Privacy Policy

This policy describes how Keller Digital LLC (“Keller Digital,” “we,” “us”) handles information when you use Keller Digital Review Replies (the “Service”), including Google user data obtained through Google APIs. The public address of this policy is https://kellerdigital.dev/privacy. That is the privacy policy linked from the homepage and the URL to enter on the Google OAuth consent screen.

The Service is in early access. These practices apply when a business connects a Google account to the Service. This marketing site does not offer sign-in.

1. Who we are

Keller Digital LLC is located in Queenstown, Maryland. Keller Digital Review Replies is a self-serve web app for small local businesses. An owner signs in with Google, authorizes access to their own Google Business Profile, reviews AI-drafted replies, and approves what is posted. The owner can edit or delete replies and can disconnect at any time.

Contact for privacy questions and deletion requests: andy@kellerdigital.dev.

2. What this policy covers

This policy covers:

• Google user data accessed through Google APIs, including the OAuth scope https://www.googleapis.com/auth/business.manage.
• Account information received when you sign in with Google.
• Messages you send us, including early-access email to andy@kellerdigital.dev.

The pages on kellerdigital.dev do not use tracking cookies, advertising pixels, or third-party analytics. They do not set a cookie to recognize you on a later visit.

3. Google user data we access

We request the smallest Google authorization the product needs. The sensitive scope is:

https://www.googleapis.com/auth/business.manage

Google provides that scope for applications that manage a Google Business Profile. The Service uses it only as described in this policy. The scope can allow broader profile management. We do not use that breadth. We do not edit your business name, address, phone number, hours, categories, description, website, photos, or posts. We do not create Google posts. We do not solicit reviews.

Data from Google sign-in

When you sign in with Google, we receive:

• The Google account identifier.
• Your name, as the Google account provides it.
• Your email address.

We use these to open your account, keep you signed in, and contact you about the Service if you have asked us to.

Data from the Business Profile scope

After you authorize https://www.googleapis.com/auth/business.manage, and only for locations your signed-in Google account owns or manages, we access:

• Location records needed to list your locations and tell them apart: the location’s Google resource identifier, display name, and storefront address if Google includes it.
• Reviews on those locations: the review’s Google resource identifier, reviewer display name as Google provides it, star rating, review text, and create or update time.
• Any owner reply already attached to those reviews.
• The ability to create, update, and delete the owner reply on those reviews.

We do not use the scope to read or write other lines of business on unrelated Google products. We do not access Gmail, Google Drive, or Google Contacts.

4. How we use Google user data

We use Google user data only to provide the features you see in the Service:

• Show the locations on the Google account you connected.
• Show the reviews on those locations.
• Draft a reply to a review for that business.
• Post, edit, or delete a reply when you approve that action.
• Post a reply without a separate click only when you have turned on auto-post for that review. Auto-post is off unless you turn it on, and it applies only to reviews you select.
• Keep your session so you can return and manage replies.
• Delete stored Google user data when you disconnect or ask us to delete your account.

Review data is used to draft and manage replies for the business that received the review. It is not used for another business. It is not used to score, rank, or market to reviewers. We do not contact reviewers except by publishing the public reply you approve, which Google displays on your Business Profile.

5. AI drafts

To draft a reply, the Service may send the review text, star rating, business name, and any editing instructions you enter to an AI model provider. That provider processes the content only to return a draft for that reply. The draft is shown to you. You edit and approve it before it is posted, unless you turned on auto-post for that review.

We do not use Google user data, or data derived from it, to develop, improve, or train generalized or non-personalized AI or machine-learning models. We do not allow the model provider to use your Google user data for training. Drafting a reply you asked for is the only reason review content is sent to a model.

6. Google API Services User Data Policy, including Limited Use

Keller Digital LLC complies with the Google API Services User Data Policy, including the Limited Use requirements. Our use of Google user data is limited to the practices published in this policy.

In particular:

• We limit use of Google user data to providing and improving user-facing features that are prominent in the Service: listing your locations, reading your reviews, drafting replies, and posting, editing, or deleting replies you approve.
• We do not transfer Google user data except to provide those features (for example to the infrastructure that hosts the Service, or to an AI processor returning a draft), for security, to comply with applicable law, or as part of a merger, acquisition, or sale of assets of Keller Digital LLC with notice to users. Any provider that processes the data may use it only on our instructions to provide the feature, and may not sell it or use it for advertising or to train generalized models.
• We do not sell Google user data. We do not transfer or use it for serving advertisements, including retargeting, personalized advertising, or interest-based advertising. We do not transfer or use it to determine credit-worthiness or for lending.
• We do not allow humans to read Google user data unless you have given consent for a specific request (for example you ask us to look at a draft with you), the data is aggregated and anonymized and used for internal operations in line with applicable privacy law, or access is necessary for security, to investigate abuse, or to comply with applicable law.
• We do not use Google user data to train AI or machine-learning models.

