Privacy Policy
Last updated: 15 August 2026
This Privacy Policy explains how Truewidgets ("Truewidgets", "we", "us") collects, uses, and protects information when you use our website and services (the "Service") — the review widgets, dashboards, and the optional Google Business Profile connection. By using the Service you agree to this Policy.
1. Information we collect
- Account information — your name, email address, and a securely hashed password when you create an account.
- Business content you provide — the business names, locations, logos, colours, and widget settings you add.
- Google account data (only if you connect Google Business Profile) — see Section 4.
- Payment information — if you subscribe to a paid plan, payments are processed by Stripe. We receive limited billing details (plan, status, last four digits, country); we never see or store your full card number.
- Usage & device data — basic logs, IP address, browser type, and aggregate widget impression/click counts used to operate and improve the Service.
- Cookies — a first-party session cookie to keep you signed in. We do not use third-party advertising cookies.
2. How we use information
- To provide, maintain, and secure the Service and your account.
- To pull, cache, and display your reviews and business information inside your widgets.
- To process subscriptions and prevent fraud and abuse.
- To respond to support requests and send essential service notices.
- To understand aggregate usage so we can improve features and performance.
3. Legal bases
Where applicable law (such as the GDPR) requires it, we process your information to perform our contract with you, to comply with legal obligations, for our legitimate interests in operating and securing the Service, and — where required — with your consent (for example, when you connect your Google account).
4. Google user data
If you choose to connect your Google Business Profile, you authorise us through Google's OAuth consent screen using the https://www.googleapis.com/auth/business.manage scope. With your authorisation we access, on your behalf, only the data needed to provide the Service:
- the list of Business Profile accounts and locations you manage;
- your reviews and star ratings (to display them in your widget and let you reply);
- your business information (categories, description, hours, phone, website, address);
- your services and prices, local posts, and profile photos — so you can view and manage them from your dashboard.
We store an encrypted Google refresh token so the connection keeps working, and a cache of the reviews and profile fields you display. You can disconnect at any time from your dashboard or at myaccount.google.com/permissions, which revokes our access.
Limited Use disclosure. Truewidgets' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it except (a) with your consent, (b) for security or to comply with law, or (c) where the data is aggregated and anonymised.
5. How we share information
We do not sell your personal information. We share it only with:
- Service providers (subprocessors) that run the Service on our behalf — our hosting providers (Vercel for the website, our application host for the app and database), Stripe for payments, and Google for the Business Profile connection you enable.
- Legal and safety — where required by law, or to protect the rights, safety, and security of Truewidgets, our users, or the public.
- Business transfers — if Truewidgets is involved in a merger, acquisition, or asset sale, subject to this Policy.
6. Data retention & deletion
We keep your information for as long as your account is active or as needed to provide the Service. You can delete your account at any time from your dashboard or by contacting us; we will delete or anonymise your personal information within a reasonable period, except where we must retain it to comply with legal obligations. Disconnecting Google deletes the stored Google token and cached Google data.
7. Security
We protect your information with encryption in transit (HTTPS), encryption of sensitive tokens at rest, hashed passwords, and access controls. No method of transmission or storage is completely secure, but we work to protect your data and to promptly address any issues.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at the address below. You also have the right to complain to your local data protection authority.
9. International transfers
We may process and store information in countries other than yours. Where we transfer personal information internationally, we take steps to ensure it receives an adequate level of protection.
10. Children
The Service is for businesses and is not directed to children under 16, and we do not knowingly collect their personal information.
11. Changes to this Policy
We may update this Policy from time to time. We will post the new version here and update the "Last updated" date above; material changes will be communicated where appropriate.
12. Contact us
Questions about this Policy or your data? Email hello@truewidgets.com.