Privacy Policy

Last Updated: December 24, 2025

HelloGuest AI ("we," "our," or "us") is committed to protecting the privacy of our users (Business Owners) and their customers (Guests). This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform and our integration with Google Business Profile APIs.

1. Information for Business Owners (Google OAuth)

To provide our services, we use Google OAuth 2.0 to connect to your Google Business Profile.

Secure Authentication: We use Google OAuth 2.0 to authenticate your login. We do not see, collect, or store your Google account password.

Access Tokens: We store encrypted access tokens to fetch your business reviews and profile information as authorized by your consent.

Restricted Data: We only access the "Restricted Scopes" necessary to display your reviews and generate your QR codes within the HelloGuest AI dashboard.

2. Information for Guests (End-Customers)

HelloGuest AI is designed to be a friction-less experience for your customers.

No Mandatory Accounts: Guests are not required to create an account or provide personal data to access your review links.

Optional Private Feedback: If a guest chooses to provide private feedback through our optional channel, we collect only the information they explicitly provide (e.g., rating and comments).

Third-Party Platforms: When a guest chooses to leave a public review, they are redirected to Google’s own platform, and their data is governed by Google’s Privacy Policy.

3. Google API Limited Use Disclosure

Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

No Selling: We never sell your Google Business Profile data or guest feedback to third parties.

No Advertising: We do not use your Google data for advertisement targeting, profiling, or lead generation.

Internal Use Only: Data is used solely to provide analytics and service improvements for the business owner.

4. Anti-Review Gating Policy

In strict compliance with Google’s Third-Party Policy, HelloGuest AI operates an "Open Feedback" model.

We do not filter, hide, or prevent negative reviews from being posted to Google Business Profiles.

We do not selectively ask for reviews only from guests who had a positive experience.

We provide all guests with an equal, unhindered path to leave public feedback, regardless of their sentiment.

5. Cookies and Tracking Technologies

Essential Cookies: We use essential cookies to maintain your login session and ensure the security of your account.

Analytics: We may use third-party analytics tools to understand how users interact with our marketing site to improve our service.

Preference Control: You can manage or disable cookies through your browser settings, though some features of the site may not function correctly without them.

6. Third-Party Service Providers

Infrastructure: We use Firebase (Google Cloud) for hosting our application and storing encrypted data securely.

Communication: We may use third-party services to send transactional emails, such as account setup or support notifications.

Compliance: All third-party providers are vetted to ensure they maintain data protection standards equivalent to our own.

7. International Data Transfers

Data Storage: Information collected from you may be stored and processed in the United States or any other country where HelloGuest AI or its service providers maintain facilities.

Legal Protections: We implement standard contractual clauses and other legal mechanisms to ensure your data receives the same level of protection regardless of where it is processed.

8. Children’s Privacy

Age Limitation: Our services are intended for business owners and are not directed to individuals under the age of 18.

Data Removal: If we discover we have inadvertently collected data from a minor, we will delete it immediately upon notification.

9. Data Control and Deletion

Revoking Access: You can revoke HelloGuest AI’s access to your Google account at any time through your Google Security Settings or our dashboard.

Deletion Requests: Upon request or account termination, we will delete all stored access tokens and guest feedback associated with your account. Please contact support@helloguest.ai for data removal.

10. Changes to This Policy

Updates: We may update this Privacy Policy to reflect changes in our practices or for legal and regulatory reasons.

Notification: We will notify users of any significant changes by updating the "Last Updated" date at the top of this page.