Privacy Policy

At OvationAI, we take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have as a client.

This policy applies to businesses ("Clients") that subscribe to OvationAI. It does not apply to the end customers of our Clients (e.g., the people who leave reviews about your business).

1. Information We Collect

1.1 Business Information

• Business name, address, phone number, and website URL
• Business owner name and contact email
• Business category and Google Business Profile URL
• Subscription tier and billing information

1.2 Google Account Access (OAuth)

To connect your Google Business Profile, you authorize OvationAI via Google OAuth. This grants us access to your GBP listing(s), reviews posted to those listings, and the ability to post responses on your behalf. We request only the minimum permissions necessary. We do not access your Gmail, Google Drive, or any other Google service.

1.3 Customer Contact Data

If your plan includes SMS automation, you may provide customer contact information (names and phone numbers) to send review requests. This data is stored in your dedicated GoHighLevel sub-account.

1.4 Review Data

We collect and process the content of Google reviews posted to your business listing — including reviewer names, ratings, review text, and dates — for the purpose of generating and posting AI responses.

1.5 Usage and Technical Data

We may collect basic technical data about how you use our platform (login activity, features used, support interactions) to improve the service and troubleshoot issues.

2. How We Use Your Information

We use the information we collect to:

• Provision your GHL sub-account — set up and configure your dedicated workspace
• Connect your Google Business Profile — authorize and maintain the API connection to monitor reviews and post responses
• Power AI review response automation — generate and publish responses to your Google reviews
• Run SMS review request campaigns — send automated texts to your customers requesting reviews (if included in your plan)
• Fulfill A2P 10DLC registration — complete carrier registration required for SMS delivery
• Communicate with you — send onboarding instructions, billing notifications, and support responses
• Improve the service — analyze usage to make OvationAI better

We do not use your data to train general AI models, advertise to you through third parties, or build consumer profiles for marketing purposes.

3. Third-Party Service Providers

We share your data with the following providers only to the extent required to deliver the service:

We do not sell your data to any third party. We do not share your data with advertising networks, data brokers, or any party not listed above, except as required by law.

4. Data Security

We take reasonable technical and organizational measures to protect your data, including encrypted data transmission (HTTPS/TLS), access controls limiting who within OvationAI can access client data, and secure OAuth token handling. No security system is perfect. If you suspect a data breach, contact us immediately at hello@getovationai.com.

5. Data Retention

• During your subscription: Your data is retained in your active GHL sub-account.
• After cancellation: Your GHL sub-account and associated data are retained for 30 days, then permanently deleted.
• Export requests: You may request a data export at any time during your subscription or within 30 days of cancellation by emailing hello@getovationai.com. We will respond within 5 business days.

6. Your Rights

Right to Access

You can request a copy of the data OvationAI holds about your business at any time.

Right to Correction

If your business information is inaccurate, contact us and we'll update it promptly.

Right to Deletion

You may request deletion of your business data at any time by canceling your subscription and submitting a deletion request. We will complete deletion within 30 days.

Right to Withdraw Google Access

You may revoke OvationAI's access to your Google Business Profile at any time through your Google account settings at myaccount.google.com. Note: revoking Google access will disable OvationAI's ability to monitor and respond to reviews on your behalf.

CCPA (California Residents)

California residents have the right to know what personal data we collect, request deletion of personal data, opt out of the sale of personal data (we do not sell data), and non-discrimination for exercising these rights. Submit CCPA requests to hello@getovationai.com.

GDPR (EU/EEA Residents)

OvationAI is a U.S.-based service primarily serving U.S. businesses. EU/EEA residents may have additional rights under GDPR including access, rectification, erasure, and data portability. Contact us to exercise these rights.

7. Cookies and Tracking

Our website may use basic cookies and analytics tools to understand how visitors use the site. We do not use tracking cookies for advertising purposes. You can disable cookies in your browser settings at any time.

8. Children's Privacy

OvationAI is a B2B service for businesses, not individuals under 18. We do not knowingly collect personal data from minors.

9. Changes to This Policy

We may update this Privacy Policy with at least 14 days' email notice before material changes take effect. The "Last Updated" date at the top reflects the current version.

10. Contact Us

OvationAI
Email: hello@getovationai.com
Website: getovationai.com
Response time: within 3 business days.