Privacy Policy

Last updated July 20, 2026

EchoIQ (“we,” “us”) provides a pay-per-audit tool that reviews a business's Google reviews for policy violations and produces a report for the business. This policy explains what data we collect, how we use it, and how you can control it.

1. What we collect

Account information. If you have a login, we store your email, name, and a hashed password. Accounts are created by us for our customers — there is no public signup.

Audit request information. If you submit the “Request an audit” form, we collect your name, email, company, property name, listing link, and any message you include, so we can respond with a quote.

Review and property data. To run an audit, we collect the reviews on a business's Google listing — reviewer name, star rating, review text, and date — either via a connected Google Business Profile (see Section 2) or entered directly by an authorized user of that business.

2. Google user data

Where a business connects its Google Business Profile, we request read-only access to that profile's reviews via Google's OAuth authorization. We use this access solely to retrieve reviews for the audit the business requested. We do not use this access to post, edit, reply to, or delete anything on the business's behalf, and we do not use Google user data for advertising. Access can be revoked at any time from the business's Google Account permissions page, or by contacting us to disconnect it on your behalf.

3. How we use AI to analyze reviews

Review text is sent to Anthropic's Claude API to be checked against Google's review policies and to generate the audit report. We do not use your data to train our own models, and Anthropic processes it under its own API terms as a data processor on our behalf — it is not used to train Anthropic's models either.

4. How we use your data

We use the data above to: run the audit and generate your report; respond to audit requests; track the status of flagged reviews you mark as reported or removed; and send you the report and related account notifications. We do not sell any data, and we do not share it with third parties except the service providers required to run the product — our database host (Supabase), hosting provider (Vercel), AI processor (Anthropic), and email delivery provider (Resend) — each bound to protect it under their own terms.

5. Data retention and deletion

We retain account, property, and review data for as long as the account is active, so past audits and removal-tracking history stay available. You can request deletion of your account, your property's data, or a specific audit request at any time by emailing us at the address below — we will delete it within 30 days, except where we're required to keep records for legal reasons.

6. Cookies

We use a single session cookie to keep you signed in. We do not use third-party advertising or tracking cookies.

7. Changes to this policy

If we make material changes to this policy, we'll update the date above and, for connected Google accounts, notify affected businesses before the change takes effect.

8. Contact us

Questions about this policy, or want to exercise any of the rights above? Email willebner04@gmail.com.