Your Privacy Matters

We collect only the information needed to make PatientStars work for you:

Information you give us

• Account info: Your name, email address, and password (stored encrypted) when you sign up.
• Practice details: Optional information about your dental practice (e.g., name, specialty) to personalize AI-generated responses.
• Payment info: When you subscribe, billing is handled entirely by Stripe. We never see or store your full card details.
• Support messages: When you reach out to us, we keep a record of that conversation to help you.

Information collected automatically

• Usage data: Which features you use, actions you take (e.g., drafting or approving a response), and how often.
• Technical data: Browser type, operating system, IP address, and device information.
• Cookies: See Section 8 for details.

Information from Google

• Google Business Profile data: When you connect your Google account, we access your public business reviews (review text, rating, date, reviewer display name) so we can help you respond to them.
• Google account info: Your Google email address and display name, used only to authenticate your account.

We use the information we collect to:

• Run the service: Generate AI-powered review response drafts, manage your account, and process your subscription.
• Improve PatientStars: Understand how people use the product and make it better. We use aggregated, de-identified data for this — not your personal information.
• Send you updates: Account confirmations, receipts, and security alerts. We’ll only email you marketing content if you opt in, and you can unsubscribe any time.
• Keep things secure: Detect and prevent unauthorized access or abuse.

We do not sell your personal information. We do not use your data for advertising.

PatientStars’ use of data from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. In plain terms:

• We only request the Google permissions we actually need.
• We use Google data solely to provide you with the review management features inside PatientStars — nothing else.
• We do not use Google data to train AI models or share it with third parties for advertising.
• You can revoke our access to your Google account at any time at myaccount.google.com/permissions.

The Chrome Extension

Our PatientStars Chrome Extension lets you approve AI-drafted review responses directly from Google Maps or Google Business without switching tabs. The extension:

• Only activates on Google Maps, Google Business, and patientstars.com pages.
• Reads review data visible on the page to display your pending drafts.
• Does not collect browsing history or any data unrelated to review management.
• Communicates only with patientstars.com and our database (Supabase) to fetch your account data and drafts.

We work with a small number of trusted third-party services to operate PatientStars. We only share the data they need to do their job, and we don’t sell your information to anyone.

• Supabase — our database and authentication provider
• Stripe — payment processing
• Google — AI responses (Gemini API) and business review data (Google My Business API)
• Vercel — app hosting
• Resend — transactional emails

We may also share information if required by law or to protect the safety and integrity of the service. If PatientStars is ever acquired or merged with another company, your data may be transferred as part of that transaction — we’ll notify you if that happens.

We keep your data only as long as we need it:

• Account data: Kept while your account is active. Deleted within 30 days of account deletion.
• Review & response data: Kept while your account is active and up to 12 months after deletion.
• Billing records: Kept for 7 years for accounting purposes.
• Support messages: Kept for up to 2 years.

You can delete your account at any time through your account settings. We’ll process the deletion within 30 days.

We take security seriously. Here’s what we do to protect your information:

• All data is encrypted in transit (TLS) and at rest (AES-256).
• Passwords are stored using one-way hashing — we never see your plain-text password.
• Access to production systems is restricted and requires multi-factor authentication.
• Payment data is handled by Stripe — we never touch your card numbers.

No system is 100% secure. If we ever become aware of a breach that affects your data, we’ll notify you promptly.

• Update your info: Log in to patientstars.com and go to your account settings.
• Delete your account: Available in account settings. All personal data is removed within 30 days.
• Unsubscribe from emails:Click “unsubscribe” in any marketing email. You’ll still receive essential account emails (receipts, security alerts).
• Revoke Google access: Visit myaccount.google.com/permissions to disconnect PatientStars from your Google account.
• Remove the extension:Right-click the PatientStars icon in Chrome and select “Remove from Chrome.”
• Request your data: Email us at privacy@patientstars.com and we’ll send you a copy of your data.

We use a minimal set of cookies:

• Session cookies: Keep you logged in while you use the app. These are required for the service to work.
• Preference cookies: Remember your settings (like your preferred response tone).
• Analytics cookies: Help us understand which features are being used (via Vercel Analytics). This data is aggregated and not tied to your identity.

You can control cookies through your browser settings. Disabling session cookies will prevent you from logging in.

We may update this policy from time to time. When we do, we’ll update the “Last Updated” date at the top. For significant changes, we’ll also send an email to your account address. Continuing to use PatientStars after a policy update means you accept the new policy.

Questions or concerns? We’d love to hear from you.