Privacy Policy

Account information. When you sign in through Insly SSO we receive your name and email address to create and secure your account.

Business information. Details you provide about the businesses you manage: business name, Google review link, branding, timezone, message templates and settings.

Customer contacts.Businesses upload or connect their own customer lists (names, phone numbers, email addresses) so we can send review requests on their behalf. The business is the responsible party for this data and confirms it has a lawful basis to contact these customers; we process it only on the business's instructions.

Messages and responses. We keep a log of review requests sent (channel, recipient, delivery status), ratings submitted, and feedback comments customers choose to share.

If a business connects its Google account, we access its Google Business Profile data through Google's APIs with the account holder's explicit OAuth consent. We access only: business account and location information, and the reviews on the business's own listing (reviewer name, star rating, review text, and existing owner replies).

We use this data solely to:

• display the business's reviews inside its own dashboard;
• generate suggested owner-reply drafts for the business to approve or edit; and
• post owner replies that the business approves back to its own listing.

Where AI-assisted drafting is enabled, the text of a review is sent to our AI provider for the sole purpose of generating a suggested reply; it is not used to train AI models. OAuth tokens are stored encrypted and are used only to perform the actions above. Google user data is never sold, never used for advertising, and never shared with third parties except the service providers listed in section 5 acting on our instructions. You can revoke our access at any time in your Google account security settings, and we delete stored tokens on disconnection or account deletion.

Insly Reviews' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• to send review requests and capped follow-up reminders on a business's behalf;
• to route customer ratings — public review invitations for positive ratings, private feedback to the business for negative ones;
• to show businesses their funnel performance and communication history;
• to operate, secure, and improve the service; and
• to meet legal obligations.

We do not sell personal information. We do not use it for third-party advertising.

We process account data to perform our contract with you. Businesses using Insly Reviews to contact their customers warrant that they have obtained any consent required and remain the responsible party for their customer lists; every message we send respects opt-outs, and unsubscribed contacts are never messaged again.

We share personal information only with service providers who process it on our instructions to deliver the service: email, SMS and WhatsApp delivery providers; our AI provider (reply drafting); and our cloud hosting providers. We may disclose information where required by law. We never sell it.

Message logs are retained for 12 months. Account and business data is retained while the account is active and deleted or anonymised on request after closure, except where we must keep records by law.

Data is encrypted in transit (TLS) and sensitive credentials (such as Google OAuth tokens) are encrypted at rest. Access is limited to authorised personnel who need it to operate the service.

Under POPIA you may request access to, correction of, or deletion of your personal information, and you may object to processing. Customers who receive our messages can opt out at any time and will not be contacted again. To exercise any right, email [email protected]. You may also lodge a complaint with the Information Regulator (South Africa).

The service is intended for businesses and is not directed at children under 18.

We may update this policy; material changes will be posted on this page with a new effective date. Questions: [email protected].