Privacy Policy

Last updated October 27, 2026

This policy explains what information Uwimana Apps ("we") handles when providing review reply and website assistant services to business clients, and how it is protected.

Google account and Business Profile data

When a business authorizes our application through Google, we request access to manage its Google Business Profile (the business.manage permission). With this access we:

• read the business's locations (name and address) and its customer reviews;
• post owner replies to those reviews, either automatically for positive reviews or after a person at the business approves them.

We do not use this access to edit business information, read other Google data, or do anything the business has not asked for. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we store

• Review text, star rating, the reviewer's public display name, and the reply we drafted or posted, so we never reply twice.
• Appointment requests a customer submits through a website assistant (name, phone number, vehicle, service and preferred time), which are sent to the business.
• A secure sign-in token that lets our app act on the business's Google profile. It is stored on our server and never shared.

How information is processed

To draft replies and answer chat messages, review text and chat messages are sent to an AI service provider, which processes them only to produce a response. We do not send payment details, passwords or customer contact information for this purpose, except what a customer types into a chat.

What we never do

• We do not sell, rent or share data with advertisers or data brokers.
• We do not use Google user data for advertising or to train general-purpose AI models.
• We do not let anyone read this data except to run the service, fix problems, or when required by law.

Retention and deletion

We keep records only while the service is active. When a business ends the service, we delete its stored data and sign-in token within 30 days. A business can remove our access at any time in its Google Business Profile settings (People and access) or at myaccount.google.com/permissions, and can ask us to delete its data by email.

Security

Data is sent over encrypted connections (HTTPS), stored on a protected server, and the admin pages require a password.

Contact

Questions or deletion requests: dieudonneuwimana96@gmail.com.