Privacy Policy

Guava (“Guava,” “we,” “us”) provides a service that generates a one-page website from a business’s public Google listing and reviews (the “Service”). This Policy explains how we collect, use, share, and protect personal information. We aim to comply with the data protection and privacy laws that apply in the jurisdictions where we operate and where our users are located. By using the Service, you agree to this Policy.

Information we collect

• Account information: your email address and a password (stored securely, hashed) when you create an account, plus your sites and settings.
• Information you provide: the Google Maps link you paste, edits you make to your site, and any details you give us when you contact us.
• Business and review data: when a link is submitted, we retrieve publicly available business details, photos, ratings, and reviews from the Google Places API to build the page.
• Payment information: if you subscribe, payments are processed by Stripe. We do not see or store your full card details, Stripe handles them under its own terms.
• Usage data: basic technical and analytics information such as IP address, browser type, pages viewed, and timestamps, used to operate, secure, and improve the Service.

How we use information

• To resolve a link to a business and generate, store, and display the resulting page.
• To analyse review content using AI to produce accurate, evidence-based copy.
• To create and manage your account, process subscriptions, and provide support.
• To operate, maintain, secure, analyse, and improve the Service.
• To communicate with you about your account, billing, support, or changes to the Service.

Who we share information with

We share information only with the providers needed to run the Service, each acting under its own terms: Google (Places API, business and review data), Anthropic (AI processing of review text to generate and verify copy), Supabase (database and authentication), Vercel (application hosting and analytics), and Stripe (payments). We do not sell your personal information.

International data transfers

We and our providers may store and process data in countries other than your own, including the United States. Wherever your information is handled, we require appropriate safeguards and our providers remain bound by their own security and privacy commitments. By using the Service you consent to your information being transferred to and processed in these locations.

Google content

Business details, photos, ratings, and reviews are sourced from Google and remain subject to Google’s terms and the rights of their respective authors. Review content is shown with attribution and is not presented as our own. We do not claim ownership of it.

Security

We take reasonable steps to protect personal information, including encryption in transit (HTTPS), access controls, and storing secrets server-side. No method of transmission or storage is completely secure, but if a data breach likely to result in significant harm occurs, we will notify affected users and any relevant authority as required by applicable law, without undue delay.

Data retention

We retain account and site data for as long as your account or site is active, or as needed to provide the Service and meet legal/record-keeping obligations. You may request deletion of your account, a site, and associated data at any time by contacting us.

Your rights

Depending on where you live, you may have rights to access, correct, delete, export, or restrict the processing of your personal information, to object to certain uses, and to withdraw consent at any time. To exercise any of these, contact us and we will respond within the timeframe required by applicable law. If you are the owner of a business whose public listing was used to generate a page, you may request changes or removal. If you have a concern we can’t resolve, you may have the right to lodge a complaint with your local data protection or privacy authority.

Cookies & local storage

We use only the cookies and browser storage necessary to keep you signed in, remember basic preferences, and run analytics. We do not sell personal information or use it for cross-site advertising.

Children

The Service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children.

Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

Contact

Questions about this Policy or your information? Email us at info@guava-page.com or contact us here.