Your data
You connect with Google's own sign-in. StellaQuin never has your Google password; Google gives it a permission you can take away at any time, from StellaQuin (Disconnect on the Locations page) or from your Google account's Security → Third-party apps.
What StellaQuin asks Google for: to read your locations and their reviews, and to post the replies your people write. Nothing else about your Google account is read or changed.
Reviews: the 30-day window
Google's rules for apps like StellaQuin allow review content (the reviewer's name and words) to be kept for at most 30 days. So:
- The inbox shows the last 30 days. The reviewer's name and words are stored encrypted and deleted 30 days after they were fetched. Reviewer photos are shown from Google, never copied.
- Reports ask Google for the period you choose at the moment you ask, and keep nothing.
- Reviews older than 30 days stay on Google, where you can always see them.
- Connected systems receive counts, stars and timings, never review text or names.
StellaQuin's own records
These are yours, not Google's, and are kept for as long as you like: who replied and when, flags, team notes, assignments, approval history, saved replies, settings, and the Activity log.
Disconnecting
Disconnect on the Locations page removes the Google connection and deletes every location and review StellaQuin stored from Google. Your replies stay on Google (they're part of your profile), and StellaQuin's own records stay here. Connecting again starts fresh.
What never happens
- Nothing you or your customers write is sold, used for advertising, or used to train anything.
- StellaQuin never posts a reply nobody wrote, and never contacts your customers.
- If you connect the optional AI advisor, a review goes to the provider you chose, under your key, only when a person presses a button (see The AI advisor). Nothing else leaves StellaQuin.
Sign-in security
Passwords are stored as hashes that can't be reversed. Two-factor sign-in is available to everyone (see Accounts and your team). Sign-in links and codes work once and expire. Repeated wrong passwords lock sign-in from that connection for a while.
The full details are in the privacy policy and the terms.