1. Who we are
WeWidget (“we”, “us”, “our”) provides an embeddable Google Reviews widget service. This policy explains what personal data we collect, how we use it, and your rights.
2. Data we collect
- Account data: name and email address provided at sign-up.
- Google account data: when you connect your Google Business Profile, we store an encrypted OAuth refresh token to fetch your public reviews. We do not store your Google password.
- Review data: publicly visible Google reviews fetched from your Business Profile are cached in our database to serve your widget.
- Payment data: billing is handled by Stripe. We store only a Stripe customer ID — no card numbers are held by us.
- Usage data: basic analytics on widget impressions (page origin only, no visitor PII).
3. How we use your data
- To provide the widget service and sync your Google reviews.
- To process payments and manage your subscription.
- To send transactional emails (account, billing, review sync status).
- To improve the service based on aggregate usage.
4. Google user data & Limited Use
WeWidget's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- We access your Google Business Profile data solely to display your business's reviews and rating on websites you choose, at your direction.
- We only read review and rating data — we never edit your listing, and never reply to, create, or delete reviews.
- We do not sell Google user data, use it for advertising, or transfer it to third parties except as necessary to provide the service you requested or as required by law.
- No humans read your Google data except with your explicit permission (e.g. a support request), for security purposes, or where required by law.
- You can revoke WeWidget's access at any time from your dashboard or at myaccount.google.com/permissions. On disconnection we delete the stored refresh token; cached review data is removed when your account is deleted.
5. Third parties
- Google: review data is fetched via the Google Business Profile API under their Terms of Service.
- Stripe: payment processing. Stripe's privacy policy governs card data.
- Supabase: database and authentication hosting.
6. Data retention
Your data is retained while your account is active. You may delete your account at any time by contacting us, which removes your profile, cached reviews, and Google connection. Stripe billing records are retained as required by law.
7. Your rights
Under UK GDPR you have the right to access, correct, or delete your personal data. Contact us at hello@wewidget.app for any data request.