Privacy Policy

Who this policy covers

This policy explains how GravyBlock ("we", "us") handles information when you visit gravyblock.com, run a free scan, subscribe, connect accounts, or receive email from us. It also covers how we handle publicly available business information when we prepare visibility reports and contact relevant organizations.

Information we collect

• Scan and report information. The business name, city or address, and website you enter, plus public information we retrieve about that business (for example its Google listing, public reviews, and the content of its website). If you unlock a report we also collect your name and email address.
• Account and billing information. Your email address and business details when you subscribe. Payments are processed by Stripe; we do not receive or store your full card number. We keep Stripe customer and subscription identifiers and your billing email.
• Connections you authorize. If you connect your website (WordPress, Webflow or Shopify), Google account (Search Console and Business Profile), Facebook Page, or a booking or invoicing system, we store the credentials or access tokens needed to perform the work you authorized, and the data those connections return (for example search queries, reviews, and customer contact details used to send review requests).
• Messages you send us. Anything you submit through the contact, support or feedback forms, or by email.
• Usage and device information. Pages viewed, which steps of the scan, pricing and checkout flow were reached, referring page, and basic technical data such as browser type. We use this to run and improve the service.
• Email activity. Whether an email we sent was delivered, bounced, opened or clicked.

How we use it

• To produce your visibility report and perform, verify and report on the work in your plan.
• To process subscriptions, send receipts and service messages, and provide support.
• To send you your report and, if you asked for it or are a prospective customer, related follow-up email. Every marketing email includes an unsubscribe link.
• To measure how visitors move from scan to report to checkout, and to improve the product and site.
• To keep the service secure, prevent abuse, and meet legal obligations.

Contacting businesses and organizations

GravyBlock sends two kinds of outreach email to people who have not signed up. First, we may email a business a short note about a visibility report we prepared for it. Second, on behalf of a subscribed customer, we may email a relevant local organization, association or publication to ask whether it would mention or link to a useful page.

We send these only to an address the recipient has published on its own website, and we do not guess addresses. Each message includes a working opt-out. Opted-out and suppressed addresses are never contacted again. To opt out, use the link in any message or email support@gravyblock.com.

Who we share information with

We do not sell your personal information. We share information only with service providers that help us run GravyBlock, and only as needed:

• Stripe (payment processing).
• Resend (sending and delivery tracking for email).
• Google (Places, Search Console and Business Profile data you authorize, and Google Analytics for site usage).
• Meta (Facebook Pages and Instagram, if you connect them).
• AI model providers, through OpenRouter, which process business information such as website text and public listing details to draft content and check AI search visibility. We do not send card numbers or login passwords to these providers.
• Our hosting and infrastructure providers.
• Authorities or other parties where required by law or to protect rights and safety.

Content GravyBlock publishes for you (articles, Google Business Profile posts, social posts) is public once it is published to your website or profiles.

Cookies and analytics

We use a small number of cookies:

• gb_customer_session: keeps you signed in to your workspace.
• gb_visitor: a random identifier that lets us connect the steps of one visit (scan, report, pricing, checkout). It contains no personal information. It lasts up to 90 days.
• gb_attr: if you arrive from one of our emails, an opaque code that tells us which message led to your visit. It is not your email address. It lasts up to 90 days.
• Google Analytics: sets its own cookies to report aggregate site traffic.

You can block or delete cookies in your browser settings; the site works without the analytics cookies.

How long we keep information

We keep information for as long as it is needed to provide the service, keep business and tax records, resolve disputes and meet legal obligations. If you cancel, connected-account credentials stop being used. You can ask us to delete your data at any time (see below).

Security

We use access controls, signed and verified webhooks, and fail-closed sending safeguards to protect the service. No system is perfectly secure, so we cannot guarantee absolute security. You can revoke GravyBlock's access to your Google, Facebook or website accounts at any time from those accounts' own settings.

Your choices and requests

You can ask us to access, correct or delete the information we hold about you, to stop using a connection, or to stop contacting you. Email support@gravyblock.com and we will respond by email. Depending on where you live, you may have additional rights under local law, and we will honor those requests to the extent they apply.

Children

GravyBlock is a business service and is not directed to children. We do not knowingly collect information from children.

Changes to this policy

We may update this policy as the service changes. The date below shows the latest revision. Material changes will be reflected on this page.

Contact

Privacy questions or requests: support@gravyblock.com. See also our Terms of Service.