Privacy Policy for Vera

Vera (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Vera — our AI-powered marketing assistant for businesses (the “Service”).

This policy applies globally, including but not limited to the United States, European Union, and India. Future country-specific implementations may result in minor regional adjustments.

By using Vera, you agree to the practices described in this policy. If you do not agree, please refrain from using the Service.

1. Information We Collect

a. Account & Authentication

We use Google OAuth to authenticate your account and, with your explicit consent, to access and manage your Google Business Profile(s) on your behalf. This includes permissions to read and update your business listings, post photos, respond to reviews, and manage profile attributes such as name, address, hours, categories, and descriptions.

We do not access your Gmail inbox or any email content. All Google access is scoped strictly to Business Profile management and is governed by Google’s API Services User Data Policy.

With your explicit consent, we also use Instagram Login to connect your Instagram Business or Creator account through the Instagram Graph API. This grants permission to publish content, read and reply to comments and direct messages, and read engagement insights for the account you authorize.

We connect only to the Instagram Business or Creator account you authorize. We do not use Facebook Login, and we do not access any Facebook profile or Page, your personal Instagram content, or private messages unrelated to your business. All Instagram access is scoped strictly to managing your connected business presence and is governed by Meta’s Platform Terms and the Instagram Platform Policy.

b. Business Profile Data

In order to provide our services, we access and process data associated with your Google Business Profile(s), including:

• Business name, address, phone number, website, and operating hours
• Business categories, attributes, and descriptions
• Photos and media associated with your listing
• Customer reviews — including review text, ratings, and reviewer display names
• Questions and answers on your listing
• Performance metrics such as profile views, search impressions, and engagement data

c. Instagram Business Data

When you connect an Instagram Business or Creator account, we access and process data associated with that account via the Instagram Graph API, including:

• Account profile details (username, profile picture, bio, website, and follower / following counts)
• Media you publish or have published (photos, videos, reels, captions, and hashtags)
• Comments and replies on your posts
• Direct messages, mentions, and story replies sent to your business account
• Insights and metrics such as reach, impressions, profile visits, and engagement

d. Customer Inquiry & Message Data

When you enable customer-messaging features, Vera may receive and process customer messages sent to your business via Google Business Messages, WhatsApp, Instagram, RCS, SMS/MMS, or other connected channels. This includes inquiry text and contact details provided by the customer. This data is used to generate and deliver responses on your behalf and to operate and improve the Service.

e. Voice Commands

Vera supports voice-based instructions in 12+ languages. Voice input is processed to interpret your commands (e.g., “post this photo,” “update my hours”) and is not stored beyond the duration of the session unless required to complete the requested action.

f. Photos & Media

When you upload photos for enhancement or posting, Vera processes the image to apply automated adjustments (lighting, sharpness, color) and to generate clear, descriptive captions. Processed images may be posted to your Google Business Profile or connected Instagram account at your direction.

g. Usage & Device Data

We collect anonymized and non-personal data such as feature usage patterns, crash logs, and screen flows to improve the Service.

2. How We Use Your Data

We use the data we collect to:

• Authenticate your account and connect to your Google Business Profile(s)
• Monitor and display your customer reviews across locations
• Generate AI-drafted review replies for your approval and posting
• Enhance photos and post them to your business listing with clear, descriptive captions
• Claim, verify, and keep your Google Business Profile attributes and descriptions complete and accurate
• Publish photos, videos, and reels to your connected Instagram Business or Creator account with clear, descriptive captions and hashtags
• Monitor and respond to comments and direct messages on Instagram
• Respond to customer inquiries on Google, WhatsApp, Instagram, RCS, SMS/MMS, and other connected channels
• Process voice commands and execute the requested business actions
• Keep your business profile complete and accurate so it appears correctly across AI search platforms (e.g., ChatGPT, Gemini, Perplexity)
• Provide performance analytics across your business locations

Some features may be available only via a paid subscription plan.

We do not sell or rent your data to any third parties. Your mobile information — including phone numbers and text-messaging (SMS/MMS/RCS) opt-in and consent — will not be sold or shared with any third parties for promotional or marketing purposes.

3. AI-Generated Content

Vera uses artificial intelligence to draft review replies, photo captions, social media posts, profile descriptions, and inquiry responses. Content posted to your public profiles — such as review replies, photos, and posts — is presented to you for approval or published according to the settings you configure, so you stay in control of your public presence. On customer messaging channels such as WhatsApp, Instagram, RCS, and SMS/MMS, Vera can respond to customer inquiries automatically on your behalf, based on the settings you choose.

4. Data Security

We follow industry best practices, including:

• End-to-end security for sensitive data, both in transit and at rest
• OAuth 2.0 for Google Business Profile and Instagram access with minimal required scopes
• Secure API communication with token-based session management
• Access controls limiting who within our organization can view your data

You may revoke Vera’s access to your Google account at any time from your Google Account permissions page, and remove Vera from the Apps and Websites section of your Instagram settings.

5. Data Sharing

We only share your data:

• With Google, as required to manage your Business Profile via the Google Business Profile API
• With Instagram (operated by Meta), as required to publish content and manage your Instagram Business account via the Instagram Graph API
• With WhatsApp, RCS, SMS/MMS, or other connected messaging platforms, as required to deliver responses on your behalf
• To comply with legal obligations or enforceable government requests
• With third-party service providers under strict confidentiality for operations, hosting, or support

All of the categories above exclude text-messaging (SMS/MMS/RCS) originator opt-in data and consent. This information is not shared with any third parties for marketing or promotional purposes, and is not shared for any purpose unrelated to delivering the messages you have asked us to send.

6. SMS / MMS / RCS Text Messaging & Mobile Information

Vera may send text messages (SMS/MMS/RCS) to mobile numbers that have opted in — for example, account and service notifications, customer-inquiry alerts, and updates related to your business presence. Where you (or, through your business, your customers) provide a mobile number and opt in to receive text messages, the following applies:

• Consent. We send messages only to mobile numbers that have opted in to receive them. Opt-in to text messaging is never a condition of purchasing any goods or services.
• Message frequency & charges. Message frequency varies. Message and data rates may apply, depending on your mobile carrier and plan.
• Opt-out & help. You can opt out of text messages at any time by replying STOP to any message. Reply HELP for assistance, or contact us at care@magicpin.in.
• No sharing of mobile opt-in data. Your mobile information — including phone numbers and text-messaging (SMS/MMS/RCS) opt-in and consent — will not be sold or shared with any third parties for promotional or marketing purposes. Text-messaging (SMS/MMS/RCS) originator opt-in data and consent are excluded from all other categories of data sharing described in this policy and are not shared with any third party, except with the telecommunications/messaging vendors strictly necessary to deliver the messages you requested.

7. Sensitive & Special-Category Personal Data

Some messages your customers send to your business through Vera may contain sensitive personal information — for example, information treated under certain laws as a “special category” of personal data (such as Article 9 of the GDPR) or as “sensitive personal data” (such as under India’s DPDP Act and the SPDI Rules). Where Vera processes such information:

• We process it only to generate and deliver responses on your behalf. We do not use it for advertising, and we do not use customer message content to train AI models.
• We apply data minimization and restrict internal access to those who need it to operate the Service.

Because this information belongs to your customers, you (the business) are the controller of your customers’ personal data, and Vera acts as a processor on your behalf. You are responsible for providing any notices to, and obtaining any consents from, your customers that applicable law requires before sharing their information with Vera.

8. Data Retention

Your data is retained only as long as necessary to deliver the Service or as required by applicable law. Review responses, posted photos, published Instagram content, and profile changes made through Vera remain on your Google Business Profile or connected Instagram account and are subject to Google’s and Instagram’s own data policies. You may request deletion of your Vera account data at any time by contacting us.

9. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access, correct, or delete your personal data held by Vera
• Withdraw Google and Instagram permissions at any time
• Disconnect connected channels (WhatsApp, Instagram, RCS, etc.) at any time
• Opt out of non-essential analytics
• Request a copy of the data we hold about your business

You can exercise these rights by contacting us at care@magicpin.in.

10. International Data Transfers

We may process and store your data in countries including India and the USA. We ensure compliance with data transfer and localization laws such as: GDPR (EU/UK), CCPA (California, USA), DPDP Act (India).

11. Children’s Privacy

Vera is intended for use by business owners and operators, and is not directed at users under the age of 18. We do not knowingly collect data from minors.

12. Policy Updates

We may update this Privacy Policy as needed. Changes will be posted on this page with a revised “Effective Date.” Continued use of Vera constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions or concerns, please contact us at: