Privacy Policy

Such as name, email address, and mobile phone number when you join the waitlist, sign up for the newsletter, or create an account.

Such as IP address, device/browser information, and basic usage logs generated automatically by our hosting and analytics providers.

Including one‑time passcodes (OTPs), verification status, and audit logs of when codes were generated, sent, verified, or expired. Codes are stored only in hashed or tokenized form.

Publicly Available Business Information

Business listings are populated using publicly available data from Google Places API, including business name, address, phone number, website, photos, ratings, and review counts. This information is already publicly accessible through Google Maps and similar services.

Claimed Listing Data

When a business owner claims their listing, we collect their account credentials (email, password) and any additional business information they choose to provide, such as updated descriptions, photos, or contact details.

Embedded Maps

Listing pages include embedded Google Maps. When you view a map, Google may collect data according to their own Privacy Policy. We do not control what data Google collects through embedded maps.

GL365 Reviews

When you submit a review, we collect your display name, star rating, review text, and the date of submission. Reviews are publicly visible on the business listing page. We do not collect your email or contact information when submitting a review.

AI-Generated Responses

Business owners may use AI-assisted tools to draft responses to reviews. These AI drafts are generated by third-party AI providers (such as OpenAI via OpenRouter). Your review text is sent to these providers solely for the purpose of generating a contextual response. AI responses are always subject to business owner approval unless the owner has explicitly enabled automatic responses.

Listing Analytics

We track anonymous interaction events on business listing pages, including page views, phone call button clicks, website clicks, and directions requests. This data is aggregated and provided to business owners as analytics. No personally identifiable information is associated with these events.

Transaction Fees

Certain high-value interactions (such as phone calls initiated through the “Call Now” button) may incur a per-interaction fee charged to the business owner. These fees are disclosed in the business owner’s dashboard and Terms of Service. Consumers are never charged for interacting with listings.

Trusted Third-Party Providers

We use trusted third‑party service providers to host and process data, such as Supabase for database and backend hosting, Twilio (or similar) for SMS delivery, and workflow tools (e.g., n8n) to orchestrate message sending. These providers process data only on our behalf and under contract.

Data Retention

We retain personal data for as long as needed to provide the service and meet legal or accounting obligations. OTP codes and related logs are kept only as long as reasonably necessary for security and audit purposes, after which they are deleted or anonymized.

SMS Opt-Out

You may opt out of SMS messages at any time by following the opt‑out instructions in the message (for example, replying STOP) or by contacting us. Note: Opting out of verification messages may limit your ability to use features that require a verified phone number.

Access, Correction & Deletion

You may request access to, correction of, or deletion of your personal information, subject to legal and operational limits, by emailing our support team using the contact details provided on the GreenLine365 website.