Kreativität Works

Review Intelligence

Privacy policy

Effective date: 17 October 2026 · Application operator and technical contact: Kreativität Works · [email protected]

This policy describes the private Review Intelligence application. It explains what data the application accesses, why it uses that data, how it stores and shares it, and how to request help or deletion. The organization using a workspace controls its store selection, authorized team members and optional processing settings. Contact us to identify the organization responsible for a particular workspace or review.

1. Data we access

The Google permission requested is https://www.googleapis.com/auth/business.manage, together with sign-in/email scopes. It supports store discovery, review collection and optional owner replies. The application does not use this connection to read Gmail messages, Drive files or Calendar events.

2. What we use the data for

We use the data to maintain an authorized review archive, track changes, display customer-feedback trends, produce source-backed analysis and translations, support human screening, and prepare or deliver owner replies when explicitly enabled. Source text remains the evidence for analysis; an AI assessment is not a finding about a person or proof of factual accuracy.

The application does not sell Google user data, use it for advertising or data brokering, or use it to train general-purpose AI models. Data is not used for unrelated profiling, credit decisions or surveillance.

3. Sharing and optional AI processing

Workspace data is available to its authorized users and integrations under the permissions configured by the workspace operator. If an operator enables AI analysis, translation or reply generation, review text, ratings and relevant business context are sent to OpenRouter and the selected model provider to perform that feature. Analysis can include candidate names from an authorized staff directory. Google OAuth credentials are not included in model prompts.

Processing locations and provider retention depend on the selected service and configuration. Processing is requested only to deliver the selected feature. Workspace operators must select providers and data-handling settings compatible with this policy and Google’s Limited Use requirements, and review their terms before enabling those features.

Owner replies are sent to Google and become public when a publishing feature is enabled and a delivery is performed. Publishing access is separate from read-only integrations. We may also disclose data where required by law or necessary to investigate security incidents.

4. Storage, retention and security

Review data is stored in a workspace-specific database and retained with source history to support the archive and auditing. Disconnecting Google preserves this archive. There is no automatic deletion period for the archive; an authorized organization can request deletion when the data is no longer needed. Audit and delivery records, including uncertain-delivery holds, may need to be retained to prevent duplicate replies, investigate incidents or meet an applicable obligation. Backups may retain earlier copies until they are replaced under the operator’s backup process.

Access is restricted to authorized accounts and services. Google credentials and saved AI-provider settings are stored encrypted; application passwords and MCP access keys are stored as hashes. The application uses authenticated connections, restricted database accounts, workspace isolation and audit records. These safeguards do not constitute a guarantee against every security incident.

5. Disconnecting, revoking access and requesting deletion

An authorized operator can disconnect the Google connection in the application. You can also revoke the grant in Google Account connections. Revocation stops future authorized access but does not automatically erase data already archived.

For access, correction, deletion or other privacy requests, email [email protected], identifying the relevant workspace or store and the review identifier when available. Do not send passwords, tokens or API keys. We will verify authority and route the request to the responsible organization, explaining any data that must be retained and why.

6. Google API data

Review Intelligence’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google authorization can be withdrawn by the user or invalidated by Google; it is not a guarantee of permanent access.

7. Cookies and changes to this policy

The private application uses session cookies needed for authentication. These informational pages contain no advertising, tracking scripts or analytics. Other pages on the Kreativität website may have their own features and disclosures.

We will update this policy if data use changes. New uses of Google data will be disclosed and consent requested where required before they are introduced. The effective date above identifies this version.

Resumo em português

A aplicação conserva dados das contas e lojas autorizadas, avaliações e respostas, histórico e registos técnicos. A análise, tradução e geração de respostas por IA são opcionais e podem enviar texto das avaliações e contexto relevante para o OpenRouter e o fornecedor do modelo escolhido. A ativação de respostas permite a sua publicação na Google. Os dados não são vendidos nem usados pela aplicação para publicidade ou treino de modelos generalistas. Desligar a Google não apaga o arquivo; pedidos de acesso, correção ou eliminação devem ser enviados para [email protected].