KIRTELO · INVITED BUSINESS BETA
Kirtelo product privacy notice
Effective 27 October 2026 · Version 1.0
Kirtelo operates Kīrtelo, a business workspace for managing authorized business locations, working on customer feedback and understanding review trends. Contact us at hey@kirtelo.com about privacy, access, correction, deletion or disconnection.
This notice describes the current invited beta. It covers the authenticated product and its Google Business Profile connection. The separate prelaunch signup notice covers registering interest on our marketing website. A public demonstration uses invented businesses and reviews; its features and sample results do not establish what is available in your connected workspace.
Information we handle and why
| Information | How we use it |
|---|---|
| Account information, such as your name, email address, identity-service user identifier and email verification status | Sign you in, secure your account, administer invitations and determine workspace membership. |
| Business and workspace information, including organization and location labels, team roles, services, improvement actions, follow-up cases and notes | Provide the workspace and let authorized colleagues coordinate work. These records may contain personal information that your business chooses to enter. |
| Google authorization credentials and integration information | Maintain the connection you authorize and identify the Business Profiles you choose to use. Credentials are encrypted server-side and are not exposed to the analysis runner. |
| Live Google Business Profile information, including profile selection information, review text, reviewer display names, ratings, dates and existing business replies | Show authorized profiles and reviews, support individually approved replies and calculate reporting. We do not maintain a permanent raw review archive. |
| Saved reply drafts, review references, assignments and workflow status | Let authorized teammates prepare and approve responses. Drafts are encrypted and temporary. |
| Aggregate rating and analysis snapshots, including counts, model versions and analysis dates | Show your business its review trends and the coverage and limits of an analysis. These snapshots exclude review text, reviewer identities and stored individual model scores. They remain associated with your business workspace. |
| Access, security and operational information, including session information, relevant audit events and technical request information | Protect the service, enforce permissions, diagnose failures and investigate misuse. |
| Information you send to support | Answer your request and manage the support relationship. Please do not send passwords, authorization tokens or unnecessary customer information. |
We use this information to provide, secure and support the product you request. We do not sell Google user data or use it for advertising, advertising targeting or training general-purpose or shared AI models. We do not use connected reviews to train Kirtelo's review classifiers.
Connecting Google and controlling actions
You choose whether to connect Google. Kirtelo requests Google's Business Profile management permission because the beta combines authorized profile access with an optional manual reply workflow. Google's permission screen describes the scope available to the connection; Kirtelo's own controls limit the actions available inside the product.
Connecting Google does not automatically authorize reply publishing or private review analysis. The beta uses separate product controls for those activities. A person with the appropriate workspace permission must approve each reply publication, replacement or deletion. Kirtelo does not automatically post review replies.
Where enabled by an authorized administrator, Google review-change notifications and background rating refresh can update stored aggregate reporting. These controls are separate from the operator-run text analysis. You can pause the supported background refresh workflow in Connections.
Your Google data is used to provide the authorized, user-facing Business Profile features described here. It is not used to build a separate review database for other customers. Kirtelo's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements where applicable.
Private analysis and its limits
The current beta analyzes supported English review text using models run on a Kirtelo-controlled computer. An authorized analysis job retrieves a limited review sample, processes it in temporary memory and returns aggregate counts. The runner does not save or log the review input. It does not receive Google authorization credentials or reviewer display names.
Kirtelo currently does not send connected review text to Gemini or another external AI inference API. Translation and hosted reply generation are not enabled in this beta. If we introduce a new provider or materially different use of Google data, we will update the disclosures and obtain the necessary authorization before enabling that processing.
Analysis is advisory. Some written reviews remain unclassified because of unsupported language, input limits, ambiguity, missing text or insufficient confidence. Small groups are suppressed. Counts and themes may overlap and do not establish facts about an individual customer or employee. The model and analysis date shown with a snapshot help you interpret its results.
Authorized Kirtelo operators may process connected data where necessary to run the requested analysis or support the service. Access is limited by the task and workspace permissions. We do not promise that operating the service involves no human access.
