Privacy Policy

Rootword is a reputation management service operated by Lindquist Ventures LLC (DBA Rootword), 4988 East Big Rock Drive, Wasilla, AK 99654. This Privacy Policy explains how we collect, use, share, and protect information when you use the Rootword website and application (the "Service"). It applies to our customers (business owners) and to the customer contact data they process through Rootword. Questions? Email founder@rootword.co.

• Account information — your name, email address, and business name.
• Business data from connected Google Business Profile accounts — your business locations, reviews, review replies, and performance metrics.
• Customer contact details you upload or enter to send review requests, including names, email addresses, and phone numbers.
• Payment information processed by Stripe. We never see or store your card numbers.
• Usage and log data — pages visited, actions taken, device and browser information, IP address, and timestamps.

• Fetch and display reviews from your connected platforms.
• Draft and post replies to reviews on your behalf.
• Send review-request emails and SMS messages on your behalf.
• Process billing and manage your subscription.
• Provide customer support and improve the Service.

Rootword's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We request Google Business Profile scopes solely to read your own business locations and reviews and to post replies to those reviews on your behalf. We do not use Google user data for any other purpose.

• We do not sell Google user data.
• We do not use Google user data for advertising.
• We do not transfer Google user data except as necessary to provide or improve the user-facing features of the Service, to comply with applicable law, or as part of a merger, acquisition, or sale of assets — and in that case only with notice to affected users.
• We do not allow humans to read Google user data except with your explicit consent for specific data, as necessary for security purposes such as investigating abuse, or to comply with applicable law.

Revoking access. You can revoke Rootword's access to your Google account at any time using the Disconnect button on the Reviews page in the app, or from your Google Account permissions page at myaccount.google.com/permissions. Revoking access deletes the Google OAuth tokens we store and the associated Google account data (connected account and location identifiers) from our systems.

We share data with the following service providers to operate Rootword:

• Supabase — database and authentication.
• Stripe — payment processing.
• Resend — transactional email delivery.
• Twilio — SMS delivery.
• Anthropic — AI drafting of review replies.
• Apify — review collection from public review sites.

We retain your data for as long as your account is active and as needed to provide the Service or comply with legal obligations. You may request deletion of your account and associated data by emailing founder@rootword.co. We honor verified deletion requests within 30 days.

Data is encrypted in transit using TLS and encrypted at rest by our infrastructure providers. We apply role-based access controls and row-level security so that each account can only access its own data, and we limit internal access to personnel who need it to operate or support the Service.

Rootword sends SMS messages only to customer contacts for whom the business owner has confirmed express consent to receive text messages. Recipients can reply STOP at any time to opt out and HELP for help. Message and data rates may apply. Message frequency varies.

The Service is not directed to anyone under 18 years of age, and we do not knowingly collect personal information from children.

You may request access to, correction of, deletion of, or a portable copy of your personal information by emailing founder@rootword.co.

California residents have additional rights under the CCPA/CPRA, including the right to know what personal information we collect and how it is used and disclosed, the right to request deletion or correction, and the right to non-discrimination for exercising those rights. We do not sell or share personal information as those terms are defined under California law.

We use cookies and similar local storage technologies that are necessary to keep you signed in, remember your preferences, and understand basic usage of the Service. You can control cookies through your browser settings, though disabling them may prevent you from signing in.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, notify account holders by email. Continued use of the Service after an update constitutes acceptance of the revised policy.

Lindquist Ventures LLC (DBA Rootword)
4988 East Big Rock Drive, Wasilla, AK 99654
founder@rootword.co