Privacy Policy

1. Introduction

Welcome to Breadcrumb ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Google Business Profile review management platform.

By using Breadcrumb, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password (encrypted), and full name when you create an account
• Business Information: Business name, locations, and Google Business Profile details
• Payment Information: Payment details processed through Razorpay (we do not store complete credit card numbers)
• Communication Data: Messages you send to our support team

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the platform
• Device Information: Browser type, operating system, IP address
• Cookies and Tracking: Session cookies, authentication tokens, and analytics data
• Log Data: Server logs including timestamps, error messages, and API requests

2.3 Information from Third Parties

• Google Business Profile: Reviews, ratings, customer feedback, location data, and business metrics
• Google OAuth: Email address, profile information when you sign in with Google
• AI Services: We send review content to OpenRouter or OpenAI for AI-powered reply generation

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: Provide, maintain, and improve our review management platform
• AI Features: Generate AI-powered reply suggestions using third-party AI services
• Authentication: Verify your identity and manage your account
• Payment Processing: Process subscription payments through Razorpay
• Communication: Send service updates, security alerts, and support messages
• Analytics: Understand usage patterns and improve user experience
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with legal obligations and enforce our terms

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

We share your information with trusted third-party service providers:

• Supabase: Database hosting and authentication services
• Google: OAuth authentication and Google Business Profile API access
• OpenRouter/OpenAI: AI-powered reply generation (review content only)
• Razorpay: Payment processing for subscriptions
• Vercel: Application hosting and deployment
• Analytics Providers: Google Analytics (if enabled) for usage analytics

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

4.4 What We Don't Do

• We do not sell your personal information to third parties
• We do not share your data with advertisers
• We do not use your data for purposes unrelated to our service

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted over HTTPS/TLS encryption
• Password Security: Passwords are hashed using bcrypt
• Access Control: Row-level security policies in our database
• Authentication: Secure session management with HTTP-only cookies
• API Security: API keys and secrets stored securely, never exposed to clients
• Regular Audits: Security reviews and vulnerability assessments

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active
• Review Data: Retained for the duration of your subscription
• Payment Records: Retained for 7 years for tax and accounting purposes
• Usage Logs: Retained for 90 days for security and debugging

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format
• Opt-Out: Unsubscribe from marketing communications
• Revoke Consent: Disconnect Google Business Profile integration

To exercise these rights, please contact us at the email address provided in the Contact section below.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information, please see our Cookie Policy.

Types of cookies we use:

• Essential Cookies: Required for authentication and core functionality
• Analytics Cookies: Help us understand how you use our service
• Preference Cookies: Remember your settings and preferences

9. Third-Party Links

Our service may contain links to third-party websites (such as Google Business Profile). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

10. Children's Privacy

Breadcrumb is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our service, you consent to such transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our platform. Your continued use of Breadcrumb after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: