Privacy policy

The data we use

Your account: name, email address and Google account identifier, provided by Google when you sign in.

Your profile: first name, last name, role at your business and your answer to “How did you hear about us?”, which you provide when signing up. They are used to personalize your space, and to learn how restaurant owners find us.

Access to your Google listings: when you authorize us to, Google gives us access to your business listings. We store it encrypted; it is used only to read your reviews and publish replies.

Your listings and reviews: public information about your businesses (name, address, phone, website, opening hours, average rating), public reviews (author name as displayed by Google, rating, text, date), proposed and published replies, weekly recaps, and your settings (signature, tone, description, automatic publishing).

The profile of each business: the information we prepare to write better replies (type of business, atmosphere, opening hours, specialties, writing style…), with where it comes from (Google listing, your earlier replies, the home page of your website or your own answers to our questionnaire) and your confirmation. Nothing from this profile is used until you have confirmed it.

Your consent for artificial intelligence: the date and the version of the text you accepted, and its withdrawal if any.

Billing: our payment partner Stripe processes your payment details; we never see your card. We only keep the status of your subscription.

Emails sent (Monday recap if you asked for it, service messages) and your email preferences.

Technical logs (errors, important actions such as a publication) for security and for the proper functioning of the service.

Why, and on what basis

To provide the service you subscribed to (performance of the contract): reading your reviews and the public information of your listings, drafting proposed replies, publishing them at your request or according to your automatic publishing rules, preparing your weekly recap.

Sending your data to a third-party artificial intelligence service (Anthropic) is based on your explicit consent, collected before anything is sent and which you can withdraw at any time (see “Artificial intelligence and your consent”).

For security, abuse prevention and reliability improvements (legitimate interest).

For billing and accounting (legal obligation).

We do not sell any data, we do not run advertising, and we do not use your data or your customers' data to train artificial intelligence models.

Data obtained from Google

Shuren's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice: this data is used only for the features you see in the service (reading your reviews, preparing and publishing your replies, preparing the profile of your businesses, your weekly recap, displaying your listings); it is shared only with the providers needed for these features (below); no member of our team looks at it, except with your agreement, for security reasons or to comply with the law.

You can withdraw our access at any time from your Google account (Security > Third-party apps) or by deleting your account with us.

Artificial intelligence and your consent

To write replies, prepare the profile of your businesses and summarize your week, Shuren uses a third-party artificial intelligence service: Claude, from the company Anthropic.

What is sent to it: your customers' reviews (name displayed on Google, rating, text), the public information of your businesses (name, address, opening hours, phone, website), the text of your website's home page, your earlier replies to reviews and your answers to our questionnaire. Nothing else: not your payment details, not your Google access, not your keys.

Your consent: we ask for it before anything is sent, when you sign up (or on your next visit if you already had an account). We keep the date and the version of the text you accepted. Without consent, or if you withdraw it, nothing is sent: your reviews remain visible, but no reply and no profile is prepared. You can withdraw your consent, or give it again, at any time in Manage > My account; writing stops immediately. If we ever widen what is sent, we will ask for your consent again.

What we guarantee: this content is used only for these features; Anthropic, under its commercial terms, does not use it to train its models; no reply is published without your approval, unless you have turned on automatic publishing; profile information proposed by the system is used only once you have confirmed it.

Reading your website: to propose your profile, we read only the home page of the website shown on your Google listing or entered by you, respecting the site's robots.txt file. We do not read social networks or other websites.

Our providers

Cloudflare (hosting of the application and the database, anonymous audience measurement of the website).

Google (sign-in, access to your business listings and new-review alerts).

Anthropic (the Claude artificial intelligence service: writing proposed replies, analyzing and summarizing reviews, preparing the profile of businesses), only with your consent. Under its commercial terms, Anthropic does not use this content to train its models and deletes it from its servers within 30 days at most, except for exceptions provided by its terms (for example legal obligation or abuse prevention).

Stripe (payment and invoices).

Resend (sending emails).

Some of these providers are located outside the European Union, notably in the United States. Transfers are covered by the safeguards provided for by the GDPR (the “Data Privacy Framework” adequacy decision or the European Commission's standard contractual clauses).

Security

Communications with the service are encrypted (HTTPS). Access to your Google listings is stored encrypted and is never displayed. Only the people on your account see your reviews and replies; every publication is recorded in a log.

In the event of a data breach likely to concern you, we will notify you as soon as possible and, where the law requires it, the CNIL (the French data protection authority) within 72 hours.

How long we keep it

As long as your account exists. When you delete it (Settings > Delete my account), all your data (including the profile of your businesses and the record of your consent) is erased from our database within minutes, our access to your Google listings is removed and your subscription is stopped.

Invoices are kept by Stripe for the period required by law (10 years). The hosting provider's technical logs are erased automatically after a few days.

Replies already published on Google remain on Google: you can edit or delete them from your listing.

Cookies

A single, essential cookie: the one that keeps you signed in. No advertising cookie and no audience measurement. That is why we do not ask for your consent.

To know how many people visit the website and which pages they read, we use Cloudflare Web Analytics, with no cookie and nothing stored on your device: visits are counted anonymously, without following you from one site to another or from one day to the next. This measurement does not run in the iPhone app.

Your rights

You can access your data, correct it, have it erased, ask for a copy, object to a processing or ask for it to be restricted, and withdraw your consent for artificial intelligence at any time (Manage > My account). Write to us at victor@shuren.fr. Deleting your account is also possible directly in the settings.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL (www.cnil.fr) or with your local data protection authority.

Review authors

The reviews we process are public on Google. We process them on behalf of the business concerned, which is responsible for them (see the appendix to the terms). If you left a review for one of our customers and wish to exercise your rights, contact that business or write to us at victor@shuren.fr: we will pass your request on to it.

To edit or delete your review itself, go to Google: we cannot do it for you.