Privacy Policy

Product: ReviewPeak — Google Review Replies in One Click (Chrome extension)
Operated by: TrueCraft Labs
Contact: thetruecraftlabs@gmail.com
Last updated: 15 October 2026

This policy explains what information our Chrome extension (the "Extension") and its backend service (together, the "Service") collect, why, who it is shared with, and the choices you have. We have written it in plain language and we collect as little as we reasonably can.

1. What the Extension does

The Extension helps a business owner reply to Google reviews. When you click the generate button, the Extension sends the review you are replying to to our server, which uses an AI model to draft a suggested reply. You always review the draft and post it yourself — the Extension never posts a reply, and we never access your Google account or your Google Business Profile.

2. Information we process

Review content you submit. When you generate a reply, the following is sent to our server:

• The text of the review you are replying to
• The reviewer's name as shown on the review, and the review's star rating
• Your business name, your chosen reply tone, and (optionally) your business phone number, if you entered them in the Extension's settings

Google reviews are public posts. Please do not paste private information (for example, patient details or payment information) into the Extension beyond what appears in the public review.

License and usage data. To operate the credit system, our server stores your license key, the business name attached to it, and your remaining reply-credit balance, and processes a request each time you generate a reply.

Free-trial claims. If you claim a free trial inside the Extension, the Extension generates a random install identifier on your device and our server stores that identifier together with the trial license key it issues — no email address, name, or account is needed or collected. To limit trial abuse we also keep, for the current day only, a one-way hashed form of the network address a claim came from; the raw network address is never stored, and the hash cannot be used to contact or identify you. Trial credits expire 14 days after the claim.

Settings stored on your device. Your license key, business name, phone number, and tone preference are stored locally in your browser using Chrome's storage API so you don't have to re-enter them. This local data is not sent anywhere except as described above when you generate a reply.

What we do NOT collect. We do not collect your Google password or account credentials, your browsing history, or the contents of pages you visit. The Extension only activates on Google review pages, and it reads review text from the page only when you use its in-page reply button. We do not run advertising trackers or analytics in the Extension.

3. How your review content is used — AI processing

To generate a draft reply, the review content described in Section 2 is sent from our server to Google's Gemini API, which produces the suggested reply text. The reply is returned to you and is not published by us.

Important disclosure about the Gemini free tier. We currently run on the free tier of the Gemini API. Under Google's terms for unpaid API services, Google may use content submitted to the free tier — including review text sent through our Service — to improve Google's products and services, and human reviewers at Google may read it in that process. Because Google reviews are already public, we consider this acceptable for our launch phase, but you should know it before using the Service.

Once the Service earns revenue, we will switch to the paid Gemini tier, under which Google does not use submitted content to improve its products. We will update this policy when that switch happens.

Apart from the Gemini API processing described here, we do not use your review content to train our own models (we have none), and we never sell your information.

4. Service providers we share data with

• Google (Gemini API) — receives the review content needed to generate a reply, as described in Section 3.
• Our hosting and credit-store providers — our server and license/credit database are hosted by third-party infrastructure providers, who process license and usage data on our behalf.
• Gumroad — if you buy a credit pack, payment is handled by Gumroad as merchant of record. We do not receive or store your card details; Gumroad's own privacy policy covers the purchase.

We may disclose information if required by law. We do not share your information with anyone else, and we never sell personal data.

5. Retention

• Review content: our server processes review text transiently to generate your reply. We do not maintain a database of your reviews or of the replies generated.
• License and credit records: kept for as long as your license is active, so your remaining credits stay available to you (credits do not expire), and for a reasonable period afterwards for accounting and fraud prevention.
• Trial claim records: the install identifier and its issued trial key are kept for as long as the Service offers free trials, because the one-trial-per-device rule depends on them; the hashed network counters are kept for one day only. You can ask us to delete your trial record (see Section 6); a deleted record means that device could claim a trial again in future.

6. Your choices and rights

• You can stop using the Extension at any time and uninstall it; uninstalling removes the settings stored on your device.
• You can ask us what license/usage data we hold for your key, and ask us to delete it, by emailing thetruecraftlabs@gmail.com. Deleting your license record also deletes any remaining credit balance attached to it.
• Depending on where you live, you may have additional rights (access, correction, deletion, portability) under laws such as the GDPR or CCPA. We honour deletion and access requests from all users regardless of location; email us and we will respond within 30 days.

7. Security

Traffic between the Extension and our server is encrypted in transit (HTTPS) in production, license keys are checked on every request, and generation volume is rate-limited per license. No system is perfectly secure, but we take reasonable measures proportionate to the limited data involved.

8. Children

The Service is a business tool and is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect data from children.

9. Changes to this policy

If we change how data is handled — including the switch from the Gemini free tier to the paid tier — we will update this page and change the "Last updated" date above. Material changes will be noted in the Extension's store listing as well.

10. Contact

TrueCraft Labs
Email: thetruecraftlabs@gmail.com
Postal: Sector G-9 Post Office, Islamabad, Pakistan