Privacy Policy

We collect personal information you provide and information generated as you use the Service, including:

• Account information — your name, email address, business name, and country.
• Billing information — plan, billing currency, and payment records. Card details are handled by our payment provider; we do not store full card numbers.
• Review data — reviews, reviewer names, ratings, and responses imported from connected platforms such as Google Business Profile.
• Usage data — logs, device and browser information, and feature usage such as AI draft counts.

You may choose not to provide some information, but this may limit your ability to use parts of the Service.

We use personal information to:

• provide, maintain, and improve the Service, including AI-assisted response drafting;
• authenticate you and secure your account;
• process subscriptions, credit-pack purchases, and billing;
• provide support and send service-related communications;
• monitor usage against plan allowances and prevent abuse; and
• comply with our legal obligations.

We do not sell your personal information. We do not use your content — including any data obtained from connected platforms — to create, train, or improve generalised or non-personalised AI or machine learning models.

We disclose personal information to service providers who help us operate the Service, under contracts that require them to protect it and use it only for the services they provide to us. These include:

• AI processing — to generate response drafts from review text you submit;
• Payment processing — to take subscription and credit-pack payments;
• Cloud hosting and database — to run and store the Service;
• Email delivery — to send transactional and notification emails;
• Google Business Profile — where you connect it, to import reviews and publish responses on your behalf.

We may also disclose information where required or authorised by law, or to protect our rights, users, or the public.

Where you connect a Google Business Profile, we access Google user data using a single OAuth scope (https://www.googleapis.com/auth/business.manage) that you grant through Google’s consent screen. We use this access only to:

• read reviews, ratings, and reviewer names for the locations you select;
• publish responses that you have created or approved; and
• display connection status and location details within the Service.

Glia Reviews’ use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data to create, train, or improve any generalised or non-personalised artificial intelligence or machine learning model, and we do not transfer Google user data for that purpose. Review text is sent to our AI provider only to generate a draft response at your direction.

We do not sell, rent, or transfer Google user data, and we do not use it for advertising of any kind.

Disconnecting. You can disconnect a Google Business Profile at any time from your account settings, or revoke access directly in your Google Account security settings. Once revoked, we can no longer access your Business Profile. Review data already imported is retained in your account so your history and reporting remain intact, and you can delete it at any time from within the Service.

Some of our service providers store or process information outside Australia, including in the United States. Before disclosing personal information overseas we take reasonable steps to ensure recipients handle it consistently with the APPs, or rely on an exception permitted by the Privacy Act.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our measures include encryption of data in transit (TLS), encryption at rest for our hosted database, application-layer encryption of third-party access and refresh tokens before they are stored, hashed passwords, and role-based access controls limiting who can access account data.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

We retain personal information for as long as needed to provide the Service. When you close your account, we delete your account and associated data. Billing records are retained for seven years as required by Australian tax law. Server logs are retained in line with our hosting providers’ standard retention periods.

Under APP 12 and APP 13 you may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date, incomplete, or misleading. Most account and business information can be viewed and updated directly in your settings. For other requests, contact us using the details below. We may need to verify your identity and, in limited cases permitted by law, may decline a request and will explain why.

We use essential cookies to keep you signed in and to operate the Service. We do not use them to build advertising profiles. You can control cookies through your browser, but disabling essential cookies may prevent you from signing in.

If you believe we have breached the APPs, contact us first at support@gliareviews.com and we will investigate and respond within a reasonable time. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest version, and we will take reasonable steps to notify you of material changes.

For any privacy question or request, contact:

Privacy Officer
Tdap Tech (ABN 30118605527)
support@gliareviews.com

See also our Terms of Service.