this policy: support@conmetior.com.