Privacy policy

Ayrword helps businesses ask their customers for Google reviews by text. This page explains what personal information we handle and why. We are [Your full name], trading as Ayrword, North Ayrshire, Scotland [contact email].

Two kinds of people

Business users sign up for Ayrword. For their information we are the controller. Your customers are the people a business adds to Ayrword and texts. For their information the business is the controller and we act as its processor, following the business's instructions.

What we collect

• From business users: email address, password (stored securely by our login provider, never in plain text), business name, the Google review link and wording you set, and billing details handled by our payment provider.
• About your customers, added by the business: name, mobile number, the record that the business confirmed it may text them, whether they have opted out, and a history of the review requests sent to them, including whether they opened the review link in the text and whether a reminder was sent. We do not record anything else about what they do on Google.
• Technical data: basic server logs (such as time and IP address) to keep the service secure and working.

Why, and our legal basis

• To run the service you asked for (contract).
• To keep the service secure and prevent abuse (legitimate interests).
• To meet legal obligations such as tax records (legal obligation).

We do not sell personal information, and we do not use customers' numbers for anything except sending the business's requests.

Who we share it with

We use these providers to run Ayrword. Each handles data only for us:

• Supabase: database and login.
• Twilio: sending text messages.
• Render: running the website.
• Namecheap: our domain name and email forwarding.
• [Stripe]: taking payments (once billing is live).
• [Resend or similar]: sending emails (once live).

Some of these providers may process data outside the UK. We rely on appropriate safeguards where that happens. [Solicitor to confirm wording and regions.]

Cookies

We use only the cookies needed to keep you signed in. We do not use advertising cookies. [Update this if analytics are added.]

How long we keep it

We keep business account information while the account is open. A business can remove a customer at any time, which also deletes that customer's request history. When an account is closed we delete its data, except records we must keep by law. [Confirm periods.]

Your rights

You can ask to see, correct or delete your personal information, to restrict or object to how we use it, and to receive a copy. If you are a business's customer, contact that business first; we will help them respond. You can also complain to the Information Commissioner's Office at ico.org.uk.

Text messages and opting out

Every request text carries a personal link that lets the person opt out, and texts sent from a business's own number can also be stopped by replying STOP. Anyone who opts out is not texted again by Ayrword.

Changes

If we change this policy we will update the date above and tell business users about important changes.