Privacy Policy

This Privacy Policy explains how Taarvo (“Taarvo,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects information when you use our website and application (the “Service”). Taarvo helps restaurant owners manage their Google reviews by drafting AI-assisted replies that the owner reviews and approves.

Taarvo is operated by Tech Impact Inc., 1530 Aimco Blvd., Suite 1011, Mississauga, ON L4W 5K1, Canada. If you have questions about this policy, contact us at privacy@taarvo.com.

1. Information We Collect

Account information

When you sign in with Google, we receive your name, email address, and profile photo to create and identify your account.

Business & review information

With your authorization, we access information about the Google Business Profile location(s) you manage, the reviews left on those locations (reviewer name, star rating, review text, and timestamps), and the replies you approve for posting.

Payment information

Subscription payments are processed by Stripe. We do not store your full card number; we retain only a customer identifier and subscription status.

Usage information

We collect basic operational logs (e.g., requests, errors) to run and secure the Service.

2. Google User Data & API Usage

Taarvo accesses Google user data through Google APIs. We request the https://www.googleapis.com/auth/business.manage scope, which allows us to view the Google Business Profile listings you manage, read their reviews, and post replies that you approve. We request this scope solely to provide the Service’s review-reply features.

Taarvo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we do not:

• sell Google user data;
• use Google user data for advertising;
• use Google user data to train, fine-tune, or develop generalized and/or non-personalized AI/ML models;
• allow humans to read Google user data, except (a) with your explicit consent for specific data, (b) where necessary for security purposes (such as investigating abuse), (c) to comply with applicable law, or (d) where the data is aggregated and used for internal operations in accordance with applicable policies.

3. How We Use Information

• To authenticate you and operate your account.
• To retrieve your reviews and generate draft replies in your chosen tone, which you review and approve before anything is posted.
• To post approved replies back to Google on your behalf.
• To provide analytics and insights about your reviews.
• To process subscriptions and provide support.
• To secure, maintain, and improve the Service.

4. AI Processing

To draft replies and summarize sentiment, the text of a review may be sent to our AI provider, Anthropic, via its API. Anthropic processes this data only to return a result to us and does not use API-submitted data to train its models. Generated drafts are never posted automatically without the controls you configure; replies you approve are the only content published to Google.

5. How We Share Information (Sub-processors)

We do not sell your information. We share it only with service providers who help us run the Service, under contractual confidentiality obligations:

• Supabase — authentication and database hosting.
• Vercel — application hosting.
• Anthropic — AI draft generation and sentiment analysis.
• Stripe — payment processing.
• Resend — transactional email.
• Google — Business Profile data access and reply posting.

We may also disclose information to comply with the law or to protect the rights and safety of Taarvo and its users.

6. Data Storage & Retention

Your data is encrypted in transit (TLS) and at rest. We retain your account and business data for as long as your account is active. If you delete your account or disconnect Google access, we delete the associated Google user data and your account data within 30 days, except where we are required to retain limited records (such as billing history) to comply with legal obligations.

7. Your Choices & Controls

• Access & export: you can download a machine-readable copy of your data at any time from Settings → Data & Account in your dashboard, or request one by emailing privacy@taarvo.com.
• Deletion: you can permanently delete your account and all associated data at any time from Settings → Data & Account in your dashboard. Deletion takes effect immediately, and any residual copies (such as backups) are removed within 30 days. You can also request deletion by emailing privacy@taarvo.com.
• Revoke Google access:you can revoke Taarvo’s access to your Google account at any time at myaccount.google.com/permissions.

8. Security

We use industry-standard safeguards, including encryption in transit and at rest, scoped access tokens, and least-privilege access controls. No method of transmission or storage is perfectly secure, but we work to protect your information and continuously improve our practices.

9. Breach Notification

If we become aware of a data breach affecting your personal information, we will notify affected users and applicable authorities without undue delay, consistent with applicable law.

10. Children

The Service is intended for business owners and is not directed to individuals under 18. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated to you directly.

12. Contact

Questions or requests? Email privacy@taarvo.com.