Privacy policy
Last updated: 3 November 2026
Asteraki drafts replies to Google reviews for local businesses. It is run by Tavlikos Automations & Websites in Thessaloniki, Greece (“we”). This policy explains what we collect, why, and what you can ask of us. Write to us at hello@asterakiapp.gr.
What we collect
- Your account: your name and email address, and what Google shares when you sign in with it (name, email address, profile picture). If you give it to us, your mobile number, to help you during your trial: a message if you get stuck and two short calls. You can remove it any time in Settings. If you signed up through a referral link, who referred you, so you both get the free month.
- Your business: its name, category, city and Google Maps listing, and its public Google reviews (with the reviewers’ names as Google shows them), rating and replies.
- Your settings and replies: tone, signature, the contact details you give for unhappy customers, and the drafts you approve or change.
- Customers you ask for a review (Growth plan): the name and email address you give us, and when they open the link to Google’s review form. We delete the name and email address 90 days after sending and keep only a cryptographic fingerprint of the address, so nobody is asked twice within 90 days, after they unsubscribe, or after their address bounces or they mark the email as spam.
- The waitlist: your email address, the language you used, where you joined (this website, the free tool or a demo page) and when you agreed to be emailed. We use it for one thing: to email you when Asteraki opens to businesses.
- The free tool: the Google Maps link you paste. We read that business’s public Google reviews to write the replies, and don’t keep the replies. To allow 3 lookups a day, we keep a cryptographic fingerprint of your IP address, never the address itself, and delete it the next day.
- Visits to this website: Cloudflare Web Analytics counts page views without cookies and without following you across other sites.
Why we use it
To provide the service you signed up for, keep it secure, bill you, and email you about your account. We don’t sell personal data and don’t use it for advertising.
Who processes it for us
We work with these providers, under data processing agreements:
- Supabase: database and sign-in, in Frankfurt (EU)
- Cloudflare: website hosting, visit statistics and the bot check on our forms (Turnstile)
- Anthropic: drafts the replies; it receives the review and your reply settings, not your customers’ contact details
- Resend: sends email
- Stripe: payments
- Apify: reads public Google reviews
- Google: sign-in and Business Profile
Some of them process data outside the EU. Those transfers rely on the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
How long we keep it
Your account and business data: while your account is open, and for 90 days after you cancel. Your customers’ contact details: 90 days after the request is sent. Your waitlist email: until we’ve emailed you about the opening, or less if you ask us to remove it. The free tool’s fingerprints of IP addresses: until the next day. Backups: 14 days.
Cookies
Only the ones that keep you signed in. No advertising or tracking cookies.
Your rights
You can ask to see, correct, export or delete your personal data, or object to how we use it. You can also complain to the Hellenic Data Protection Authority (www.dpa.gr).
Changes
We’ll post every change here, and email you before a change that affects you.