The raw data obtained through Google APIs, and data aggregated, anonymized, or derived from that raw data, stays under these limits.

7. What we do not do with Google user data

• We do not sell it.
• We do not share it with data brokers, advertisers, or other businesses for their own purposes.
• We do not use it for advertising.
• We do not use it to train AI models.
• We do not solicit, incentivize, buy, or filter reviews.
• We do not edit Business Profile information other than the owner’s reply to a review.
• We do not let staff browse reviews, drafts, or replies. Human access requires your consent for a specific request, or a security, abuse, or legal need as described above.

8. Storage and security

We store Google user data only as needed to operate the features in this policy: to show you your locations and reviews, to keep drafts, to record the replies you approved and your auto-post choices, and to carry out a disconnect or deletion request.

Protections for this data:

• The Service is served over HTTPS, so data is encrypted in transit between you and the Service and between the Service and Google.
• Access to stored Google user data is limited to the application systems that provide the Service. We do not copy it into analytics tools, advertising tools, or model-training systems.
• We do not put Google user data on this public marketing site.
• Staff do not have a routine way to read review content. Access for support happens only with your consent for the specific request. Access for security or legal reasons is limited to what that incident requires.

No method of storage or transmission is perfect. We design the Service so that Google user data is not kept for a purpose this policy does not name.

9. Sharing

We do not sell Google user data and we do not share it for advertising or with other businesses for their own use.

We disclose Google user data only in these cases:

• Processors that run the Service. A host that stores the account, and an AI provider that returns a draft, process the data under our instructions solely to provide the feature you are using. They may not use it for their own advertising or to train generalized models.
• Google, when you publish a reply. If you approve a reply, or if you turned on auto-post for that review, we send the reply text to Google so Google can publish it on your Business Profile. That reply is then subject to Google’s own display of your public profile.
• Security, abuse, or law. We may disclose information if it is necessary to investigate abuse, to protect the Service, or to comply with applicable law.
• A sale of the business. If Keller Digital LLC is involved in a merger, acquisition, or sale of assets, Google user data may transfer with the business, with notice to you, and it remains subject to this policy’s limits.

10. Retention and deletion

We keep Google user data from a connected Business Profile while that connection is in place, because that is what lets you see reviews and manage replies.

When you disconnect Google inside the Service, we delete the Google user data we stored for that connection. That includes location records, reviews, reviewer display names, drafts, stored reply text, and auto-post choices. We also delete that data if you email andy@kellerdigital.dev and ask us to delete your account.

You can revoke the app from your Google Account permissions as well. Revoking access stops further collection. Email us if you also want stored data deleted and you cannot open the Service.

If an encrypted backup still holds a copy after deletion, we do not use that copy to operate the product, to train models, or for any other purpose. Backups are overwritten in the ordinary backup cycle.

A reply that was already posted to Google remains on your Business Profile after you disconnect. Disconnecting deletes our copy and ends our access. It does not, by itself, remove the public reply from Google. You can edit or delete a reply in the Service while you are still connected, or manage it in Google Business Profile.

Email you send to andy@kellerdigital.dev, such as an early-access note, is kept long enough to answer you and to follow up about access if you asked for it. It is not added to an advertising list. You can ask us to delete that correspondence.

11. Your choices

• Approve, edit, or discard a draft before it is posted.
• Turn auto-post on or off for individual reviews. It stays off until you turn it on.
• Edit or delete a reply the Service posted, while your account is connected.
• Disconnect at any time. Disconnecting deletes stored Google user data for that connection, as section 10 describes.
• Email andy@kellerdigital.dev to ask what we hold, to correct account details, or to delete your account.
• Revoke the Service in Google Account permissions.

12. Email you send us

If you email andy@kellerdigital.dev, we use the message to reply. The marketing site has no signup form, no tracking pixel, and no analytics script. Sending email does not connect a Google Business Profile.

13. Children

The Service is for business owners managing a Google Business Profile. It is not directed to children under 13, and we do not knowingly collect personal information from children.

14. Changes

If we change how the Service accesses, uses, stores, or shares Google user data, we will update this policy and its effective date before the new use begins. We will not apply a materially different use to Google user data already collected without describing it here. The current policy is always at https://kellerdigital.dev/privacy.

15. Contact

Keller Digital LLC
Queenstown, Maryland
andy@kellerdigital.dev
Privacy policy: https://kellerdigital.dev/privacy