Privacy Policy

Account information

When you create a Firstcliq account, we collect your name, email address, and (if you sign up with Google) the basic profile information Google provides.

Google Business Profile data

If you connect a Google Business Profile, we request access, via Google's OAuth consent screen, to read and reply to your reviews, view your business profile information, and post updates on your behalf. We store your reviews, review replies, and basic business listing details (name, address, category, phone, website) so we can display and manage them in your dashboard.

Your Google OAuth access and refresh tokens are encrypted at rest (AES-256-GCM) and are never exposed to your browser or any party other than our own servers.

Review page data

If you use Firstcliq's review collection page feature, we store the business details you provide (name, logo, message, Google review link) and any feedback your customers submit through that page (name, email, phone, comment).

Payment information

Billing is handled by Stripe. Firstcliq does not receive or store your full card details — Stripe processes payments directly and shares with us only what is needed to manage your subscription (plan, billing status, and similar account-level information).

Usage data

We collect standard technical information such as IP address, browser type, and pages visited, to operate and secure the service.

• •To operate your dashboard and provide the features you sign up for
• •To read your Google reviews and, where you have enabled it, generate and post replies on your behalf
• •To send you service-related emails (alerts, receipts, account notices)
• •To process payments and manage your subscription
• •To detect and prevent abuse, fraud, and security issues
• •To improve and maintain the service

We do not sell your personal information, and we do not use your Google Business Profile data for advertising purposes.

To generate review reply drafts and analyse review sentiment, review text is sent to OpenAI's API. This data is used solely to generate the requested output for your account and is not used by us or, per OpenAI's API terms, by OpenAI to train their models.

We use the following providers to operate Firstcliq. Each processes data solely to provide their service to us:

• •Supabase — database, authentication, and file storage
• •Vercel — application hosting
• •OpenAI — AI reply generation and sentiment analysis
• •Stripe — payment processing
• •Resend — transactional email delivery
• •Trigger.dev — scheduled background jobs (e.g. review polling)
• •DataForSEO — keyword rank tracking, where enabled
• •Google — Business Profile API access, per the scopes you explicitly authorise

We retain your account and business data for as long as your account is active. If you disconnect your Google Business Profile, we stop syncing new data immediately; previously synced data is retained until you request deletion or close your account. You can request deletion of your data at any time by contacting us at the email below.

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to withdraw consent for Google Business Profile access at any time (via your dashboard settings or directly at myaccount.google.com/permissions). To exercise any of these rights, contact us using the details below.

We use industry-standard safeguards including encryption of OAuth tokens at rest, database row-level security so accounts can only access their own data, and HTTPS for all data in transit. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.

Firstcliq's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We may update this policy from time to time. Material changes will be communicated by email or an in-app notice before they take effect.

Lenawa Solutions LLC-FZ, Meydan Free Zone, Dubai, United Arab Emirates
Email: privacy@firstcliq.io