Privacy Policy
Last updated 16 August 2026
Rank and Reply is operated by RevivaCatch LLC, a Pennsylvania limited liability company. This page explains what information we handle, why, and who else sees it. It is written to be read, not to be skimmed past.
Who this covers
Two groups: business owners who hire us ("clients"), and people who contact us through this website. We do not run advertising, we do not build audience profiles, and we do not sell data to anyone under any circumstance.
What we access from Google
When a client adds us as a manager on their Google Business Profile and authorises our application, we access the following through Google's Business Profile APIs:
- The business listing itself — name, address, hours, categories, photos, and completeness of the profile.
- Posts on the profile, so we can publish new ones and see what is already there.
- Reviews left on the profile, including the reviewer's public display name, star rating, and review text, so we can draft replies.
We request a single Google permission scope, business.manage, because it is the only scope that permits publishing posts and review replies. We do not access Gmail, Google Drive, Google Ads, contacts, calendars, or any other Google product.
Rank and Reply's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide and improve the service described on this site. It is never sold, never used for advertising, and never used to train machine-learning or AI models.
Who else sees it
Drafting a post or a review reply means a language model has to read the material. We are direct about that because it is a real transfer of information, not a technicality.
- Anthropic processes the text we send for drafting — the topic of a post, or the text and star rating of a review being replied to. Anthropic's API terms state that inputs submitted through the API are not used to train their models. We send the review text and the reviewer's public display name where it appears in the review. We do not send addresses, phone numbers, or any customer contact details.
- Google receives the finished post or reply when your client approves it, because that is where it publishes.
- Telegram carries approval messages between our system and the client's phone. A draft post or reply passes through Telegram's servers on the way.
Some drafting and safety checking runs on models hosted on our own hardware, in which case the text does not leave our machines at all. Nobody else receives Google user data. We do not use subprocessors beyond those named here, and we will update this page before that changes.
What we store, and for how long
We keep drafts, approvals, edits, and rejections in a local database so the system learns a client's voice and does not repeat itself. That database holds post text, review text, and the approval decisions made against them. It lives on hardware we control and is not shared.
Clients may ask us to delete their data at any time, and we will do so within 30 days. Removing us as a manager on your Google Business Profile immediately ends our access regardless.
How to remove our access
You do not need to ask us. Open your Google Business Profile, go to Business Profile settings, then People and access, and remove Rank and Reply. Access ends immediately. You can also revoke the application at myaccount.google.com/permissions.
This website
This site is static, hosted on GitHub Pages. It sets no cookies, runs no analytics, and has no tracking pixels or advertising tags. It loads a web font from Google Fonts, which means Google's font servers receive your IP address as part of that request — the same as on most sites on the internet. There is no contact form; the only way to reach us here is email, and we keep those emails as long as the conversation is useful.
Security
Access credentials are stored on encrypted local storage and are never committed to source control or shared between clients. Each client's data is kept separate. We are a small operation and we do not pretend to hold enterprise certifications we have not earned.
Your rights
You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. Email us and we will handle it. We do not charge for this and we do not require a particular form of words.
Children
This is a service sold to businesses. It is not directed at anyone under 18 and we do not knowingly collect information from children.
Changes
If this policy changes materially, we will update the date at the top and email active clients before the change takes effect.
Contact
Email kaleb@rankandreply.com. A postal address is available on request and is included on every commercial email we send.