Privacy Policy

Detent is a local SEO operations product for agencies, available at getdetent.com. This policy describes how we collect, use, store, and share personal information when you use the public site, create an account, or use the application.

Privacy questions: support@getdetent.com.

This policy covers the Detent website and application, account data we store, and business data you or your clients provide or that we collect to run audits, reports, and connected services. It also covers sign-in with Google, Apple, and similar providers. Use of the product is also governed by our Terms of Service.

When you create an account or join an organization we may store:

• Name, email address, and profile image
• Hashed password, if you sign up with email and password
• Organization name, membership, and role
• Settings you enter in the app

We use this information to authenticate you, run your workspace, send invitations, and deliver transactional email such as account and product notices.

If you choose to sign in with Google, Apple, or another provider, we receive the basic profile that provider shares for authentication, typically your name, email address, and profile image. We use that information to create or match your Detent account and keep you signed in.

We request only the permissions needed for the feature you start. You can revoke a provider’s access from that provider’s account settings. Revoking access may prevent sign-in or disconnect a related integration.

When you connect a Google account beyond basic sign-in, for example to work with a Google Business Profile, we access the Google data required to provide the feature you turned on. That can include business profile details, locations, posts, photos, and reviews you authorize us to read or manage.

We use Google user data only to:

• Authenticate you and secure your session
• Provide the audits, reports, drafts, and publishing actions you request for a business in your workspace
• Show you the status of those connections

We do not sell Google user data. We do not use it for advertising, and we do not use it to train generalized or public AI models. We do not transfer it to others except to service providers that process it on our behalf to operate Detent, or when you direct us to publish or share it (for example, a client report or a post you approve).

Detent’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Agencies use Detent to run audits and manage clients. Depending on what you enter or connect, we may store:

• Business names, websites, addresses, phone numbers, and categories
• Audit results, rankings, competitor comparisons, and related research from public sources and data providers
• Photos, notes, and other files submitted through client intake
• Draft and published content, including Google Business Profile posts and review responses
• Reports you generate and the people you send them to

You are responsible for having the right to provide business and client information to Detent. We use that information to deliver the product to your organization.

Some features draft content from business context you already store in Detent, such as services, reviews, and recent activity. When you use those features, we send the context needed for the draft to a model provider acting as our processor. We do not use your content or Google user data to train public models.

We use subprocessors to host and operate Detent. They process data only on our instructions and for the purposes in this policy. They include:

• Convex — application database, authentication records, and backend
• Stripe — billing and credit purchases. We do not store full payment card numbers.
• Resend — transactional email
• PostHog — measures traffic on the public site (pages viewed, session duration, and web vitals) and measures product usage in the signed-in app. Signed-out visitors are not stored as person profiles.
• DataForSEO — local search, maps, and website research used in audits
• Google and Apple — sign-in, and Google services you choose to connect

Hosting and model providers may also process data as needed to deliver the site and AI drafts. Third-party products you connect remain governed by their own terms.

We use cookies from our authentication provider (Better Auth) to keep you signed in. These cookies are required for the product to work. We use PostHog to measure traffic on the public site (pages viewed, session duration, and web vitals) and to measure product usage in the signed-in app. Signed-out visitors are not stored as person profiles. We do not use third-party advertising cookies on the public site. You can control cookies in your browser. Blocking essential cookies will prevent sign-in.

We share personal information only:

• With members of your organization, according to their role
• With service providers listed above, to operate Detent
• With a client or recipient when you send a report or publish content
• If required by law, to protect rights and safety, or as part of a merger or acquisition of the business

• We do not sell personal information.
• We do not use Google user data for advertising or to train generalized AI models.
• We do not use client business data for any purpose other than providing Detent to the organization that provided it.

We keep account, organization, and business data for as long as the workspace needs it to provide the service, and for a limited period afterward where we must keep records for security, billing, or legal reasons.

You can disconnect a sign-in provider or a connected Google account from the provider’s security settings. To delete your account or a client’s data from Detent, email support@getdetent.com from the address on the account. We will confirm the request and delete the data we are not required to retain.

We use access controls, encrypted connections, and hashed credentials to protect data. No method of transmission or storage is completely secure. You are responsible for keeping your password and connected accounts safe and for limiting who you invite into your organization.

Depending on where you live, you may have the right to access, correct, delete, or export personal information, or to object to certain processing. Email support@getdetent.com to make a request. We may need to verify that you control the account. If we deny a request, we will explain why and how to appeal where the law requires it.

Detent is a business product and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy as the product or our providers change. The date at the top of this page shows when it was last revised. If a change materially affects how we use personal information, we will provide a more prominent notice, such as an email or an in-app message. Continued use after an update means you accept the revised policy.

Detent — privacy requests and questions: support@getdetent.com.