Privacy Policy

Effective Date: April 25, 2026

This Privacy Policy describes how Four Thousand LLC ("we," "us," or "our"), collects, uses, and discloses information when you visit our website at golavora.com (the "Site") or use our services (the "Services").

By accessing the Site or using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Site or Services.

1. Information We Collect

We collect information in the following categories:

A. Information You Provide Directly

• Client account information: Business name, owner name, email address, phone number, business address, and any other information you provide during onboarding.
• Booking information: When you schedule a call through our Calendly integration, Calendly collects your name, email, and meeting preferences on our behalf.
• Payment information: When you subscribe to our Services, payment is processed by Stripe. We do not store your full payment card details. Stripe provides us with limited information including subscription status, billing cycle, and the last four digits of your payment method.
• Communications: Any information you share with us via email, SMS, or other communication channels.

B. Information Collected Through Service Delivery

When you authorize us to provide Services on your behalf, we may collect, access, and store:

• Google Business Profile data: Through OAuth 2.0 authorization, we access your Google Business Profile to read customer reviews, business information, and to post review responses on your behalf. Access is scoped strictly to the permissions you grant.
• Customer contact information: Customer names and phone numbers that you provide to us (typically via SMS) for the purpose of sending automated review requests.
• SMS interaction data: Records of SMS messages sent and received through our Twilio integration, including review request messages and customer replies.
• AI-generated content: Review responses and other content generated by AI on your behalf, including drafts and posted versions.
• Service usage data: Logs of how the Services operate on your account, including review request volume, response activity, and reporting metrics.

C. Information Collected Automatically

When you visit the Site, our hosting provider may automatically collect standard server log information such as IP address, browser type, pages visited, and timestamps. This information is used for security and operational purposes.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Services
• Send automated review request messages on behalf of clients to their customers
• Generate and post AI-generated review responses on behalf of clients
• Produce monthly intelligence reports for clients
• Communicate with clients about their accounts, billing, and Service updates
• Respond to inquiries and provide customer support
• Improve the Services and develop new features
• Comply with legal obligations and enforce our Terms of Service

3. How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

A. Service Providers

We share information with third-party service providers who help us operate the Services, including:

• Stripe - payment processing
• Twilio - SMS message delivery
• Google - Google Business Profile API access
• Calendly - call scheduling
• Anthropic - AI processing for review response generation
• Cloud hosting and infrastructure providers

These providers are bound by their own privacy obligations and are permitted to use information only as necessary to provide services to us.

B. Legal Requirements

We may disclose information if required by law, subpoena, court order, or governmental request, or to protect the rights, property, or safety of Four Thousand LLC, our clients, or others.

C. Business Transfers

If Four Thousand LLC is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

4. Google API Services User Data

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We access Google Business Profile data only to provide the Services you have authorized. We do not use Google user data for advertising, do not transfer Google user data to third parties except as necessary to provide the Services, and do not allow humans to read Google user data unless we have your explicit consent, are required to for security purposes, to comply with applicable law, or for limited operations or development purposes.

5. Data Retention

We retain client information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your data by contacting us at hello@golavora.com.

6. Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have rights regarding your personal information, including the right to access, correct, delete, or restrict the use of your data. To exercise these rights, contact us at hello@golavora.com.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and to request deletion. We do not sell personal information.

If you are in the European Economic Area or United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with a supervisory authority.

8. Children's Privacy

The Services are not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at hello@golavora.com and we will delete it.

9. Third-Party Links

The Site may contain links to third-party websites. We are not responsible for the privacy practices of those sites. Review the privacy policies of any third-party site before providing them with your information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Effective Date" at the top of this policy. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:

Four Thousand LLC
5900 Balcones Drive, STE 100
Austin, TX 78731
hello@golavora.com