RealGoodWords

Privacy

RealGoodWords is built for local business owners and treats your data conservatively. This page is the plain-English summary of how data is collected, stored, and shared today.

What RealGoodWords collects

  • Account data. Email address, business name, sign-in method (magic link or Google identity).
  • Listing data. The Google Business Profile you claim — name, address, phone, website, review count, rating. Sourced from public Google Places data plus, when granted, your Google Business Profile API permissions.
  • Outreach data. Customer names and phone numbers or email addresses you enter to send review requests. Stored only to populate the send queue and audit logs.
  • Review data. On the Pro plan, the content of Google reviews on your profile, and the replies drafted or posted by Auto-Reply.
  • Usage data. Page views, button clicks, and feature usage via PostHog. Used to improve the product.

How it's used

  • To deliver review-request SMS and emails on your behalf.
  • To draft and post replies to your Google reviews (Pro plan, with your explicit Google Business Profile authorisation).
  • To send transactional emails — magic links, trial reminders, monthly invoices.
  • To improve the product based on aggregated usage patterns.

What's never done

  • Customer data is never sold or shared with third parties for advertising.
  • Customer phone numbers and email addresses are never used outside review-request delivery.
  • Reviews are never read or analysed for purposes beyond reply drafting on your account.
  • Reviews of 3 stars or below are always held for your approval before any reply posts.

Sub-processors

  • Supabase — Postgres database and authentication.
  • Vercel — application hosting and serverless functions.
  • Resend — transactional email delivery.
  • Twilio — SMS delivery.
  • Stripe — payments and subscription billing (Pro plan only).
  • Google — Places API for listing lookup, Business Profile API for review access (Pro plan only, with your authorisation).
  • PostHog — product analytics.

Your rights

  • Export. Request a full export of your account, sends, and reply history at any time. Delivered within 7 days.
  • Delete. Request account deletion at any time. Data is removed within 30 days, except where retention is required for tax or fraud audit (12 months for billing records).
  • Disconnect. Revoke Google Business Profile access from your Google account settings at any time. Auto-Reply stops immediately when access is revoked.

Questions or requests: email [email protected]. Full legal policy lands before public launch.

Last updated · 12 June 2026