Privacy Policy

1. Who We Are

SARA is a product and brand of Draper & Co. Realty, Inc., an S-corporation owned and operated by Will Draper, based in Wake Forest, North Carolina, United States. If you have questions about this policy or your data, contact us at will@itswilldraper.com.

2. Information We Collect

Information you provide

When you create an account or use the Service, we may collect your name, email address, business name, market or location, and account login credentials. If you purchase a product or subscription, payment is processed by our third-party payment provider; we do not store full payment card numbers on our servers.

Google account information

When you choose to connect your Google Business Profile, you authorize the Service through Google OAuth 2.0. With your permission, we access:

• Your Google Business Profile account and location information (business name, location ID, and account ID) so we can identify the profile you want to manage.
• The ability to create and publish Business Profile update posts on your behalf.
• The ability to read and respond to reviews on your Business Profile on your behalf.

We request the https://www.googleapis.com/auth/business.manage scope. We only access this information after you explicitly connect your account, and only to provide the features you ask us to perform.

Information collected automatically

Like most websites and applications, we may collect basic technical data such as IP address, browser type, device information, and usage activity to operate, secure, and improve the Service.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Publish Google Business Profile posts and respond to reviews at your direction.
• Authenticate your account and keep your connection to Google active.
• Communicate with you about your account, updates, and support requests.
• Protect against fraud, abuse, and security threats, and comply with legal obligations.

You remain in full control of your Google Business Profile at all times. We act only on the actions you initiate or schedule within the Service.

4. Google API Services User Data Policy (Limited Use)

• SARA's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Specifically, we do not use Google user data for serving advertisements, we do not sell Google user data, and we do not transfer or use this data for any purpose other than providing or improving the user-facing features you have authorized. Human access to Google user data is restricted except where required for security, to comply with applicable law, or with your explicit consent.

5. How We Store and Protect Your Data

We store your information using industry-standard security practices. Google OAuth access tokens and refresh tokens are stored in encrypted, access-controlled databases with row-level security so that each user can only access their own connection data. We retain your data only as long as your account is active or as needed to provide the Service and meet legal requirements.

6. How We Share Information

We do not sell your personal information or your Google user data. We may share information only:

• With service providers (such as hosting, database, and payment processors) who process data on our behalf under confidentiality obligations.
• With Google, to perform the publishing and review-management actions you authorize.
• When required by law, legal process, or to protect the rights, safety, and security of our users and the Service.

7. Your Choices and Control

You can disconnect your Google Business Profile at any time from within the Service, which revokes our access to your Google data going forward. You may also revoke access directly through your Google Account at myaccount.google.com/permissions.

To request access to, correction of, or deletion of your personal data, email us at will@itswilldraper.com. When you delete your account, we delete or de-identify your personal data and stored Google tokens, except where retention is required by law.

8. Children's Privacy

The Service is intended for business use by adults and is not directed to children under 16. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you through the Service.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, contact: