Privacy Policy

1. Who we are

Favoured is a registered business name of MHG Studio Pty Ltd (ABN 44 671 356 399), an Australian company (“we”, “us”, “our”). Our registered address is 71 Ross Street, Tatura VIC 3616, Australia.

We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You can contact us about privacy at any time at support@favoured.app.

2. Two kinds of people in this policy

Favoured is business software, so there are two groups whose information passes through it, and they are treated differently.

• Customers — businesses that hold a Favoured account. We are the controller of their account information and decide how it is handled.
• End customers — the members of the public a Customer asks for a review. We process their information on that Customer’s instructions, as a service provider. The Customer is responsible for having a lawful basis to contact them. If you received a message from us and want your details removed, see Information about end customers.

3. What we collect

From Customers

• Name, business name, email address, phone number and password
• Business location details, including address and trading hours
• Billing information. Card details are entered directly with our payment processor and are never stored on our systems
• Product usage data — pages visited, features used, and error diagnostics

From end customers

• Name and mobile number or email address, as uploaded or entered by the Customer
• The star rating and any written feedback submitted on a review page
• Message delivery status, and limited technical data such as the time a review page was opened

We do not sell this information, use it for our own marketing, or share it with anyone other than the Customer who collected it and the subprocessors listed below.

4. Information from Google

If a Customer chooses to connect their Google Business Profile, they authorise the connection through Google’s own consent screen. We request the business.manage scope, which lets us access and manage the Google Business Profile data described here.

What we access and why

• Business accounts and locations — to let the Customer choose which locations to manage, and to attach reviews and reports to the correct location.
• Reviews and review replies — to display reviews in the Customer’s inbox and website widgets, and to publish replies the Customer writes.
• Business information — hours, description, phone, website, address, categories and photos — to let the Customer edit them in Favoured and publish changes to Google.
• Posts — to create, schedule and publish Google posts on the Customer’s behalf.
• Profile performance data — to show the Customer how people find and contact their business.

How we store it

Access and refresh tokens are encrypted at rest and used only to make API calls for the Customer who granted them. We cache Google data (reviews, business information, performance metrics) so the application loads quickly and so historical trends can be shown over time. Cached data is stored in Australia and is isolated per Customer account.

Limited Use

Favoured’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we do not:

• sell Google user data;
• use Google user data for advertising, including retargeting or personalised advertising;
• use Google user data to train generalised artificial intelligence or machine learning models;
• allow humans to read Google user data, except with the Customer’s explicit permission, where necessary for security purposes or to resolve a support request, or where required by law.

Disconnecting

A Customer can disconnect Google at any time from their Favoured account settings, or by revoking access at myaccount.google.com/permissions. On disconnection we delete the stored tokens immediately and delete cached Google data within 30 days.

5. Artificial intelligence features

Some features use third-party AI providers — for example, drafting a suggested reply to a review, or checking whether AI assistants recommend a business. Where a feature sends content to an AI provider, we use business or enterprise API tiers under agreements that prohibit the provider from using the content to train their models. We do not send end customer contact details to AI providers.

6. How we use information

• To provide, operate and support the service
• To send review requests and reminders on behalf of our Customers
• To process payments and manage subscriptions
• To produce analytics, rankings and competitor reports
• To detect, prevent and investigate fraud, abuse and security incidents
• To meet our legal obligations

7. Who we share information with

We do not sell personal information. We share it only with service providers who help us run Favoured, each bound by contractual confidentiality and security obligations:

• Supabase — database, authentication and file storage (hosted in Sydney, Australia)
• Vercel — application hosting and content delivery
• Twilio — SMS delivery
• Resend — transactional and review request email
• Stripe — payment processing and subscription billing
• Google — Google Business Profile data, as described above
• Inngest — scheduling and processing of background jobs
• Sentry and PostHog — error monitoring and product analytics
• Search and AI data providers — used to produce ranking and competitor reports. These receive search terms and location data, not personal information.

Some of these providers are located outside Australia, primarily in the United States and the European Union. Where information is disclosed overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

We may also disclose information where required by law, or in connection with a sale or restructure of our business, in which case the recipient will be bound by terms no less protective than this policy.

8. How long we keep information

• Customer account data — for the life of the account, then deleted within 90 days of closure, except where we must retain records for tax or legal purposes.
• End customer contacts and message logs — for the life of the Customer’s account, or until the Customer deletes them.
• Cached Google data — until the connection is removed, then deleted within 30 days.
• Billing records — seven years, as required by Australian law.

9. Security

Information is encrypted in transit and at rest. Access to production systems is restricted, protected by multi-factor authentication, and logged. Customer accounts are isolated from one another at the database level. No system is perfectly secure, but if a data breach occurs that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

10. Your rights

You may ask us to access, correct or delete the personal information we hold about you, or to stop receiving messages. Email support@favoured.app and we will respond within 30 days.

If your details were uploaded by one of our Customers, we will usually need to refer your request to that business, since the information belongs to them. We will tell you who they are and help where we can.

To stop receiving review requests by SMS, reply STOP to any message. To stop receiving them by email, use the unsubscribe link in the footer.

If you are unhappy with how we have handled a privacy matter, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

11. Cookies

We use cookies that are necessary to keep you signed in and to keep the service secure, and analytics cookies that help us understand how the product is used. We do not use advertising cookies or third-party tracking pixels.

12. Children

Favoured is business software and is not directed at children. We do not knowingly collect personal information from anyone under 16.

13. Changes to this policy

We may update this policy from time to time. If a change materially affects how we handle your information, we will notify account holders by email before it takes effect. The date at the top of this page always reflects the current version.

14. Contact us

MHG Studio Pty Ltd (trading as Favoured)
71 Ross Street, Tatura VIC 3616, Australia
support@favoured.app