Security and protection of your customer review data
You give us access to your Google Business Profile and your customers’ reviews. Here is, in plain terms, what we do with that data and what we don’t. Your data is stored in Europe (Sweden), encrypted and never sold. CloutAlert reads your reviews but never posts anything on your behalf, and you can revoke access at any time from your Google account.
What we access, and nothing more
CloutAlert only accesses the data needed to track your reviews:
- your locations (name, public contact details);
- published reviews and their replies;
- review-related settings.
We do not read your emails, your documents or any other Google data unrelated to your Google Business Profile.
For your CloutAlert account, we only keep your first name, last name, email address and the technical identifiers required.
Google access used only to read your reviews, and you can revoke it
- Official connection. Your profile is connected through Google’s official authorization system (OAuth): you never give us your Google password.
- Only to read your reviews. CloutAlert uses this access only to read your reviews: it does not post, edit or delete anything on your profile.
- Why Google mentions “manage”. On the consent screen, Google shows a permission to manage your Business Profile: it is the only permission Google offers for accessing reviews. CloutAlert only uses it to read them.
- Revocable at any time. You can remove CloutAlert’s access from your Google account settings.
AI replies: drafts that you publish yourself
Reply drafts are generated using OpenAI’s models. To draft a reply, the text of the review is therefore processed by OpenAI.
The draft is then shown to you in CloutAlert. You review it, personalize it, then copy it and post it yourself on Google. Nothing is published without you.
Your data is stored in Europe (Sweden)
CloutAlert application data (your account, your locations, your reviews) is stored in the European Union, in Sweden, in a database hosted by Supabase. The CloutAlert application server, which processes this data to run the app, is hosted by Railway in the United States.
How your data is protected
- Encrypted connections. All communications use HTTPS (TLS).
- Encrypted stored data. The data we store is encrypted.
- Each customer’s data kept separate. One company’s data is never visible to another.
- Limited, logged internal access. Access is controlled and recorded in a log.
Where your data lives and who can access it
- No resale. Your data is never sold.
- Technical providers. It is shared only with providers essential to the service: hosting, database, backups, monitoring, transactional email, and OpenAI for drafting replies. These providers are bound by contractual confidentiality and security commitments.
- Application data hosting. Database in the European Union (Sweden), with Supabase. Application server in the United States, with Railway.
- Public website. The public cloutalert.com website (the pages you are reading, with none of your account data or reviews) is hosted by Vercel Inc.
The processing of reviews by OpenAI to draft replies, like all our processing, is described in our privacy policy.
Your rights
CloutAlert is published by Procidatec SAS, the data controller for data collected through the application and the Google Business Profile integration. To exercise your rights (access, correction, deletion, objection…), email contact@cloutalert.com.
Security FAQ
Does CloutAlert have access to my Google password?
No. The connection uses Google’s official authorization (OAuth): you never share your password, and you can remove access at any time from your Google account.
Does CloutAlert post or change anything on my Google profile?
No. CloutAlert uses access to your profile only to read your reviews: it does not post, edit or delete anything. You post your replies on Google yourself.
Why does Google ask me for permission to “manage” my profile?
It is the only permission Google offers for accessing a Business Profile’s reviews. CloutAlert only uses it to read your reviews, and you can remove this access at any time from your Google account.
Can CloutAlert read my emails or Google documents?
No. We only access data related to your Google Business Profile: locations, reviews, replies and review settings.
Are my reviews sent to an AI?
To draft a reply, the text of the review is processed by OpenAI’s models. The draft is shown to you, and you are free to edit it before posting it yourself.
Is my data sold?
No, never. It is only shared with technical providers essential to the service, under confidentiality commitments.
Where is my data hosted?
Application data is stored in Europe (Sweden), with Supabase. The application server, which processes it to run the app, is hosted by Railway in the United States. To draft replies, the text of the review is processed by OpenAI, as described in our privacy policy.
How do I delete my data?
Email contact@cloutalert.com to exercise your right to deletion.
A question about your data?
Email contact@cloutalert.com or contact the team.