Your Privacy Matters
At demeterrr, we're committed to protecting your personal information and being transparent about how we collect, use, and safeguard your data.
Last Updated: February 12, 2026
Our Commitment
demeterrr Inc. ("demeterrr," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our customer experience management platform.
We align our practices with the General Data Protection Regulation (GDPR), ensuring your data is handled with the highest standards of protection and transparency.
Key Principle: We will never sell your personal information to third parties. Your data is used solely to provide and improve our services.
Legal Basis for Processing
Contract Execution
Processing your data is necessary to provide our services, manage your account, and fulfill our contractual obligations to you.
Consent
We obtain your explicit consent for marketing communications, optional features, and any data processing beyond service delivery.
Legitimate Interest
We may process data to improve our platform, prevent fraud, ensure security, and enhance user experience - always balanced against your privacy rights.
Definitions
Information We Collect
Contact Information
Name, email address, phone number, company name, and business address provided during account registration and service use.
Usage Data
Information about how you interact with our platform, including pages visited, features used, survey responses collected, and system logs.
Technical Information
IP address, browser type, device information, operating system, and cookies for platform functionality and analytics.
Customer Data
Information about your customers that you upload to our platform, including contact details, survey responses, and feedback data. You remain the data controller for this information.
We do not collect: Sensitive personal data such as health information, financial details (beyond billing), racial or ethnic origin, political opinions, religious beliefs, or biometric data.
How We Use Your Data
We use your information exclusively for the following purposes:
- Providing and maintaining our Services
- Processing your transactions and managing billing
- Sending service-related communications and updates
- Responding to your support requests and inquiries
- Improving platform functionality and user experience
- Preventing fraud and ensuring platform security
- Analyzing usage patterns to optimize performance
- Sending marketing communications (with your explicit consent)
- Complying with legal obligations and enforcing our terms
Security Measures
We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:
- End-to-end encryption for data transmission (TLS/SSL)
- Encrypted storage of sensitive data at rest
- Regular security audits and vulnerability assessments
- Access controls and authentication mechanisms
- Employee training on data protection and privacy
- Incident response procedures with 72-hour breach notification (GDPR)
Important: While we implement robust security measures, no internet transmission is completely secure. We cannot guarantee absolute security but continuously work to protect your data.
Data Disclosure
We do not sell your personal information. We may share data only with trusted service providers who help us deliver our Services:
Supabase
Database hosting and authentication services. GDPR-compliant with data processing agreements.
Resend
Email delivery services for transactional and marketing communications.
Twilio
SMS messaging services for customer feedback collection and notifications.
Stripe
Payment processing services. We do not store credit card information.
All subprocessors are bound by GDPR-compliant data processing agreements and maintain strict security standards.
Google User Data
When you choose to sign in with Google or connect your Google Business Profile, demeterrr accesses a limited set of data from your Google Account. This section explains exactly what we access, why, how we store it, and how you can revoke it. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Signing in with Google
If you sign in with Google we receive your name, email address and profile picture. We use them only to create and identify your demeterrr account. We do not receive or store your Google password.
Google Business Profile connection
If you connect your Google Business Profile, we request the business.manage permission. We use it to read your locations and reviews so they appear in your dashboard, and, only when you ask us to, to publish a reply you have written to a review. We never post, edit or delete anything on your listing without an explicit action from you.
Storage, retention and sharing
Google data is stored in our database alongside the rest of your organization's data and is protected by the same encryption, access controls and tenant isolation. We do not sell it, we do not use it for advertising, and we do not use it to train generative AI models. It is never shared with third parties except the service providers listed in the Data Disclosure section, who process it strictly on our behalf.
Revoking access
You can disconnect the integration at any time in Settings, or revoke demeterrr's access directly from your Google Account at myaccount.google.com/permissions. On disconnection we stop all synchronization and delete the associated Google tokens; previously synced reviews can be deleted on request to privacy@demeterrr.app.
Your Privacy Rights
Under GDPR and applicable privacy laws, you have the following rights regarding your personal information:
Right to Access
Request a copy of your personal data we hold.
Right to Rectification
Correct inaccurate or incomplete information.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Restriction
Limit how we process your information.
Right to Portability
Receive your data in a machine-readable format.
Right to Object
Oppose processing based on legitimate interests.
To exercise any of these rights, contact us at privacy@demeterrr.app. We will respond within 30 days.
Contact Us
If you have questions about this Privacy Policy or how we handle your data, please reach out:
// Privacy Inquiries
privacy@demeterrr.app// Company
demeterrr Inc.
You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal information appropriately.
Join hundreds of businesses already using demeterrr to collect feedback, boost reviews, and grow faster.
Sign Up