Who receives information
Authorized members of your business workspace can see the records and locations their roles permit. Your workspace administrators manage membership and access. Choose carefully what personal information you put into internal notes or support messages.
Kirtelo uses Cloudflare for application hosting, traffic handling and related infrastructure; Neon for the application database; and WorkOS for authentication and identity services. These providers process information needed for their functions. For example, WorkOS handles sign-in information, while hosting and database providers process the information the application handles. Infrastructure providers may maintain their own security and operational logs under their terms.
Google receives the requests needed to connect and operate your authorized Business Profile features, and receives any business reply you explicitly approve for publication. A published reply is visible through Google according to Google's service rules.
The separate marketing signup workflow uses Cloudflare Turnstile and Resend for signup protection and email communication. It is not a route for sending connected review text to an AI provider.
We may disclose information when reasonably necessary to comply with applicable legal obligations, respond to lawful requests, protect rights and security, or address fraud or misuse. Any additional service provider handling product data must support an appropriate disclosed service purpose.
Storage and deletion
| Information | Current beta treatment |
|---|---|
| Live raw reviews and reviewer display names | Retrieved as needed; review content in the browser stays in page memory rather than a persistent browser review cache. The application does not keep a permanent raw review archive. |
| Private analysis input | Temporary processing in the local runner; no saved review input or raw-input diagnostic log. |
| Saved reply drafts and associated workflow | Encrypted; expire no later than 29 days after creation. Editing does not restart that period. Relevant integration teardown removes them. |
| Google profile mappings and temporary integration metadata | Time-limited. Profile mappings expire after 29 days and require confirmation again. |
| Google connection credentials | Encrypted while the authorized connection is active; removed when the connection is disconnected or detected as revoked. |
| Aggregate business reporting | Can remain after Google disconnection because it contains no reconstructible review text or reviewer identity. It is still linked to your business and is not a claim that all workspace information is anonymous. |
| First-party account, workspace, support and security records | Retained as needed to provide the service, handle requests, protect the service and meet applicable obligations. Contact us for an account or workspace deletion request; the beta does not offer a universal instant account-deletion control. |
Use Connections to disconnect Google, or revoke Kirtelo's access in your Google Account. Kirtelo removes the associated connection and temporary integration workflow when disconnection is completed. External revocation is detected through connection checks or a subsequent request and may not be observed instantly. Disconnecting Kirtelo does not delete replies already published on Google or delete your Google Business Profile.
Our application backup procedure excludes Google integration-table contents from new encrypted dumps. Older database snapshots may contain earlier integration information. The pilot recovery procedure keeps such copies isolated, limits their retention to at most 30 days and requires integration-data cleanup before a restored database is exposed. Live deletion does not instantly rewrite historical backup media. These procedures require ongoing operational monitoring.
Security, cookies and location of processing
We use encrypted connections, encrypted Google credentials and reply drafts, secure session cookies, server-side role and location checks, and restricted application database access. Application diagnostics are designed to avoid raw review text and authorization secrets. No service can guarantee absolute security.
Necessary cookies support sign-in, session security and related product functions. The connected review workflow does not store raw review content in localStorage or sessionStorage. This does not mean the service or its infrastructure uses no cookies or operational logging.
The current beta database is hosted in Frankfurt, Germany. Hosting, identity and other service providers may process information in other countries. Your information may therefore be processed outside your country. We assess applicable requirements before expanding processing or the markets we serve.
Your choices and requests
You can use the available workspace controls to manage invitations, roles and connected integrations. You can ask us at hey@kirtelo.com for access, correction, deletion or information about processing. Depending on applicable law and your relationship with the business, you may have additional rights. We may verify your identity and authority before acting on a request. If the request concerns information controlled by your business, we may need to involve its authorized administrator.
Kirtelo is intended for business users and is not directed to children. Please do not enter unnecessary sensitive personal information about customers or employees.
We will update this notice when our practices change. Material changes to connected Google data use will be disclosed before the new use begins, with renewed authorization where required. Updates to this notice will show their effective date.