Privacy Policy

Last updated: May 21, 2026

Fawnly ("we", "us") is a review response service for small businesses. This policy explains what data we collect, why, and how we protect it.

What we collect

• Google account info: Your email address and name, provided when you sign in with Google OAuth.
• Google Business Profile data: Your business locations, Google reviews, and review metadata. We access this through Google's official API.
• Tone and settings: Your response preferences, custom instructions, and configuration choices.
• Payment info: Processed entirely by Stripe. We never see or store your card number. We store your Stripe customer ID and subscription status.
• Usage data: Basic analytics like when you last logged in and how many reviews were processed.

What we do with it

• Generate AI responses to your Google reviews using OpenAI's API.
• Post approved responses to Google on your behalf.
• Send you weekly digest emails and approval notifications via Amazon SES.
• Process your subscription payments through Stripe.

What we don't do

• We never sell, share, or rent your data to third parties.
• We never use your data for advertising.
• We never modify your business name, hours, photos, address, or any non-review data.
• We never train AI models on your reviews or responses.

Google API Disclosure

Fawnly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only use Google data to provide and improve the review response features you see in the app.
• We do not transfer Google data to third parties except as necessary to provide the service (e.g., sending review text to OpenAI to generate a response draft).
• We do not use Google data for serving advertisements.
• We do not allow humans to read your Google data unless you give explicit consent, it is required for security purposes, or it is required by law.

We request the business.manage scope because Google does not offer a reviews-only permission. Fawnly only reads reviews and posts replies — we never access or modify your business name, hours, photos, address, or any other profile data.

Third-party services

• Google APIs: To read reviews and post replies. Subject to Google API Services User Data Policy, including Limited Use requirements.
• OpenAI: To generate response drafts. Review text is sent to OpenAI's API for processing. OpenAI does not use API inputs for training.
• Stripe: To process payments. Subject to Stripe's Privacy Policy.
• Amazon Web Services: To host our service and send emails. Data is stored in AWS us-east-1 region.

Data storage and security

Your data is stored in Amazon DynamoDB with encryption at rest. OAuth tokens are stored securely and used only to access your Google Business Profile on your behalf. All connections use HTTPS/TLS.

Data retention

We retain your data for as long as your account is active. If you cancel your subscription, your data remains for 30 days in case you resubscribe, then is permanently deleted. You can request immediate deletion at any time by emailing us.

Your rights

• Access: Request a copy of all data we hold about you.
• Deletion: Request permanent deletion of your account and all associated data.
• Revoke access: Remove Fawnly's access to your Google account at any time from your Google Account settings.

Contact

Questions about this policy? Email us at hello@fawnly.app.