Privacy Policy

Last Updated: December 7, 2025

1. Introduction

CubeSites ("we," "our," or "us") respects your privacy and is committed to protecting it through our compliance with this policy. This policy describes the types of information we may collect from you or that you may provide when you visit our website or use our services, and our practices for collecting, using, maintaining, protecting, and disclosing that information.

2. Information We Collect

We collect several types of information from and about users of our Service, including:

  • Personal Identifiers: Name, email address, phone number, and business address.
  • Business Information: Business name, category, website URL, hours of operation, and description.
  • Google Account Data: When you connect your Google Business Profile, we collect OAuth credentials (access and refresh tokens), location IDs, and profile data (reviews, ratings, foundation scores).
  • Usage Data: Information about your internet connection, the equipment you use to access our Service, and usage details (access logs).

3. How We Use Your Information

We use information that we collect about you or that you provide to us:

  • To present our Service and its contents to you.
  • To provide you with information, products, or services that you request from us.
  • To fulfill our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
  • To notify you about changes to our Service or any products or services we offer or provide though it.
  • To allow you to participate in interactive features on our Service.
  • To send transactional emails (welcome, password reset, notifications) via our email service provider.

4. System Logs and Diagnostics

When you use the Service, our systems automatically collect and store certain technical information in logs. This may include IP address, browser type, device identifiers, pages visited, date and time of requests, referral URLs, and error details. Where you are authenticated, these logs may be associated with your user and business identifiers.

We use this information to detect and prevent fraud and abuse, monitor system performance and reliability, diagnose and fix technical issues, and improve the overall security and stability of the Service.

5. Google User Data: Limited Use Policy

CubeSites' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We only use the data accessed via Google Business Profile APIs to provide the specific features of our application (profile auditing, review management, and business information syncing). We do not use this data for advertising purposes or sell it to third parties.

6. Data Sharing and Disclosure

We may disclose aggregated information about our users without restriction. We may disclose personal information that we collect or you provide as described in this privacy policy:

  • Service Providers: We use third-party service providers to support our business, who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them.
    • Cloud Infrastructure Providers: For hosting the application and database.
    • Resend: For sending transactional emails.
    • Cloudflare: For security and bot protection (Turnstile).
    • Logging and Monitoring Tools: For collecting diagnostics and performance metrics.
    • Analytics and Reporting Tools: If enabled, for understanding how the Service is used and improving features.
    • Payment Processors and SMS Providers: If and when integrated, for billing and communication services.
  • Legal Requirements: To comply with any court order, law, or legal process, including to respond to any government or regulatory request.

7. Data Retention

We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy:

  • Account Information: Retained for the duration of your account plus 2 years.
  • OAuth Credentials: Retained until you disconnect your Google Profile, plus 30 days.
  • Review Data: Retained for 3 years from the date of collection.
  • Communication Logs: SMS/Email logs are retained for 24 months for compliance purposes.

8. Your Rights and Choices

Depending on your location, you may have specific rights regarding your personal information, including:

  • Access and Portability: You have the right to request a copy of the personal data we hold about you in a portable, machine-readable format.
  • Correction: You have the right to request that we correct any inaccurate or incomplete personal data.
  • Deletion: You have the right to request that we delete your personal data, subject to certain legal exceptions (e.g., to complete transactions, comply with legal obligations, or detect security incidents).
  • Opt-Out: You may opt-out of marketing communications at any time.

To exercise these rights, please contact us at [email protected]. We will respond to your request within the timeframes required by applicable law (e.g., 45 days for CCPA/CPRA requests and within 45 days for other applicable state privacy laws).

California Residents: Your Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the business or commercial purposes for collection, and the categories of third parties with whom we share it.
  • Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions (such as completing transactions, detecting security incidents, and complying with legal obligations).
  • Right to Correct: You have the right to request correction of inaccurate personal information that we maintain about you.
  • Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information as those terms are defined by CCPA/CPRA. If our practices change in the future, we will update this Policy and provide a "Do Not Sell or Share My Personal Information" link on our homepage.
  • Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond those permitted by CPRA.
  • Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of your privacy rights.

We honor Global Privacy Control (GPC) signals from supported browsers and extensions as a valid request to opt-out of the sale or sharing of personal information under California law where applicable.

Other State-Specific Rights

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights to access, correct, delete, and obtain copies of their personal information, as well as to opt-out of certain processing activities. To exercise any of these rights, please contact us at [email protected].

9. Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. All information you provide to us is stored on our secure servers behind firewalls and is accessible only to personnel and service providers who require access to perform their duties.

Despite our efforts, no method of transmission over the Internet or method of electronic storage is 100% secure. In the event we become aware of a data breach affecting your personal information, we will notify you and any applicable regulators in accordance with applicable law.

10. Children's Privacy

Our Service is not intended for children under 13 years of age. No one under age 13 may provide any information to or on the Service. We do not knowingly collect personal information from children under 13.

11. Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users' personal information, we will notify you by email to the email address specified in your account or through a notice on the Service home page.

12. Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at: [email protected].