← Back

Privacy Policy

Last updated: April 2026

1. What we collect

When you sign in with Google, we receive your name, email address, and profile photo from Google. We store this to identify your account. We also collect business details you enter during onboarding (business name, category, Google Place ID) and any POS sales data you choose to upload.

2. How we use your data

Your data is used solely to generate your business health score and AI-powered insights. We call the Google Places API to fetch your business reviews and nearby competitors, and we call the Anthropic Claude API to generate insights. We do not sell your data to third parties.

3. Data storage

Your data is stored in Supabase (PostgreSQL) hosted on AWS infrastructure. POS records and health scores are associated with your account and retained indefinitely unless you request deletion.

4. Third-party services

We use Google OAuth for authentication, Google Places API for business data, Anthropic Claude API for AI insights, and Supabase for database hosting. Each of these services has its own privacy policy.

5. Cookies & sessions

We use cookies only to maintain your login session via Supabase Auth. We do not use advertising or tracking cookies.

6. Your rights

You can request deletion of your account and all associated data at any time by emailing us. We will process deletion requests within 30 days.

7. Contact

For privacy-related questions or data deletion requests, email us at privacy@refloat.in.

Refloat — AI-powered business health insights for Indian MSMEs · Terms of Service