Privacy Policy

1. Introduction

Moffu ("we", "our", or "us") operates the Moffu platform, a SaaS service that allows business owners to manage and respond to Google Business Profile reviews using AI-generated draft replies. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and business details.

Google Business Profile Data

When you connect your Google account, we request access to your Google Business Profile using OAuth 2.0. With your explicit authorization, we access:

• Your Google Business Profile locations and business information
• Customer reviews associated with your business locations
• The ability to post replies to reviews on your behalf

We store access tokens securely on our servers to maintain the integration. You can revoke access at any time by disconnecting your Google account from our platform or through your Google Account security settings at myaccount.google.com/permissions.

Usage Data

We collect information about how you interact with our service, including pages visited, features used, and actions taken within the platform.

3. How We Use Your Information

• To provide and operate the Moffu service
• To fetch and display your Google Business Profile reviews
• To generate AI-powered draft responses to reviews using your Brand Brain settings
• To publish your approved replies to Google on your behalf
• To send transactional emails (account confirmation, billing receipts)
• To improve our AI models and service quality
• To comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Google LLC — to authenticate your account and interact with the Google Business Profile API on your behalf
• Supabase — our database and authentication infrastructure provider
• Stripe — our payment processor for billing and subscription management
• AI providers — review content may be sent to AI services (such as Google Gemini) to generate draft replies; these providers process data under their own privacy policies
• Legal authorities — when required by law or to protect our legal rights

5. Data Retention

We retain your account data and review history for as long as your account is active. You may request deletion of your data by contacting us at support@moffu.com. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

6. Security

We implement industry-standard security measures including encryption at rest and in transit, Row-Level Security (RLS) in our database, and regular security reviews. OAuth tokens are stored encrypted and are never exposed to client applications. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for processing (including Google account access)
• Data portability — receive a copy of your data in a structured format

To exercise these rights, contact us at support@moffu.com.

8. Cookies

We use essential cookies for authentication and session management. We may use analytics cookies to understand usage patterns. You can manage cookie preferences through your browser settings. See our Cookie Policy for details.

9. Children's Privacy

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice on our platform. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us: