Privacy Policy

SureWay AI, operated by SureWay Ventures LLC

Effective date: May 29, 2026  ·  Last updated: August 13, 2026

This Privacy Policy explains what information SureWay Ventures LLC ("SureWay AI," "we," "us," or "our") collects, how we use it, and the choices you have. It applies to our website at sureway.ai and to the automation services we build and operate for our clients.

We keep this short and plain on purpose. If anything here is unclear, email us at zach@sureway.ai and we will explain it.

Who We Are

SureWay AI is an automation consultancy based in Wilmington, Massachusetts. We build custom automation systems for small service businesses, including a system that reads and replies to Google reviews on a client's behalf. When we build that system for a client, we act on that client's instructions and only with their explicit permission.

Information We Collect

Information you give us directly

• Contact details you share with us, such as your name, business name, email address, and phone number, when you inquire about or engage our services.
• Messages and files you send us in the course of a project.

Information collected through our website

• Basic, standard analytics such as pages visited and general device information. We do not use this to build advertising profiles.

Information we access on a client's behalf (Google data)

When a client authorizes us to manage their Google Business Profile, we access certain Google account data through Google's APIs. This is described in detail in the Google User Data section below.

Google User Data

Scopes we request

To operate the review management system, we request the following Google OAuth scope when a client connects their account:

• https://www.googleapis.com/auth/business.manage: manage Google Business Profile listings, including reading reviews and posting replies on the client's behalf.

What data we access and why

• Google Business Profile content (business name, listing details) so the system knows which listing it is working with.
• Reviews and ratings posted to the client's listing, including the review text, star rating, reviewer display name as shown by Google, and timestamps. We read these so the system can classify each review and prepare a reply.
• Replies that the system drafts and, where authorized, publishes back to Google. Replies to 4 and 5 star reviews may be published automatically; replies to 1 through 3 star reviews are emailed to the client for one click approval before anything is posted.
• An OAuth refresh token, which lets the system continue to act on the client's behalf without asking them to sign in repeatedly.

We use this data for one purpose only: to provide the review management service the client hired us to run. We do not use it for anything else.

How long we keep it

• OAuth refresh tokens are kept only as long as the client's engagement is active. They are deleted when the client revokes access or the engagement ends.
• Review text, ratings, and replies are kept for the duration of the engagement so the system can operate and so we can show the client a history of activity. We delete this data within 30 days of a deletion request or the end of the engagement.

What we do not do with Google data

• We do not sell Google user data.
• We do not use it for advertising or to build advertising profiles.
• We do not use it to train, retrain, or improve any machine learning or AI model. Review text is sent to OpenAI's API only to generate a draft reply, and per OpenAI's API terms that data is not used to train OpenAI's models.
• We do not transfer it to others except the limited service providers listed below that are necessary to run the system.

How to revoke our access

A client can disconnect SureWay AI from their Google account at any time. You can do this yourself at https://myaccount.google.com/permissions, or email us at zach@sureway.ai and we will revoke the token and delete the associated data. Revoking access stops the system from reading or replying to any further reviews.

How We Store and Protect Data

The review management system runs on n8n Cloud, a managed workflow automation platform. OAuth tokens, review data, draft and published replies, and basic metadata (such as timestamps and business name) are stored within that managed environment. Access is limited to SureWay AI. We do not store payment card information, and we do not collect personal information beyond what Google itself surfaces in a review.

Service Providers We Use

We rely on a small number of trusted providers to deliver the service. Each one only receives the data it needs to do its job:

• Google LLC: the source of the Business Profile and review data, accessed through Google's APIs.
• OpenAI, L.L.C.: generates draft replies from review text. Per OpenAI's API terms, this data is not used to train OpenAI's models.
• n8n GmbH (n8n Cloud): runs the automation workflows and stores the operational data described above.
• Publer: schedules and publishes the client's bilingual Business Profile posts. Publer is used for posting content only and does not receive review data.

We do not sell or rent your information to anyone.

Your Choices and Rights

• Access and deletion. You can ask us what data we hold about you and request that we delete it. Email zach@sureway.ai and we will respond promptly, typically within 30 days.
• Revoke Google access. See the Google User Data section above.
• Correct your information. Tell us if anything we hold is inaccurate and we will fix it.

SMS/Text Messaging

If you call one of our business phone lines or book an appointment through our scheduling link, we may send you a text message in direct response, such as a booking link or appointment confirmation. Message frequency varies and is low, typically one to two messages per inquiry. Message and data rates may apply.

We do not share, sell, or rent mobile phone numbers or SMS opt-in data with any third parties or affiliates for marketing purposes. You can opt out at any time by replying STOP, or get assistance by replying HELP.

Children's Privacy

Our services are for businesses. They are not directed to children under 13, and we do not knowingly collect information from children.

Changes to This Policy

If we change this policy, we will update the date at the top of this page. Significant changes that affect how we handle Google user data will be communicated to affected clients directly.

Contact Us