Privacy Policy
Effective October 31, 2026 · Last updated October 31, 2026
This privacy policy explains how TrueReply collects, uses, stores, shares and deletes information, including information we receive from Google when you connect your Google Business Profile. TrueReply is a service operated by Global Group One Inc. ("we", "us"). It covers our website at globalgroupone.com/truereply and the TrueReply app at truereply.globalgroupone.com.
The Short Version
- When you connect Google, TrueReply reads the business locations you manage and their reviews, and posts replies to those reviews for you under the rules you set.
- We use Google data only to run the features you see in TrueReply. We never sell it, never use it for advertising and never use it to train AI models.
- Review text and reviewer names are deleted 30 days after we fetch them.
- You can disconnect Google at any time. When you do, we revoke our access and delete that account's Google data straight away.
1. Information We Collect
Information you give us
- Account details: your email address, business name, time zone and the plan you chose.
- Reply settings: what you tell us about your business, your tone, how you sign off and which reviews may be answered automatically.
- Messages: anything you send through our contact form or by email.
Information we receive from Google
When you click Connect Google, you sign in on Google's own page and choose whether to give TrueReply access. We request only these permissions:
- openid and email: your Google account's email address and account identifier, so we know which Google account is connected.
- Google Business Profile management (business.manage): access to the Business Profile accounts and locations you own or manage.
With that access, TrueReply reads and stores the following Google user data:
| Google data | Why we use it | How long we keep it |
|---|---|---|
| Your Business Profile accounts and locations: name, address, place ID, review link and whether you can reply | To show your locations so you can choose which ones TrueReply answers, and to give you your review link and QR code | Until you disconnect Google or close your account |
| Reviews on locations you switch on: reviewer display name, star rating, review text, date and any existing reply | To decide whether a review can be answered automatically, write a reply in your voice and show it in your dashboard and emails | Review text and reviewer names are deleted 30 days after we fetch them |
| Replies we post for you, with the date and outcome | To show you a record of what was posted and stop duplicate replies | While your account is open |
| Your listing's current star rating and review count | To include in your weekly summary email | Not stored. It is fetched when the email is sent |
| A Google access token and refresh token | To keep your connection working without asking you to sign in again | Until you disconnect Google, close your account or revoke access in your Google account |
TrueReply does not read your Gmail, contacts, calendar, files, Google Ads or Analytics data, and it does not change your business details such as hours, phone number or address.
Information collected automatically
- Sign-in cookie: the app sets 1 cookie to keep you signed in. We don't use advertising or tracking cookies.
- Technical logs: our hosting provider records requests (such as time, page and IP address) to keep the service secure and working. These logs are kept for a short period.
- Free tools: text you paste into the free reply generator is used to write a reply and isn't stored. To prevent abuse we keep a daily usage count tied to a one-way hash, not your IP address.
Billing information
Payments are handled by PayPal. We receive your subscription status and plan from PayPal, never your card or bank details.
2. How We Use Google User Data
We use Google user data only to provide and improve the user-facing features of TrueReply that you can see and control:
- listing your Business Profile locations so you can choose which ones to switch on;
- checking new reviews on those locations and deciding, under your rules, whether a reply can post on its own or must wait for your approval;
- writing draft replies in your chosen tone and posting them to Google, either automatically under your rules or after you approve them;
- showing reviews, replies and their status in your dashboard;
- emailing you when a review needs your attention, and sending your weekly summary;
- finding your review link so you can share it with customers.
We do not use Google user data to serve ads, build profiles of reviewers, make credit or lending decisions, or create databases for any other purpose. We do not combine it with data from other sources.
3. Google API Services User Data Policy and Limited Use
TrueReply's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We only use Google user data to provide or improve TrueReply's user-facing features.
- We do not transfer Google user data to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice to you.
- We do not use or transfer Google user data for advertising, including targeted, personalized, retargeted or interest-based advertising.
- We do not sell Google user data, and we do not give it to data brokers or information resellers.
- No person at TrueReply reads your Google user data unless you ask us to (for example in a support request), it is needed for security or to investigate abuse, or the law requires it.
4. AI and Google User Data
TrueReply writes draft replies using an AI model provided by Anthropic. To write a reply, we send Anthropic the review (the reviewer's display name, rating and text) together with your reply settings. Anthropic processes this only to return the reply to us and, under its commercial terms, does not use it to train its models.
We do not use Google user data, including Google Business Profile data, to develop, improve or train generalized or non-personalized AI or machine learning models, and we do not allow our providers to do so. When you edit a reply before posting, we may keep your edited wording (not the review) as a style example for future replies on your own account only. You can see and delete these examples in your settings.
5. Who We Share Information With
We share information only with the service providers that run TrueReply for us, under contracts that limit their use of it to providing their service:
| Provider | What they do | What they receive |
|---|---|---|
| Cloudflare | Hosts the website and app and stores our database | All data the app stores, encrypted at rest |
| Anthropic | Writes draft replies | The review being answered and your reply settings |
| Resend | Delivers our emails to you | Your email address and the content of emails we send you, which can include a review and a draft reply |
| PayPal | Handles subscriptions and payments | Your billing details. No Google user data |
We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a merger or sale of our business, in which case we'll tell you first. We never sell personal information.
6. How We Protect Information
- All traffic to the website and app is encrypted in transit with HTTPS.
- Google access and refresh tokens are encrypted with AES-256 before they are stored, and the database is encrypted at rest.
- You sign in with a single-use link sent to your email, so there is no password to steal.
- Access to production systems is limited to the people who run TrueReply.
- Card details never reach us. They stay with PayPal.
7. How Long We Keep Information and How It Is Deleted
- Review text and reviewer names: deleted automatically 30 days after we fetch them.
- Replies we posted and their log: kept while your account is open so you can see your history.
- Locations and Google tokens: kept until you disconnect Google or close your account.
- When you disconnect Google: we revoke our access with Google and delete the locations, reviews, replies and tokens for that Google account straight away.
- When you close your account: we delete your data within 30 days, except billing records we must keep for tax and accounting law.
To delete your data, disconnect Google on the Locations page of your dashboard, or ask us to delete your account through our contact form or by calling (917) 342-2191. You can also remove TrueReply's access at any time from your Google Account at myaccount.google.com/permissions. When you do, TrueReply stops working for those locations and we email you. Review text is still deleted on the 30-day schedule, and everything else is deleted when you disconnect in the dashboard or close your account.
8. Your Choices and Rights
You can change your settings, switch off automatic replies, disconnect Google or close your account at any time. You can ask us for a copy of your data, to correct it or to delete it, and we'll respond within 30 days. Depending on where you live, including California and the European Economic Area, you may have additional rights such as objecting to processing. We'll honor them, and we won't treat you differently for using them.
9. Where Information Is Stored
TrueReply is run from the United States. Our providers may process information in other countries, with safeguards required by law.
10. Children
TrueReply is a service for businesses and isn't directed at children under 16. We don't knowingly collect their information.
11. Changes to This Policy
If we change how TrueReply uses Google user data or make another material change, we'll email you and update this page before the change takes effect.
12. Contact Us
Global Group One Inc., operator of TrueReply
Phone (917) 342-2191, Monday to Friday, 9 AM to 5 PM Eastern
Contact form (we reply within 1 business day)