You’re trusting Lamppost with your customer list and your reviews. This page explains, in plain terms, how we look after them. If you have a question it doesn’t answer, write to support@getblythe.com.

Your data stays yours

Every business’s data is kept apart from every other business’s. Each request the app makes is scoped to your business, and the database enforces it too: row-level security is switched on for every table that holds business data, and the app connects with a restricted database account that can only see the business it’s working for and can’t change the database’s structure. Automated tests fail if a table is ever missing that protection.

Encryption

• Everything travels over HTTPS (TLS 1.2 or higher), including the connection between our app and its database, which is on a private network.
• Your data, our backups, uploaded files and stored secrets are encrypted at rest with Google Cloud’s standard encryption (AES-256).
• Sign-in is handled by Clerk. We never see or store your password.
• The keys to accounts you connect, such as your Google Business Profile, are kept in Google Secret Manager, not in our database or code.
• Card details are held by Stripe, never by us.

Where your data lives

Your data is stored and processed in the United States, on Google Cloud. Our database and app run in Iowa, and AI drafting runs in Ohio. Real customer data is kept only in our production environment; our test environments use made-up data.

Who can see it

• Your team, according to the role you give each person (owner, manager or staff).
• Lamppost staff, only through an internal tool limited to a short list of named people. To help with a support question we can view your account in a read-only, time-limited mode. Every view and every change is recorded in our audit log, and changes need a written reason.
• Nobody at Lamppost browses customer lists. Our internal tool has no screen that lists a business’s customers.

Texts and emails to your customers

• Texts need consent. We only text customers you’ve recorded as agreeing to texts, never during your quiet hours, and a reply of STOP is honored straight away.
• Every email can be unsubscribed from in one click. Review-request emails carry your business’s postal address and an unsubscribe link that takes effect immediately. Bounced emails and spam complaints stop further email too.
• No review gating, no incentives. Every customer gets the same link to leave a public review, as Google’s rules and the FTC require.

How we use AI

Reply drafts are written by Anthropic’s Claude models, which we use through Google Cloud’s Vertex AI. To write a draft, the model sees the review, the reviewer’s public display name, your business’s details and your reply-voice settings. It never sees your customers’ phone numbers or email addresses.

We use Claude through Google Cloud’s Vertex AI under Google’s enterprise terms, which don’t allow what we send to be used to train AI models without our permission. We haven’t given it, and we don’t use your data or your customers’ data to train AI models either.

Replies to 1–3★ reviews always wait for you. Replies to 4–5★ reviews can post on their own after a waiting period, which you can turn off in Settings. Every reply is checked against our reply rules before it posts: no refunds or discounts offered in public, no promises, no personal details, no admitting fault.

Error reports and analytics

We use Sentry to catch errors and PostHog to see which features get used. Before anything is sent to either, customers’ names, phone numbers and email addresses are stripped out, along with request contents and the private links we email and text. We don’t record screens or sessions.

Backups, export and deletion

• The database is backed up every day. We keep the last 30 daily backups and can restore to any moment in the last 7 days.
• You can export your data whenever you like from Settings.
• If you delete your account, deletion takes effect after a 30-day grace period and your data is deleted within 90 days. Copies in backups expire on their own schedule.

Companies that help us run Lamppost

• Google Cloud: hosting, database, file storage and AI access. Holds all business and customer data.
• Anthropic, through Google Cloud Vertex AI: drafts review replies from review text and your business details.
• Twilio: review-request texts (not switched on yet). Sees customers’ phone numbers and the message.
• Twilio SendGrid: email. Sees email addresses, first names and the message for review-request emails, and our emails to you.
• Clerk: sign-in and team accounts. Sees your team’s names and emails, never your customers’.
• Stripe: billing. Sees your billing details, never your customers’.
• Sentry: error reports, with personal details removed.
• PostHog: product analytics, with personal details removed.
• Upstash: rate limiting to stop abuse. Sees IP addresses.
• Google Workspace: our own email, including anything you send us.
• Slack: internal alerts. Never your customers’ details.

Our Privacy Policy explains what we collect and your rights.

Reporting a security problem

If you think you’ve found a vulnerability, please email security@getblythe.com with what you found and how to reproduce it. We aim to reply within two business days. Please don’t access or change other people’s data, and give us a chance to fix the problem before telling anyone else. We don’t run a paid bug bounty.