Privacy Policy

Last updated: May 26, 2026

Starpush ("Company," "we," "us," or "our") operates Starpush at starpush.io. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service. By using Starpush, you consent to the practices described in this policy.

We are committed to protecting your privacy and the privacy of your customers. We only collect information that is necessary to provide and improve the Service.

1. Information We Collect

1.1 Account Information

When you create a Starpush account, we collect:

• Your full name
• Email address
• Password (stored in hashed form using bcrypt; we never store plaintext passwords)
• Phone number (optional)

1.2 Business Information

To provide the Service, we collect information about your business, including:

• Business name and type (e.g., HVAC, plumbing, roofing)
• Business address and service area
• Google Business Profile URL and associated data
• Business phone number
• Selected subscription plan

1.3 Customer Information

When you use Starpush's SMS review request feature, you provide us with your customers' information, which may include:

• Customer name
• Customer phone number
• Service type or job details (optional)

You are responsible for ensuring that you have obtained proper consent from each customer before providing their information to Starpush and before we send SMS messages on your behalf.

1.4 Payment Information

Payment details (credit card numbers, billing addresses) are collected and processed directly by Stripe. We do not store your full credit card number on our servers. We receive and store only limited payment information from Stripe, such as the last four digits of your card, card brand, and billing status, for your account records.

1.5 Usage Data

We automatically collect certain information about how you use the Service, including:

• Pages visited and features used within the dashboard
• Date and time of access
• SMS review requests sent and delivery status
• AI reply generations and actions taken
• GBP Optimizer audit history
• Browser type and operating system
• IP address (used for security purposes and anonymized for analytics)

1.6 Review Data

We access publicly available review data from your Google Business Profile, including review text, ratings, reviewer names, and dates, to provide review management and AI reply features.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To create and manage your account, send SMS review requests on your behalf, generate AI review replies, perform GBP audits, and display analytics in your dashboard.
• Payment Processing: To process subscription payments, manage billing, and handle refund requests through Stripe.
• Communication: To send you account-related emails, including trial expiration notices, billing confirmations, password reset links, and important service updates. We will not send marketing emails without your explicit opt-in.
• Service Improvement: To analyze usage patterns, identify technical issues, and improve the functionality, performance, and reliability of the Service.
• Security: To detect, prevent, and address fraud, abuse, security threats, and technical issues.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

3. Third-Party Services & Data Sharing

We share your information with third-party services only as necessary to provide and support the Service. We do not sell your personal information to third parties.

3.1 SMS Delivery Infrastructure

Customer phone numbers and SMS message content are transmitted to our managed SMS delivery provider to send review request messages. Message delivery data (sent, delivered, failed) is returned to us for your dashboard analytics. You do not interact with this provider directly.

3.2 Stripe (Payment Processing)

Your payment information is collected and processed by Stripe. We do not have access to your full payment card details. Stripe handles your payment data in accordance with PCI DSS standards and their Privacy Policy.

3.3 Anthropic / Claude AI (AI Features)

When you use the AI review reply feature, review text and relevant context are sent to Anthropic's Claude API to generate reply suggestions. We send only the minimum data necessary to generate a useful reply. Anthropic processes this data in accordance with their Privacy Policy. Anthropic does not use data submitted through their API to train their models.

3.4 Google (Business Profile Data)

Starpush accesses publicly available data from your Google Business Profile to power the GBP Optimizer and review management features. We do not share your private account data with Google beyond what is necessary to access your public profile information.

3.5 Other Disclosures

We may disclose your information if required to do so by law, in response to a valid subpoena or court order, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specific retention periods are as follows:

• Account data: Retained for the duration of your account and for 90 days after account deletion to allow for reactivation and to comply with legal obligations.
• Customer phone numbers: Retained only for as long as needed to send review requests and track delivery status. Phone numbers associated with completed campaigns are automatically purged after 12 months of inactivity.
• SMS logs: Delivery and response records are retained for 24 months to provide historical analytics in your dashboard.
• Payment records: Billing history is retained for 7 years to comply with tax and financial reporting obligations.
• Usage data: Anonymized usage data may be retained indefinitely for service improvement and analytics.

You may request deletion of your data at any time by contacting us at clujkeebs@aol.com. We will process deletion requests within 30 days, subject to legal retention requirements.

