Privacy policy
This explains what we collect, why we need it, and what you can ask us to do with it.
Last updated 9 September 2026.
Who we are
Sweep Growth is a tool that manages a business’s Google Business Profile: it syncs reviews, writes and publishes replies and posts, and reports on performance. You can reach us at info@sweepcode.com.
What we collect
- Your account. Name, email address and a hashed password. If you sign in with Google we also store the identifier Google gives us and your profile picture.
- Your Google connection. When you connect a Business Profile we store a refresh token, encrypted at rest, so we can act on your listing. We never see or store your Google password.
- Your listing data. Locations, reviews and their public text and reviewer names, replies, posts, photos and the performance metrics Google reports.
- What you upload. Photos, business details, and any customer contacts you import to send review requests.
- Support conversations. What you write to us in the dashboard chat, any screenshots you attach, and the page you were on when you wrote, so we can help. They are deleted with your account.
- Usage records. Server logs, actions taken by the automation, and the settings that allowed them. We keep these so you can see exactly what happened. We also record each time you sign in (when, how, and your browser or device — your IP address is stored only in a scrambled form we cannot turn back into the address) and each email we send you (its subject and whether it was delivered, not its content).
Advertising and measurement
Our public website uses the Meta Pixel and the Google tag (Google Analytics and Google Ads) to measure which of our ads bring people to us. They set cookies in your browser and tell Meta and Google which pages you visited, whether you used one of our free tools, and whether you created an account or connected a listing. We do not send them your name, email address, business details or anything from your Google listing.
We also note how you first reached us (for example the campaign name in the link you clicked, or the site that referred you) and keep it with your account, so we know which of our marketing works. You can block these cookies in your browser settings or with a content blocker; the service works the same without them.
Why we use it
Only to run the service you asked for: answering reviews, publishing posts, generating images, sending the emails you turned on, and showing you your numbers. We do not sell your data, and we do not use your customers’ information to advertise to them.
Google API Services disclosure
Sweep Growth’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We request the Business Profile scope so we can read your locations and reviews and publish replies and posts on your behalf. We do not use Google user data to train generalised artificial intelligence models. Review text is sent to our text model only to draft a reply to that specific review.
Who else processes it
These companies handle data on our behalf, and only for the purpose listed:
- Google — Business Profile data: your locations, reviews, posts and performance metrics.
- OpenAI — Generating reply and post text, and images when you ask for them.
- Cloudinary — Storing and serving the images used on your posts.
- Resend — Sending notification and report emails.
How long we keep it
Your data stays while your account is open. Disconnecting a Google account immediately removes its locations, reviews and posts from our systems. Closing your account deletes your workspace within 30 days, except records we must keep for accounting or to defend a legal claim.
How we protect it
Google refresh tokens are encrypted with AES-256-GCM before they are stored. Passwords are hashed, never stored in readable form. Access to a customer workspace by our own staff is restricted and every such access is recorded.
Your rights
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Write to info@sweepcode.com and we will respond within 30 days. You can disconnect Google at any time from the Connections page, and revoke our access directly in your Google account permissions.
Children
Sweep Growth is for businesses and is not intended for anyone under 18.
Changes
If we change this policy in a way that materially affects you, we will tell you by email before it takes effect.