Privacy Policy

1.1 This Privacy Policy applies to all users of GBoost.ai, including visitors to the website, registered users, and subscribers.

1.2 This Policy applies to personal data collected through:

• The GBoost.ai website and platform
• Google Sign-In and Google Business Profile integration
• Subscription, billing, and customer support interactions
• Review invitation and content generation features

1.3 This Policy does not apply to third-party platforms, including Google services or payment gateways, which are governed by their own privacy policies.

2.1 Account and Identity Information
When you sign in using Google Sign-In, we collect basic account information such as your name, email address, Google account identifier, and profile image (if available). We do not collect or store your Google account password.

2.2 Google Business Profile Data
To provide the Service, we access and process information related to your Google Business Profile, including business name, category, location details, posts, images, and publicly available customer reviews. This data is used strictly to generate content, publish posts, and assist with review replies.

2.3 Content and Usage Data
We collect and store AI-generated content, approved posts, review replies, system logs, and usage activity related to your account. This data helps us operate, maintain, and improve the Service.

2.4 Customer Information for Review Invitations
If you use the review invitation feature, you may provide customer information such as name, email address, or phone number. This data is used solely to send review invitations at your request. You are responsible for ensuring lawful collection and consent before providing such data.

2.5 Billing and Transaction Information
Subscription payments are processed through a third-party payment gateway. GBoost.ai does not store full payment card details. We may store billing names, invoices, subscription status, and transaction references for accounting and support purposes.

2.6 Technical and Device Information
We automatically collect technical data such as IP address, browser type, device information, operating system, access times, and system logs to maintain security, diagnose issues, and improve performance.

3.1 GBoost.ai uses cookies and similar technologies to ensure proper platform functionality, authentication, analytics, and performance optimization.

3.2 Cookies may be used to remember login sessions, user preferences, and usage patterns.

3.3 You may control or disable cookies through your browser settings. Disabling certain cookies may affect platform functionality.

4.1 We process personal data to provide, operate, and maintain the GBoost.ai Service, including content generation, Google Business Profile management, billing, and support.

4.2 We use data to improve system performance, enhance AI models, and optimize user experience.

4.3 We process data to communicate with users regarding service updates, billing notices, system alerts, and customer support.

4.4 We process data to comply with legal obligations, prevent fraud, protect platform security, and enforce our Terms of Service.

5.1 Under Malaysia’s Personal Data Protection Act (PDPA), we process personal data with your consent and for legitimate business purposes.

5.2 For users subject to GDPR, processing is based on one or more of the following legal grounds:

• Performance of a contract
• Consent
• Legal obligation
• Legitimate interests that do not override user rights

6.1 Users are responsible for ensuring that any personal data provided to GBoost.ai, including customer data, is accurate, lawful, and collected with proper consent.

6.2 Users must not upload or process personal data that violates applicable laws or third-party rights.

7.1 GBoost.ai does not sell personal data.

7.2 We may share data with trusted third-party service providers solely to operate the Service, including:

• Cloud hosting providers
• Payment processors
• Analytics and monitoring services
• AI technology providers

7.3 We may disclose personal data if required by law, regulatory authorities, or to protect legal rights, system security, or user safety.

7.4 In the event of a merger, acquisition, or business transfer, personal data may be transferred as part of the transaction, subject to confidentiality obligations.

8.1 GBoost.ai operates from Malaysia, but data may be stored or processed on servers located outside Malaysia.

8.2 Where data is transferred internationally, we take reasonable steps to ensure adequate data protection standards consistent with PDPA and GDPR requirements.

8.3 By using the Service, you consent to the transfer of your data to other jurisdictions where necessary to provide the Service.

9.1 We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy.

9.2 Account data is retained while your account remains active.

9.3 Billing and transaction records are retained as required by applicable financial and tax laws.

9.4 Data may be retained longer where required for legal, regulatory, or security purposes.

10.1 GBoost.ai implements reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure.

10.2 Despite security measures, no system can guarantee absolute security. Users acknowledge and accept this risk when using the Service.

11.1 Rights Under PDPA (Malaysia)
Users have the right to access, correct, and withdraw consent for the processing of their personal data, subject to legal limitations.

11.2 Rights Under GDPR (International Users)
Where applicable, users have the right to access, rectify, erase, restrict processing, object to processing, and request data portability.

11.3 Requests to exercise data rights may be submitted through the GBoost.ai support channels. Identity verification may be required.

12.1 GBoost.ai accesses Google Business Profile data only with your authorization.

12.2 You may revoke Google permissions at any time through your Google account settings. Revoking permissions may limit or disable the Service.

12.3 GBoost.ai is not responsible for Google’s data handling practices or platform policies.

13.1 GBoost.ai is not intended for use by individuals under the age of 18.

13.2 We do not knowingly collect personal data from minors. If such data is identified, it will be removed promptly.

14.1 GBoost.ai may update this Privacy Policy from time to time.

14.2 Updates will be published on the website. Continued use of the Service constitutes acceptance of the revised Policy.