Privacy policy

Sweep Growth is a tool that manages a business’s Google Business Profile: it syncs reviews, writes and publishes replies and posts, and reports on performance. You can reach us at info@sweepcode.com.

• Your account. Name, email address and a hashed password. If you sign in with Google we also store the identifier Google gives us and your profile picture.
• Your Google connection. When you connect a Business Profile we store a refresh token, encrypted at rest, so we can act on your listing. We never see or store your Google password.
• Your listing data. Locations, reviews and their public text and reviewer names, replies, posts, photos and the performance metrics Google reports.
• What you upload. Photos, business details, and any customer contacts you import to send review requests.
• Usage records. Server logs, actions taken by the automation, and the settings that allowed them. We keep these so you can see exactly what happened.

Only to run the service you asked for: answering reviews, publishing posts, generating images, sending the emails you turned on, and showing you your numbers. We do not sell your data, and we do not use your customers’ information to advertise to them.

Sweep Growth’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We request the Business Profile scope so we can read your locations and reviews and publish replies and posts on your behalf. We do not use Google user data to train generalised artificial intelligence models. Review text is sent to our text model only to draft a reply to that specific review.

These companies handle data on our behalf, and only for the purpose listed:

• Google — Business Profile data: your locations, reviews, posts and performance metrics.
• OpenAI — Generating reply and post text, and images when you ask for them.
• Cloudinary — Storing and serving the images used on your posts.
• Resend — Sending notification and report emails.

Your data stays while your account is open. Disconnecting a Google account immediately removes its locations, reviews and posts from our systems. Closing your account deletes your workspace within 30 days, except records we must keep for accounting or to defend a legal claim.

Google refresh tokens are encrypted with AES-256-GCM before they are stored. Passwords are hashed, never stored in readable form. Access to a customer workspace by our own staff is restricted and every such access is recorded.

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Write to info@sweepcode.com and we will respond within 30 days. You can disconnect Google at any time from the Connections page, and revoke our access directly in your Google account permissions.

Sweep Growth is for businesses and is not intended for anyone under 18.

If we change this policy in a way that materially affects you, we will tell you by email before it takes effect.