Privacy Policy

Visitors of the site

You can read the site without an account. We do not sell personal data and we do not show third-party advertising.

Our server keeps standard technical logs (IP address, browser, requested page) for security and error fixing. Logs are deleted automatically.

Staff accounts

The admin area is only for Commune staff. For a staff account we keep the email or phone number used to sign in and the actions done in the admin area.

Google Business Profile data

Commune staff can connect the Google Business Profile of Commune to the admin area. With your permission, the site uses the Google scope business.manage to read the locations and reviews of this profile and to publish replies to reviews.

We store the OAuth token, the list of locations, and the reviews: author name, rating, text, date, and our reply. We use this data only to show the reviews to Commune staff, to prepare and publish replies, and to find common reasons in the reviews.

Use of Google user data

The use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell Google user data, do not use it for advertising, and do not transfer it to third parties, except the AI model provider that writes a draft reply. That provider receives only the review text and rating and does not use them to train its models.

Storage and security

Data is stored on our own server and is sent only over encrypted connections. Only Commune staff with an admin account can see it.

Delete your data

You can disconnect Google access at any time in your Google Account (Security → Third-party connections). After that the site stops reading data from Google.

To delete the stored token and reviews, write to phuketcommune@gmail.com. We delete them within 30 days.