Privacy Policy

This policy explains what SrarBack collects when you use StarBack, why, and the choices you have. We keep it simple: we collect only what we need to run the service, and we don't sell your data.

What we collect

• Account details: your email address.
• Business profile: what you enter during setup (business name, first name, type of business, city, services, phone, tone, sign-off, example replies, rules). Agencies also store the same details for each client they add, and the email addresses of their team members.
• Reviews and drafts: reviews you paste in and the drafts we create, so you can see your history.
• Social posts: the monthly captions we create for you.
• Billing status: whether your subscription is active, and the IDs our payment partner gives us. We never see or store your card number.
• Technical data: a login cookie, basic usage counts (to apply fair-use limits), and error logs. For rate limiting we store a scrambled (hashed) version of your IP address, not the address itself.

Who we share it with

Only the service providers we need to run StarBack:

• Anthropic — the AI that writes drafts. Your profile and pasted review are sent to it to create drafts. Anthropic does not use API data to train its models by default.
• Our payment partner (merchant of record) — handles checkout, taxes and invoices.
• Our email provider — sends login links and your monthly posts.
• Our hosting and database providers — store the app and its data.

We may disclose information if required by law.

Customer reviews you paste in

Reviews are public on Google, but they may mention a customer's name or details. Please paste only the review itself. StarBack is designed not to repeat private details in replies.

Google Business Profile

If you choose to connect Google, StarBack asks for permission to manage your Business Profile (the “business.manage” permission) and your email address. We use it only to: list the Business Profile locations you manage so you can pick one, read the reviews on the locations you link, and post the replies you approve. We never post anything you haven't approved, never change your listing details, and never use Google data for advertising or to train AI models. The reviews we import are sent to our AI provider only to draft replies, as described above.

Google access tokens are stored encrypted. You can disconnect at any time on the Details page; we then delete the tokens, withdraw our access at Google and stop importing. You can also remove access from your Google Account settings. StarBack's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How long we keep it

We keep your data while your account exists. When you click Delete my account and data on the Details page, we immediately and permanently delete your account, profile, reviews, drafts, posts and login sessions. We keep anonymous usage counts (with no link to you) to track our total AI costs. Backups held by our database provider are overwritten on their normal schedule. Our payment partner keeps its own billing records as required by tax law.

Your rights

You can view and edit your information on the Details page, and delete everything at any time. Depending on where you live (for example California), you may have extra rights to access or delete data — email us and we'll help.

Security

We use encrypted connections (HTTPS), password-free login links that expire, and keep secret keys out of our code. No system is perfectly secure, but we take reasonable care.

Children

StarBack is for businesses and is not meant for anyone under 18.

Contact

Email support@starbackofficial.com with any privacy question.