This policy explains what information the Service collects, how we use it, how we store and share it, and the choices available to you. It covers data we obtain when a Business connects its Google or Yelp account to use ULAN’s review-management features, as well as the operational data of the Businesses that use the Service.
ULAN is operated by TP Plastic USA, a California corporation. For any privacy question or data request, contact us at info@shipstar.vn.
When a Business owner or an authorized manager connects their Google Business Profile to ULAN, they grant us access using the Google OAuth scope https://www.googleapis.com/auth/business.manage. Through that grant we access only the following Google user data, and only for the locations the connecting account manages:
We do not request access to a user’s personal Gmail, Drive, Contacts, Calendar, location history, or any Google data beyond the Business Profile of the connected Business.
We use Google user data solely to provide and improve these user-facing review-management features that the Business explicitly turned on. We do not use it for advertising, and we do not use it to build profiles for any purpose unrelated to the Service.
OAuth refresh tokens and the reviews we retrieve are stored in our managed Postgres database (Supabase), encrypted at rest, scoped to the connecting Business. We retain this data only while the Business remains connected. When a Business disconnects, or on written request to info@shipstar.vn, we delete the stored reviews and revoke and delete the associated tokens.
We do not sell Google user data or any other personal data, and we do not share it with third parties for their own purposes. We share data only with service providers that process it on our behalf, strictly to operate the Service:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Database & storage | Tokens, reviews, replies |
| Vercel | Application hosting | In-transit request data |
| Anthropic (Claude) | Drafting reply text | Review text + rating, sent transiently to generate a reply; not used to train models |
We may also disclose data where required by law.
Limited Use disclosure. ULAN’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
If a Business connects Yelp, we use the Yelp Fusion API (read-only) to retrieve a limited number of recent public review excerpts and ratings for that Business, used the same way as above to display reviews and draft replies. Yelp provides no API to post replies; any reply posting to Yelp is performed manually by an authorized operator.
Businesses use ULAN to run salon operations (appointments, point-of-sale, customer records, staff, and optional in-salon face check-in). Each Business is the controller of its own customer data; ULAN processes it on that Business’s behalf to provide the Service. Where a Business enables the optional face check-in feature, biometric data is handled under that Business’s own posted notice and applicable law, and is not used for any purpose other than check-in.
A connected Business can revoke the Service’s access to its Google or Yelp data at any time:
Revoking access stops all further data retrieval and reply posting, and we delete the stored data as described in section 4.
Data is transmitted over TLS and stored encrypted at rest. Access to production credentials is restricted to authorized personnel. No method of transmission or storage is perfectly secure, but we work to protect your information using industry-standard measures.
ULAN is a business tool and is not directed to children under 13, and we do not knowingly collect their personal information.
We may update this policy from time to time. Material changes will be reflected by the effective date above and, where appropriate, communicated to connected Businesses.
TP Plastic USA
2001 S Susan St, Santa Ana, CA 92704, USA
info@shipstar.vn