Privacy policy

Last updated: 3 September 2026

Download privacy policy as HTML

You can also print this page or save it through your browser.

This privacy policy explains how StarMagnet processes personal data when you use our website, app and services. StarMagnet is a trading name of GoDodo.

1. Who is responsible?

GoDodo, also trading as StarMagnet, is responsible for the processing described in this policy. Dutch Chamber of Commerce number: 50253743. VAT number: NL001881856B54. Registered address: Stationsplein 26, 6512 AB Nijmegen, the Netherlands. Contact: info@gododo.nl.

2. What data do we process?

We may process your name, email address, company details, account and subscription data, support messages, security and audit logs, and technical data such as IP address, browser and device information.

When you connect Google Business Profile, we may process Google account identifiers, OAuth permissions and tokens, business profiles, locations, reviews, ratings, review replies and related metadata. We also process the preferences and instructions you provide for draft replies, tone of voice and publishing.

On our public website, our own server measures whether a visitor views the page, reaches scroll milestones or interacts with the review cards, business demo and preview buttons. When a visitor leaves, we may also record active visit time, elapsed time, maximum scroll depth and whether an interaction occurred. We may store random visit and session identifiers, campaign labels, advertising click identifiers and a broad device category, such as mobile or desktop, operating system and screen-size category. We do not store a full browser profile for this analysis or use an external analytics pixel.

If you arrive through an advertisement, we may store campaign labels and a technical advertising reference. We do not use an OpenAI browser pixel for ChatGPT ads. If you then connect a Google location or start a paid subscription, our server sends OpenAI only the advertising reference, conversion type and time, plus the amount and currency where relevant. We do not send your email address, IP address, browser details, Google account data or review content to OpenAI for this measurement.

3. How do we use your data?

We use data to provide and secure StarMagnet, connect your Google Business Profile, show review insights, create and manage draft replies, publish replies when you enable that feature, manage subscriptions, send service messages, answer support requests and improve reliability.

We also use limited campaign and interaction data to understand how visitors use the website, where they may leave and which advertisements lead to a connected preview or paid subscription.

Our legal bases include performing our agreement with you, our legitimate interests in operating and securing the service, compliance with legal obligations and, where required, your consent.

4. Payments

Stripe processes subscription payments. StarMagnet does not store full card details. Stripe may process payment, billing, fraud-prevention and transaction data under its own privacy terms.

5. Google Business Profile

StarMagnet only accesses Google data after you grant permission through Google OAuth. We use that access to show and manage the business profiles, locations, reviews and review replies you select.

We do not sell Google user data, use it for advertising or use it to train general-purpose AI models. Review data is used only to deliver the StarMagnet features you request.

StarMagnet's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

You can revoke access in your Google account security settings or through StarMagnet where disconnection is available. Once access is revoked, StarMagnet can no longer retrieve new Google data or act on your behalf.

6. AI and draft replies

StarMagnet uses AI services to prepare review replies. We currently use Google Gemini through Google Cloud. The service may process review text, rating, business name and context, tone-of-voice settings, existing reply context and your additional instructions.

We send this information only to provide the requested functionality. We do not sell it or use it to train our own general-purpose AI models. AI output is a tool: review drafts before publishing, especially for complaints, sensitive information or third-party personal data.

7. Retention

We keep data only for as long as needed to provide the service, meet legal obligations, maintain security, administer accounts and provide support. Account and subscription data is normally retained while you are a customer and afterwards only where administration or law requires it.

Google OAuth tokens are retained while the connection is active. When you disconnect or request deletion, we delete or deactivate the tokens. Review data, drafts and settings are deleted or anonymised after cancellation or a valid deletion request where reasonably possible, except where temporary retention is needed for security, administration, support, disputes or legal obligations.

Audit logs, invoices and payment records may be retained longer where required for law, fraud prevention, security or support.

8. Service providers and international transfers

We share data only with providers needed to run StarMagnet, including hosting, database, email, payments, logging, support, AI and Google services. Examples include Google Cloud, Google Business Profile APIs, Gemini, Stripe and our transactional email provider. Following a visit through a ChatGPT ad, OpenAI may receive the limited server-side conversion message described above. We mark that event as opted out of future user-level personalisation. We do not sell personal data.

Providers may only process data for the agreed service and security purposes. Where required, we use data-processing agreements and safeguards such as standard contractual clauses. A data processing agreement for business customers is available on request at info@gododo.nl.

9. Security

We use appropriate technical and organisational measures, including encrypted connections, restricted access, encrypted storage for sensitive tokens, audit logging and separation between customer environments.

10. Your rights

You may request access, correction, deletion, restriction or transfer of your personal data. You may also object to certain processing or withdraw consent. Contact info@gododo.nl to exercise these rights, remove a Google connection or request an export.

If we cannot resolve your concern, you may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

11. Changes

We may update this policy when StarMagnet, the law or our working methods change. The latest version is always available on this page.