Last updated: May 17, 2026
1. Introduction
At FeedbackFlow360.com, your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your information.
2. Information We Collect
a. Personal Information
We may collect:
- Name
- Email address
- Phone number
- Business information
- Google Business Profile data (when you connect your account): business locations, customer reviews, your replies, and an encrypted refresh token. Details in the “Google API Services and Limited Use Disclosure” section below.
b. Usage Data
We automatically collect:
- IP address
- Browser type
- Device information
- Interaction data within widgets and forms
c. Feedback and Communication Data
- Conversations conducted through our platform
- Customer feedback submissions and responses
- Lead form submissions and responses
3. How We Use Your Information
We use your information to:
- Provide and improve our services
- Personalize user experience
- Enable AI-powered responses and automations
- Communicate updates and support
- Analyze performance and usage trends
4. Data Sharing
We do not sell your personal information.
We may share data with:
- Trusted third-party service providers (hosting, analytics, integrations)
- Legal authorities when required by law
5. Data Security
We implement industry-standard security measures to protect your data. However, no system is 100% secure.
6. Cookies and Tracking
We may use cookies and similar technologies to:
- Enhance user experience
- Track usage and analytics
- Store preferences
You can control cookie settings through your browser.
7. Data Retention
We retain data only as long as necessary to:
- Provide services
- Comply with legal obligations
- Resolve disputes
8. Your Rights
Depending on your location, you may have the right to:
- Access your data
- Request corrections
- Request deletion of your data
- Opt out of certain data uses
To exercise your rights, contact us at support@feedbackflow360.com.
9. Third-Party Links
Our platform may contain links to third-party websites. We are not responsible for their privacy practices.
10. Children’s Privacy
Our services are not intended for individuals under 13 years of age. We do not knowingly collect data from children.
11. GDPR Compliance (For European Users)
If you are located in the European Economic Area (EEA), we process your personal data under the following lawful bases:
- Consent
- Performance of a contract
- Legal obligation
- Legitimate business interests
Under the General Data Protection Regulation (GDPR), you have the right to:
- Access your personal data
- Request correction or deletion
- Restrict or object to processing
- Request data portability
You may withdraw consent at any time.
12. CCPA / CPRA Compliance (California Residents)
If you are a California resident, you have rights under the California Consumer Privacy Act and California Privacy Rights Act, including:
- The right to know what personal data is collected
- The right to request deletion of your data
- The right to opt out of the sale or sharing of personal information
- The right to non-discrimination for exercising your rights
To make a request, contact us at: support@feedbackflow360.com
13. Feedback Collection and Consent Disclosure
When users submit their information through forms, widgets, or feedback requests powered by FeedbackFlow360.com:
- They are providing explicit consent to be contacted by the business associated with the request
- Information collected may include name, email, phone number, and inquiry details
- This information is used for follow-up, marketing, customer service, and review management purposes
Businesses using FeedbackFlow360.com are responsible for:
- Displaying appropriate consent language
- Ensuring compliance with applicable privacy and marketing laws
- Managing opt-outs and user preferences
14. Data Processing and Third-Party Services
We may use third-party providers for:
- Cloud hosting
- Analytics
- Messaging services (email/SMS)
- CRM and integrations
These providers process data on our behalf and are contractually obligated to safeguard it.
15. International Data Transfers
Your information may be transferred and processed outside of your country of residence, including in the United States.
We take appropriate safeguards to ensure your data is protected in accordance with applicable laws.
16. Do Not Track Signals
Some browsers offer a “Do Not Track” (DNT) feature. Our platform does not currently respond to DNT signals.
17. Marketing Communications and Opt-Out
You may opt out of marketing communications at any time by:
- Clicking the “unsubscribe” link in emails
- Replying “STOP” to SMS messages
- Contacting us directly
We will process opt-out requests in accordance with applicable laws.
18. Changes to This Policy
We may update this Privacy Policy periodically. Updates will be posted on this page.
19. Contact Us
If you have any questions about this Privacy Policy, contact us at: support@feedbackflow360.com
20. Google API Services and Limited Use Disclosure
FeedbackFlow360’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Google services we access
When you connect your Google Business Profile to FeedbackFlow360, you grant us access (via the OAuth 2.0 scope https://www.googleapis.com/auth/business.manage) to the following Google data on your behalf:
- Your Google Business Profile accounts and locations (business names, addresses, IDs, account roles).
- Customer reviews posted on your locations (rating, text, reviewer display name, timestamps).
- Replies to those reviews (existing replies and ones we post on your behalf).
- An OAuth refresh token that allows us to keep the integration working without re-asking you to log in. This token is encrypted at rest and is never exposed to other users or third parties.
How we use this data
Google-sourced data is used exclusively to deliver the user-facing features you signed up for:
- Display your reviews inside FeedbackFlow360.
- Generate and (optionally) publish AI-assisted replies to those reviews.
- Provide analytics about your review activity (volume, ratings, response rate, sentiment).
- Send you notifications about new reviews or moderation status.
Limited Use — what we do NOT do
In compliance with Google’s Limited Use policy:
- We do NOT use Google user data for advertising, including retargeting, personalized advertising, or interest-based advertising.
- We do NOT sell or transfer Google user data to third parties for advertising, credit-worthiness, or any other purpose unrelated to the service you signed up for.
- We do NOT allow humans to read your Google user data except: (a) with your explicit consent, (b) when necessary for security investigations to address abuse or fraud, (c) when required by applicable law, or (d) when the data has been aggregated and anonymized for internal service-improvement purposes.
- We do NOT transfer Google user data to AI/ML models for training general-purpose models. Anthropic Claude (our AI provider) processes review content per-request only, and Anthropic does not retain customer data for model training under our agreement.
Data retention and deletion
- Your Google data is retained while your FeedbackFlow360 subscription is active and during the 90-day grace period after cancellation (read-only) so you can export it if needed.
- You can revoke FeedbackFlow360’s access to your Google account at any time via your Google Account permissions page: https://myaccount.google.com/permissions
- Upon revocation or account deletion, we delete the encrypted OAuth token and cease all further data collection. Reviews and replies previously imported are retained according to the retention schedule described elsewhere in this policy, unless you explicitly request deletion.
- You can request deletion of your data at any time by contacting us at support@feedbackflow360.com