Privacy Policy

Who is who

For the business's own account data (name, email, billing), Meteor City LLC decides how the data is used — we are the controller. For the customer contacts a business uploads, the business decides; we only process that data on its instructions, as its service provider.

If you received an email from a business through GossipGarden, that business added you as its customer. Questions about why you were contacted go to the business first; you can always unsubscribe with one click.

What we collect

Only what the service needs:

• Account: your email, password (hashed), business name, postal address, reply-to email, time zone, logo and colours.
• Contacts you add: name, email and optionally phone number, plus whether they unsubscribed.
• Sending records: which request went to whom, when, whether the link was clicked, and any delivery error.
• Billing: handled by Stripe. We store your Stripe customer and subscription ids and your plan status, never card numbers.
• Technical: server logs with IP addresses and browser type, kept briefly for security and debugging.
• Texting consent, if you use the SMS add-on: the customer's phone number, the wording they agreed to, when and how they agreed, and any STOP or HELP reply.

How we use it

We use this data to:

• send the review requests and reminders you schedule, with your business name, logo and postal address;
• record clicks so your dashboard and reports are accurate;
• run your public review page;
• bill you, answer support questions and send service emails such as the weekly digest (which you can turn off);
• keep the service secure and meet legal obligations, including honouring unsubscribes;
• generate the optional AI reply drafts you ask for from review text you paste, and answer your questions through the in-app AI support assistant.

Who we share it with

We share data only with the providers that run the service, under contracts that limit them to our instructions:

• Supabase (database and login), hosted in the United States;
• Cloudflare (hosting and content delivery);
• Resend (email delivery) — it receives recipient addresses and message content in order to deliver them;
• Stripe (payments), which never sees your contacts;
• Anthropic — its Claude AI powers the optional reply-draft helper and the in-app support assistant. When you use them, the text you send (including any review content you paste and your support messages) is sent to Anthropic to generate a reply; Anthropic does not use it to train its models. We never sell personal data and we do not share your contacts with other businesses.
• Twilio (text-message delivery, only when a business switches texting on) — it receives phone numbers and message content in order to deliver them;

Emails sent on a business's behalf

Every email we send for a business names that business, includes its postal address, and has a working unsubscribe link. Unsubscribes take effect immediately and the address is added to a do-not-contact list (a suppression list) so it is not emailed again by mistake.

We do not decide who gets asked based on how a customer might feel about the business: every customer the business adds receives the same request. This follows Google's review policies and the FTC's rule on consumer reviews.

Clicking the review link records the click for the business and then takes you to the review platform. The platform's own privacy policy applies from there.

Texts, where a business has switched them on, name the business, go out only with the customer's recorded consent and only during permitted hours, and stop the moment the customer replies STOP.

How long we keep it

While an account is active we keep its data so the app works, but not for ever: a contact nobody has asked anything of for two years is deleted, and their requests and activity go with them; a support conversation is deleted after a year. When an account is deleted we delete its contacts, requests and settings within 30 days and remove its customer record from Stripe; billing records are kept as long as tax and accounting law requires.

Do-not-contact (suppression) list entries are kept for good, so that somebody who unsubscribed stays unsubscribed — an opt-out that expires is an opt-out that stops working. Server logs are deleted within 30 days and never contain a customer's email address or phone number. A business can download everything it holds about its customers at any time from Settings › Your data.

Security

Data is encrypted in transit and at rest, access is limited to the people and systems that need it, and each business can only ever see its own rows. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.

Your choices and rights

Businesses can view and edit their data in the app and can ask us to export or delete their account. Customers can unsubscribe from any email and can ask the business, or us, to delete their contact record.

Residents of California and other US states with privacy laws may have rights to know, delete and correct personal information and to opt out of sales — we do not sell personal information. Write to us and we will respond within the time the law sets.

Children

GossipGarden is for businesses and their adult customers. We do not knowingly collect data from children under 13.

Changes to this policy

If we change this policy in a way that matters, we will email account holders before the change takes effect and update the date at the top of this page.