Privacy Policy

Stacking Stars is a review and reputation management platform operated for local businesses. Our clients are businesses that hire us to help them request, monitor, and respond to customer reviews. This policy explains what information we handle, why we handle it, and the choices available to you.

Questions about this policy or your data can be sent to hello@stackingstars.com.

From our business clients: business name, locations, contact details, branding assets, and billing information needed to provide the service.

Customer contact lists:our clients upload contact information for their own customers (typically name, email address, and phone number) so we can send review requests on the client's behalf. Clients confirm they have a lawful basis to share these contacts. We use contact lists solely to provide the service to that client. We never sell contact data or use it to market to those contacts ourselves.

From review page visitors: when a customer visits a review request page, we record page activity such as views and button clicks. If a customer submits private feedback, we collect the name, contact details, and message they choose to provide, and deliver it to the business.

Public review data:we collect publicly available Google reviews for our clients' business listings to power review monitoring, reporting, and analytics.

Some features connect to Google Business Profile through Google's APIs. When an authorized manager of a business connects their Google account, we receive their Google account email address and access to the Google Business Profile locations they manage, including the listing's reviews and review replies.

We use this access only to:

• show the connected business's locations so they can be linked in our dashboard,
• read the listing's reviews to display them to the business and its agency team, and
• post, update, or delete owner replies to reviews at the business's direction.

Authorization tokens are stored encrypted at rest and are used only to make the API calls described above. Review text may be processed by an AI provider to suggest a draft reply, and a human always reviews and approves any reply before it is posted. AI providers are not permitted to train their models on this data. Connected accounts can be disconnected at any time from our dashboard or from the user's Google Account security settings, which revokes our access.

Stacking Stars' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Sending review request emails on behalf of our clients.
• Displaying reviews, feedback, and performance reporting to each business.
• Routing private customer feedback to the business it concerns.
• Posting owner replies to reviews when a business approves them.
• Operating, securing, and improving the platform.

We do not sell personal information. We do not use customer contact lists for our own marketing.

We rely on a small set of service providers to run the platform: cloud hosting and database infrastructure, email delivery, payment processing, review data collection, email address verification, and AI-assisted drafting. Each provider receives only the data needed to perform its function and may not use it for other purposes.

Every review request email includes an unsubscribe link. Unsubscribed, bounced, and complained addresses are suppressed and never emailed again on behalf of that business.

We keep information for as long as needed to provide the service to the relevant business. When a business ends its relationship with us, or when deletion is requested by a business or an individual whose data we hold, we delete the associated data unless we are required to retain it for legal or accounting reasons. To request deletion, email hello@stackingstars.com.

If we make material changes to this policy, we will update this page and revise the effective date above.