Privacy Policy
Last updated: August 6, 2026
CornerTend helps an authorized business owner manage that owner's Google Business Profile. This policy explains the information CornerTend handles and the choices available to users.
Information we collect
Google Business Profile data
After a user grants permission through Google's OAuth consent flow, CornerTend may access the connected business account and location identifiers, profile details, regular and special hours, customer reviews, reviewer-provided names and comments, star ratings, existing owner replies, and related synchronization timestamps.
Authorization and account data
CornerTend stores the user's email address, authentication and session records, Google OAuth access and refresh tokens, account connection status, product decisions such as leaving a review unanswered, and records needed to prevent duplicate or unauthorized actions.
Service and billing data
CornerTend may store limited operational records, delivery status for requested emails, security and rate-limit events, and identifiers or subscription status received from the payment provider. CornerTend does not store full payment-card numbers.
How we use information
We use this information only to provide and secure the features the user requests: connecting the user's own profile, displaying and synchronizing reviews, preparing and posting owner-approved replies, managing regular and special hours, sending requested secure action links, operating subscriptions, preventing abuse, diagnosing failures, and supporting the user.
Profile writes are user-initiated. CornerTend does not autonomously reply to reviews or change business hours.
Google API Services User Data Policy
CornerTend's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We do not sell Google user data, use it for advertising, build advertising profiles, or allow people to read it except when necessary to provide or secure the service, comply with law, or act with the user's affirmative agreement.
When information is shared
CornerTend does not sell or rent personal information. We disclose only the minimum information needed to service providers that operate the product, such as cloud hosting and database infrastructure, transactional email delivery, payment processing, and Google APIs. These providers process information for their contracted service and are not permitted to use it for unrelated purposes.
We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to this policy and applicable law.
Storage and security
Traffic is protected with HTTPS. Google OAuth access and refresh tokens are encrypted before they are stored. CornerTend uses access controls, action-scoped links, rate limits, one-time token handling, and logging practices designed to avoid recording credentials or raw authorization tokens. No system can guarantee absolute security, but we maintain safeguards appropriate to the information we handle.
Retention, revocation, and deletion
We retain account and profile data while the service is active and for the limited period needed to operate, secure, audit, and meet legal obligations. Short-lived action links expire automatically. Operational records may be retained when reasonably necessary to prevent abuse or document an action requested by the user.
A user can revoke CornerTend's Google access at any time from the connections page in their Google Account. Revocation stops future Google API access but does not itself delete data already stored by CornerTend.
To request access to or deletion of a CornerTend account and its associated Google Business Profile data, email hello@cornertend.com from the account email address. After verifying the request, we will delete or de-identify the account data and confirm completion, except information that must be retained for security, fraud prevention, dispute resolution, or legal compliance.
International processing and children
Service providers may process information in the United States or other locations where they operate. CornerTend is a business tool and is not directed to children under 18.
Changes and contact
We may update this policy as the product or legal requirements change. We will update the date above and provide additional notice when a material change requires it.
Questions, privacy requests, and deletion requests can be sent to hello@cornertend.com.