Privacy Policy

Last updated: 2026-06-03

Who we are

Valundis provides AI-assisted customer-feedback analysis and draft response generation for local businesses. For any privacy question, contact support@valundis.com.

What we collect

We collect: (a) your account email address and authentication tokens when you sign in with Google or by email magic link; (b) the Google Business Profile location identifiers you choose to connect; (c) public reviews retrieved from the Google Business Profile and Places APIs for your connected locations; (d) the AI-generated analysis and reply drafts we compute from those reviews; (e) standard server logs (IP address, request time, user agent) for security and abuse prevention.

How we use it

We use this data solely to provide the service: pulling and analyzing your reviews, generating draft replies for you to approve, sending you weekly digests and alerts, and processing your subscription. We do not sell your data. We do not use your reviews to train AI models.

How we protect it

OAuth tokens are encrypted at rest with Fernet. All traffic uses TLS. Magic-link tokens are stored only as SHA-256 hashes, never in plain text. Access to production data is limited to the engineering team.

Retention

Demo data generated from anonymous lander submissions is retained for 7 days as an active report, then anonymized and kept for up to 30 days for aggregate analytics, after which it is hard-deleted. Account data is retained while your account is active and deleted within 30 days of account closure.

Your rights

You may request access to, correction of, or deletion of your personal data at any time by emailing support@valundis.com. We respond within 30 days.

Third-party processors

We use Google (Business Profile API, Places API, OAuth), OpenAI (review analysis and reply drafting), Render (hosting), and Paddle (billing). Each processes your data only as needed to deliver the service.