Privacy Policy

This Privacy Policy explains how ManageBiz ("ManageBiz", "we", "us") handles personal data when you use the ManageBiz website, web app, iOS app and Android app (together, the "Service"). We process personal data in line with Indonesia's Personal Data Protection Law (Law No. 27 of 2022).

1. Data we collect

• Account data: your name, email address, and a one-way hash of your password (we never store the password itself).
• Business data: your business name and category, and the platform listings you connect.
• Reviews: public reviews of your business fetched from connected platforms (including reviewer display names, ratings, text, photos and links), and reviews contained in files you import.
• Your replies: reply text you write or send through the Service.
• Google account data: if you sign in with Google, your Google account email and the OAuth tokens needed to search Google for your listing and, where permitted, post replies to your Google Business Profile.
• Subscription data: when you subscribe in our iOS or Android app, Apple or Google tells us which plan you bought, its status and renewal date. Payment details stay with Apple or Google; we never receive your card.
• Technical data: server logs (such as IP address, timestamps and request paths) used for security and troubleshooting.

2. How we use it

• To provide the Service: syncing and displaying reviews, analytics, and notifications.
• To run AI features: classifying review sentiment and topics, and drafting reply suggestions.
• To send transactional email such as address confirmation and password reset links.
• To secure the Service, prevent abuse, and fix problems.

We do not sell personal data, and we do not use your data for advertising.

3. Who we share it with

We share data only with providers that help us run the Service, and only what they need:

• AI providers (OpenAI, and Anthropic as a fallback) receive review text to produce sentiment, topics and reply drafts.
• Google and Tripadvisor APIs, to read reviews and listings you connect and, for Google, to post replies you send.
• Apple and Google as payment processors for subscriptions bought in our apps; we exchange purchase identifiers with them to verify your plan.
• Email delivery providers, to deliver transactional email.
• Hosting and infrastructure providers that store and run the Service.

We may also disclose data where required by law.

4. Google user data

ManageBiz's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to provide the features you request — finding your listing and posting your replies — and is never used for advertising or transferred to others except as needed to provide those features. You can disconnect a Google account at any time in Account settings, which revokes our access.

5. Cookies

The web app uses a single essential cookie that keeps you signed in. It is HTTP-only and cannot be read by scripts. We do not use advertising or third-party tracking cookies.

6. Retention and deletion

We keep your data while your account is active. When you delete your account, your account, businesses, connections, reviews and replies are deleted, and linked Google accounts are signed out and their access revoked. Server logs are kept for a limited period for security. See how to delete your account.

7. Security

Data is transmitted over HTTPS. Passwords are hashed with bcrypt, email links are single-use and short-lived, and the web app never exposes your session token to page scripts.

8. Your rights

You can access and correct your data in the app, export reviews from the source platforms, and delete your account at any time. For any other request — including access, correction, or objection — email [email protected].

9. Administrator access

A small number of ManageBiz staff can access accounts to provide support and keep the Service running. Every administrative action, including viewing or changing an account on a customer's behalf, is recorded in an audit log.

10. Children

The Service is intended for businesses and is not directed at children under 18.

11. Changes

We'll update this page when our practices change and note the date above. Material changes will be announced by email or in the app.

12. Contact

Questions about this policy: [email protected].