Privacy Policy

Last updated: March 23, 2026

Yorumcu ("Platform", "we") respects the privacy of its users. This policy explains how your personal data and business data are collected, used, and protected.

1. Data We Collect

Account information: Name, email address, and business details.
Google Business Profile data: Business name, reviews, star ratings, and replies. This data is accessed through Google OAuth 2.0 authorization.
Usage data: In-platform interactions, preferences, and session information.

2. Purpose of Data Usage

Your data is used solely for AI-powered reply generation and is never sold, rented, or shared with third parties under any circumstances.

Generating AI-powered reply drafts for your Google reviews.
Sending email notifications.
Improving the platform experience and resolving technical issues.

3. Google API Data & Retention Period

Review and business data obtained through the Google Business Profile API is stored in our systems for a maximum of 30 days. After this period, the data is automatically deleted. Data belonging to users with active subscriptions is refreshed and retained for the duration of the service.

4. Google API Services — Limited Use Disclosure

Google API Services User Data Policy Compliance

Yorumcu's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data is accessed only for the app's primary functionality: generating review replies.
Google data is not used for advertising purposes and is not transferred to advertising service providers.
Google data is not sold to third parties and is not used for credit assessment or similar purposes.
Google data is processed only with user consent and only when necessary for security, legal compliance, or app functionality.
Human reading of Google data occurs only with the user's explicit consent, for security reviews, or to comply with applicable law.

5. Data Security

Google OAuth tokens are stored in encrypted form.
All communications are protected via SSL/TLS.
Database access is role-based and regularly audited.

6. Third-Party Services

Google Business Profile API: Reading reviews and publishing replies.
OpenAI API: Reply draft generation. Data sent includes only the review text and business type; no personal information is shared.
Clerk: Authentication and user management.

7. User Rights

You may request access to, correction of, or deletion of your data.
You may disconnect your Google account at any time.
Account deletion requests are processed within 30 days, and all your data is permanently deleted.

8. Contact

For privacy-related inquiries, please contact us at destek@yorumcuai.com.tr.