5. Data Security

We take the security of your data seriously and implement industry-standard measures to protect it:

• Password hashing: All user passwords are hashed using bcrypt with a high work factor before storage. We never store plaintext passwords.
• Encryption in transit: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
• Encrypted sessions: User sessions are managed with encrypted, httpOnly, secure cookies to prevent session hijacking and cross-site scripting attacks.
• Access controls: Access to production databases and infrastructure is restricted to authorized personnel only, with multi-factor authentication required.
• Payment security: Payment card data is handled entirely by Stripe and never touches our servers, ensuring PCI DSS compliance.

While we implement these and other security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data, but we are committed to promptly addressing any security incidents and notifying affected users as required by law.

6. Your Rights

You have the following rights regarding your personal information:

6.1 Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used, machine-readable format within 30 days of your request.

6.2 Correction

You can update your account information at any time through your account settings. If you believe any other data we hold about you is inaccurate, contact us and we will correct it promptly.

6.3 Deletion

You have the right to request deletion of your personal data. Upon receiving a verified deletion request, we will delete your data within 30 days, except where retention is required by law or necessary to fulfill our legitimate business interests (such as fraud prevention).

6.4 Data Export

You may request an export of your data, including your account information, customer lists, review request history, and dashboard analytics. We will provide the export in CSV or JSON format within 30 days of your request.

6.5 Opt-Out of Communications

You may opt out of non-essential emails at any time by clicking the unsubscribe link in any email or by updating your notification preferences in your account settings. Note that you cannot opt out of transactional emails related to your account and billing.

6.6 How to Exercise Your Rights

To exercise any of these rights, contact us at clujkeebs@aol.com with your request. We may ask you to verify your identity before processing your request.

7. Cookies & Tracking

7.1 Session Cookies

Starpush uses session cookies that are essential for the operation of the Service. These cookies are used to:

• Authenticate your login session and keep you signed in
• Maintain security tokens to prevent cross-site request forgery (CSRF)
• Remember your selected preferences within a session

Session cookies are automatically deleted when you close your browser or when your session expires.

7.2 No Third-Party Tracking

We do not use third-party tracking cookies, advertising pixels, or analytics services that track you across other websites. We do not participate in ad networks or share your browsing data with advertisers. We do not use Google Analytics, Facebook Pixel, or similar third-party tracking tools.

7.3 Do Not Track

We honor Do Not Track (DNT) browser signals. Since we do not engage in cross-site tracking, our practices are consistent with DNT requests by default.

8. Children's Privacy

Starpush is a business-to-business service designed for use by adults operating local service businesses. The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18.

If we become aware that we have inadvertently collected personal information from a person under 18, we will take steps to delete that information as quickly as possible. If you believe a minor has provided us with personal information, please contact us immediately at clujkeebs@aol.com.

9. SMS & Communication Compliance

9.1 TCPA Compliance

Starpush is designed to help you send review requests via SMS in compliance with the Telephone Consumer Protection Act (TCPA). However, compliance is ultimately your responsibility as the sender. By using our SMS features, you represent and warrant that:

• You have obtained express written consent from each recipient before using Starpush to send them an SMS message.
• You maintain records of consent for each recipient.
• Your use of the SMS feature complies with all applicable federal, state, and local laws, including the TCPA, CAN-SPAM Act, and any state-specific telemarketing regulations.

9.2 Opt-Out Mechanisms

All SMS messages sent through Starpush include clear opt-out instructions. Recipients can reply STOP at any time to opt out of receiving further messages from your business through our platform. Opt-out requests are processed automatically and immediately. Once a recipient opts out, Starpush will prevent any future SMS messages from being sent to that number from your account.

9.3 Message Frequency & Content

Starpush sends a maximum of one review request SMS per customer per service event, unless you configure follow-up reminders. We include your business name in all messages for identification purposes. Message and data rates may apply to recipients, and this is disclosed in each message.

10. State-Specific Privacy Rights

10.1 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to opt out of the sale or sharing of personal information. We do not sell or share your personal information.
• The right to non-discrimination for exercising your privacy rights.

To exercise these rights, contact us at clujkeebs@aol.com.

10.2 Other U.S. States

Residents of Virginia, Colorado, Connecticut, Utah, and other states with consumer privacy laws may have similar rights. Contact us to learn more about your specific rights under your state's privacy law.

11. International Data Transfers

Starpush's servers and third-party service providers are located in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to these transfers. We take appropriate measures to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify you via email at least 30 days before the changes take effect.
• Post a prominent notice within the Service.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: clujkeebs@aol.com
• Website: starpush.io
• Company: Starpush

We will respond to all privacy-related inquiries within 30 days.