Privacy Policy

DRAFT: needs legal review before publishing. Highlighted bracketed items are open questions for Nic or our attorney.

Last updated: October 16, 2026

Who we are

Tablepeak is operated by PrimeAgent, LLC, 160 Alamo Plaza, #1195, Alamo, CA 94507 (“we”, “us”). Contact: hello@tablepeak.com.

What we collect

  • Account information: business name, address, public phone, website and review-site links, and your login email.
  • Private alert contacts: the email and mobile number you give us for notifications. These are used only to contact you and never appear in any public reply.
  • Google data (with your permission): your Business Profile location details and its reviews (reviewer display name, star rating, review text, dates) and existing replies.
  • Content you give us: tone settings, notes, edits and approvals, and Yelp/TripAdvisor review text you choose to share with us.
  • Billing: handled by our payment processor, Stripe; we don't receive or store full card numbers.
  • Usage and technical data: log data such as IP address, browser and pages visited, used for security and reliability.

How we use Google user data

We use data from Google APIs only to provide the features you see: reading new reviews for your connected locations, drafting replies, showing them to you for approval, and posting the replies you approve (or that you've told us to post automatically). We don't use Google user data for advertising, we don't sell it, and we don't use it to train or improve general-purpose AI models.

Limited Use disclosure: Tablepeak's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Humans at Tablepeak don't read your Google data unless you ask us to (for example, for support), it's needed for security or abuse investigations, or the law requires it.

AI processing

Reply drafts are generated by the Grok API from xAI (our AI provider), which processes review text and your business settings to produce each draft. Under xAI's published API terms, xAI does not train its models on API inputs or outputs without the customer's explicit permission, and it stores API requests and responses (encrypted at rest) for up to 30 days to audit for abuse or misuse, then deletes them automatically (xAI API security FAQ). Requests may be processed outside the United States. [Nic/attorney: confirm we have not opted in to training, decide whether to enable Zero Data Retention or the US-only endpoint, and update this paragraph.] We send xAI only what's needed to draft a reply: the review text and rating, the reviewer's first name and your business settings. Your private alert contacts are never sent. Drafts are checked by automated rules, and you approve them before posting unless you've turned on auto-posting for low-risk reviews.

Retention and deletion

  • We keep review content we receive from Google for no longer than 30 days, then delete it or refresh it from Google.
  • We keep a record of approvals and posted replies (who approved, when, and what was posted) for as long as your account is active, so you have a history of your consent.
  • If you disconnect Google or close your account, we delete your Google data and account data within 7 business days, except what we must keep by law (such as billing records). You can also revoke our access anytime at myaccount.google.com/permissions.

Text messages

If you opt in, we send recurring automated texts about your reviews. Message frequency varies; message and data rates may apply. Reply STOP to opt out or HELP for help. We do not share or sell your mobile number or SMS opt-in data with third parties or affiliates for marketing or promotional purposes. We share your number only with the SMS provider that delivers our messages.

Who we share data with

Service providers that help us run Tablepeak:

  • Render (application hosting and database, United States)
  • Cloudflare (DNS and network security)
  • Stripe (payments and billing)
  • xAI (AI reply drafting, see above)
  • Google (Google Business Profile, when you connect it)
  • Resend (email delivery)
  • Twilio (text message delivery, if you opt in to texts)

[Nic: confirm this list matches what's live at publish (website host; Resend and Twilio once enabled) and remove any not in use.] They may use the data only to provide their service to us. We may also disclose data if the law requires it or to protect rights and safety. We don't sell personal information.

Security

We use encryption in transit, access controls, and signed, expiring links for approvals. No system is perfectly secure.

Your choices and rights

You can view, change or delete your settings, disconnect Google, opt out of texts, or ask us to delete your data by emailing hello@tablepeak.com. Depending on where you live (for example, California), you may have more rights, such as access, correction and deletion, and we won't discriminate against you for using them. [Attorney review: state-specific disclosures.]

Children

Tablepeak is a business service and isn't directed to children under 13 (or 16 where applicable).

Changes

We'll post updates here and notify account holders of material changes.

DRAFT: needs legal review before publishing. Highlighted bracketed items are open questions for Nic or our attorney.