Kindfollow helps independent restaurateurs reply to their online reviews. This policy explains, in plain language, which personal data we process, why, on what legal basis, for how long, with whom, and which rights you have under the General Data Protection Regulation (GDPR).
1. Who is responsible
The data controller is Amine Boutahar, sole proprietor (entrepreneur individuel), SIRET 934 629 726 00019, 30 rue Demarest, 95170 Deuil-la-Barre, France. Contact: hello@kindfollow.com.
2. Data we collect
- Account: your email address, your interface language, the date you signed up, your sign-in sessions. If you sign in with Google, we receive your email address from Google and nothing else.
- Venue profile: the name, type, city and country of your venue, its default language, tone, signature, house rules, signature dishes and team first names if you choose to enter them.
- Reviews you paste: the text of the review, its platform, rating and the reviewer's first name when it appears in the review. Reviews are public by nature: they were published on a review platform before you pasted them.
- Generated replies: the three replies produced for each review, the one you selected and any edit you made.
- Google Business Profile connection (All platforms plan, once you connect it): the identifier and name of the listing you pick, the reviews of that listing (reviewer name, rating, text, dates) and the replies you publish through Kindfollow, plus an authorisation token issued by Google, stored encrypted. See section 8.
- Usage events: technical events such as sign-up, onboarding completed, reply generated, copied or edited, quota reached, pricing viewed, checkout started, subscription changes. They contain no review text.
- Billing: your plan, your Stripe customer and subscription identifiers, renewal and cancellation dates. Payment data (card number, expiry, security code) is processed by Stripe and is never stored by Kindfollow.
3. Why we process it and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Providing the service: account, venue profile, generating and storing replies | Account, venue profile, reviews, replies | Performance of the contract (Terms of Service) |
| Billing and subscription management | Email, plan, Stripe identifiers | Performance of the contract; legal obligations (accounting) |
| Security, abuse prevention, fair-use limits | Usage events, sign-in sessions | Legitimate interest (protecting the service and its users) |
| Aggregate usage statistics to improve the product | Usage events, without review text | Legitimate interest |
| Answering your requests | Email, content of your message | Legitimate interest; performance of the contract |
We do not use your data for advertising and we do not sell it to anyone.
4. How long we keep it
Your data is kept for as long as your account exists. You can delete your account at any time from the Account screen: the deletion is complete and immediate. It removes your account, your venue profile, every review and reply, and your usage events. Only invoices and payment records kept by Stripe remain, for the duration required by French accounting law (10 years).
Sign-in links expire after one hour. Waiting-list emails collected on the landing page are deleted once the person has signed up or asks us to.
5. Processors and where the data goes
| Processor | Role | Location |
|---|---|---|
| Supabase | Database and authentication | European Union (Paris region) |
| Vercel | Hosting of the website and application | United States |
| Anthropic | Generation of the replies (language model) | United States |
| Stripe | Payments, subscriptions, invoices | United States and European Union |
| Resend | Sending transactional emails (sign-in links) | European Union |
| Google (Business Profile API) | Reading the reviews of the listing you connected and publishing the replies you choose to publish | United States |
| Google (Google Analytics 4, Google Ads) | Audience and campaign measurement, only after your consent in the EEA and the UK | United States |
Transfers outside the European Union are governed by the European Commission's Standard Contractual Clauses included in each provider's data processing agreement, and, where applicable, by the EU-US Data Privacy Framework.
About the language model: the review you paste and the profile of your venue are sent to Anthropic only to generate your replies. Under the terms of our agreement with Anthropic, this data is not used to train their models. No data from one venue is ever used to generate replies for another.
6. Your rights
You have the right to access your data, to rectify it, to have it erased, to receive it in a portable format, to object to or restrict certain processing. To exercise these rights, write to hello@kindfollow.com from the email address of your account. We answer within one month. You can also delete everything yourself from the Account screen.
If you believe your rights are not respected, you can lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr), or with the authority of your country of residence.
7. Cookies and measurement
Strictly necessary cookies, set without consent: your sign-in session (Supabase), your interface language, your cookie choice, your region for the consent banner, and, for 90 days, the campaign that brought you to the site (UTM parameters and Google Ads click identifier), used only to know where our sign-ups come from. Stripe sets its own cookies on its payment pages.
Measurement cookies, set only after your consent if you are in the European Economic Area or the United Kingdom: Google Analytics 4 (audience statistics) and Google Ads (measuring the results of our advertising campaigns: sign-ups, first reply generated, subscriptions). Google's consent mode is configured so that nothing is stored and no signal is sent to Google before you click "Accept". Your choice is kept for six months and can be changed at any time via the "Cookies" link in the footer. Outside the EEA and the UK, these tools are enabled by default and you can refuse them the same way. Google may process this data in the United States under the EU-US Data Privacy Framework and the Standard Contractual Clauses.
We also use Vercel Web Analytics, a cookie-free audience measurement by our host: it counts page views from a hashed, non-reversible identifier that is discarded at the end of the day, without consent banner and without storing anything on your device.
We use no other tracker and share no data with advertising networks other than these campaign measurements.
8. Google Business Profile connection and Google user data
If you are on the All platforms plan, you can connect your Google Business Profile listing from the Venue screen. You are sent to Google, which asks you to authorise Kindfollow with the "business.manage" permission. Kindfollow then uses this authorisation for two things only:reading the reviews of the single listing you picked (reviewer name, rating, text, dates) about every 30 minutes, and writing the replies you explicitly publish by clicking "Publish to Google". Kindfollow never edits your listing, never posts, uploads or deletes anything else, and never reads other listings of your account.
The authorisation token is stored encrypted with a dedicated key held only on our servers; the reviews are stored with your venue like the reviews you paste. You can disconnect at any time from the Venue screen: Kindfollow revokes its authorisation at Google and deletes the token immediately. You can also revoke it from your Google account (Security > Third-party apps). Deleting your account deletes everything.
Limited use. Kindfollow's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the features described above, is never sold, never used for advertising, and never shared with humans except with your consent, for security purposes or where required by law. The review text is sent to Anthropic solely to generate your replies, under the same conditions as the reviews you paste (section 5).
9. Security
Data is encrypted in transit (HTTPS) and at rest. Access to the database is restricted by row-level security rules so that each user can only read their own data. The keys of our providers never leave our servers.
10. Changes
We may update this policy when the service evolves. The date at the top of this page tells you when it was last changed. For a significant change we will notify you by email.