Privacy Policy

ReBoost Hub is a software platform operated by Reboost Marketing L.L.C. It helps local service businesses manage their online presence, including SEO audits, local citation submissions, review monitoring, social scheduling, and rank tracking. Our contact email is contact@reboosthub.com.

We collect the following categories of information:

• Account information. Name, email address, password hash, business name, business address, phone number, website URL, and niche or industry. You provide this when you sign up or update your profile.
• Business listing data. Information you enter to submit to local directories, including hours, services, and descriptions.
• Connected account credentials. When you connect a third-party account such as Google Business Profile, Gmail, or a social network, we store the OAuth refresh token and the minimum profile information required to call that service on your behalf. We never receive or store the password for those accounts.
• Usage data. Logs of which features you use, requests made to our backend, error reports, and timestamps. This is used to operate the service and diagnose issues.
• Payment information. Payments are processed by Stripe. We receive the subscription status and the last four digits of your card, but not your full card number. Refer to Stripe's privacy policy for how they handle card data.

• To operate the features you signed up for, such as running audits, submitting citations, fetching your reviews, and scheduling posts.
• To authenticate you and keep your account secure.
• To send transactional emails such as receipts, verification messages, and notifications you have opted into.
• To respond to support requests you send us.
• To improve the product by analyzing aggregated usage patterns.

We do not sell your personal information. We use advertising tools from Meta and Google as described in Section 14.

Google Business Profile

When you connect your Google Business Profile, we request thebusiness.managescope. We use this access only to:

• List the Business Profiles you own or manage so you can choose which one to connect.
• Read reviews on that profile so you can monitor and respond to them inside the Hub.
• Post replies to reviews when you approve them (or automatically if you have enabled auto-reply).

Google Ads

When you connect your Google Ads account, we request theadwordsscope. We use this access only to:

• List the Google Ads accounts you own or manage so you can choose which one to connect.
• Create and update Google Ads campaigns (such as Search), ad groups, ads, keywords and negative keywords, targeting, daily budgets and conversion actions in the account you connected — always paused, and never enabled until you approve that campaign in the Hub.
• Read performance data for that account (impressions, clicks, cost and conversions) so we can report spend and cost-per-lead back to you in your dashboard.

We do not change billing or payment settings, and we do not access any Google Ads account you have not explicitly connected. Google Ads data is used only to manage and report on your own advertising — it is never sold, never shared with other advertisers, and never combined across accounts.

Across both connections, Google user data is never used to advertise to you, never sold, and never shared with third parties beyond the service providers needed to operate the Hub (listed in Section 6). Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke our access at any time from your Google Account permissions page or by disconnecting inside the Hub.

Account data and application data are stored in Google Firebase (Firestore and Firebase Auth) on Google Cloud infrastructure in the United States. Uploaded files are stored in Firebase Storage in the United States.

We use the following third parties to operate the Hub. Each receives only the data needed to perform its function.

• Google Firebase and Google Cloud (hosting, authentication, database)
• Vercel (frontend hosting)
• Stripe (payment processing)
• Mailgun, Resend, and SendGrid (email delivery, including new-lead alerts sent to the business)
• Twilio (text messages and phone calls)
• Google APIs including PageSpeed Insights, Places, and Business Profile
• SerpAPI (search rank lookups)
• Third-party AI providers, including Anthropic, OpenAI, and fal.ai (text generation for captions, blogs, ads, review replies, and landing-page chat; and AI image generation)
• Meta and Google advertising platforms (to run the ads a business connects, as described in Section 14)
• Post for Me (social media post scheduling across 9 platforms)
• 2Captcha (automated form verification during citation submissions)

In the Hub, we use cookies and browser local storage to keep you signed in and remember your preferences. On ReBoost Hub pages, ReBoost Ads landing pages, and Hub client sites, we also use advertising cookies and pixels from Meta and Google, with the opt-out choices described in Section 14.

• You can review and update your profile information at any time from your account settings.
• You can disconnect any third-party account from inside the Hub.
• You can request a copy of your data, or request deletion, by emailing us. We will respond within 30 days.
• If you are located in the European Economic Area, the United Kingdom, or California, you have additional rights under GDPR, UK GDPR, and the CCPA, including access, correction, deletion, and portability. Contact us to exercise these rights.

We retain your data for as long as your account is active. If you delete your account, we remove your profile and associated records from our live database within 30 days. We do not keep separate database backups. Our database provider can recover deleted records for about one hour, and our service logs are kept for up to 30 days.

We use industry-standard practices to protect your information, including encryption in transit (TLS), restricted database access rules, and OAuth-based authentication for third-party connections. No system is perfectly secure, so we cannot guarantee absolute security, but we work to address vulnerabilities promptly when reported.

The Hub is intended for business owners and is not directed at children under 13. We do not knowingly collect information from anyone under 13.

We may update this policy as the product evolves. When we make material changes we will update the effective date at the top and, where appropriate, notify you by email or inside the Hub.

For privacy questions, data requests, or anything else, email contact@reboosthub.com.

Pages run by ReBoost Hub, landing pages built with ReBoost Ads, and websites our customers run on ReBoost Hub use the Meta (Facebook and Instagram) Pixel, the Meta Conversions API, the Google tag, and Google Ads. This section applies to those pages.

What is collected

• Page visits, and basic device and browser details such as your browser type and the page you came from.
• Form submissions and leads, such as a contact or quote request.
• Bookings made on the page.
• A hashed email address and phone number, only when the site owner has turned on advanced matching. Hashing turns the value into a scrambled code before it is sent. Meta and Google can compare that code with their own records, but we do not send your plain email or phone number for this.

Why we use it

• To measure whether ads are working.
• To build audiences, so ads can be shown again to people who visited a page or filled out a form.
• To credit the right ad when someone acts. Starting November 12, 2026, Meta may also use on-device conversion measurement. With it, the Meta Pixel on your own device matches information the business already shared, such as an email address, to temporary data stored on your device. That match happens on the device. Meta only learns that an action happened and which ad to credit.

Customer lists

We upload hashed contact details to Meta or Google only for customers who allowed ads, and only to run that business's own ads.

Leads and texts

When you send a request through a ReBoost Ads landing page or a Facebook or Instagram lead form, it goes to that business's Hub so they can reply, and the business gets a new-lead alert by email or text. Sending a request is not agreement to marketing texts. We only text you from those forms if you agree to texts on the form.

Meta ad accounts a business connects

When a business connects its Facebook or Instagram ad account to ReBoost Ads, we use that access only to list the ad accounts and Pages it manages, create campaigns, ads, and lead forms in the account it picked (always paused until the business approves them), read the account's ad results, and bring leads from its own lead forms into its Hub. We store the access token on our servers only. This data is used only to run and report on that business's own ads. It is never sold or shared with other advertisers.

AI

Ad results from connected Google and Meta accounts, such as spend, clicks, and lead counts, may be sent to our AI provider to write plain-English summaries for the business. Lead names, emails, and phone numbers are not sent for this. If you use the chat on a ReBoost Ads landing page, your messages are processed by our AI provider so it can reply.

How to opt out

• Use the "Do not sell or share my info" ad opt-out link on the page. Choosing it stops the ad tracking on that site.
• Turn on Global Privacy Control in your browser. We honor it and do not run ad tracking when it is on.
• Block or clear cookies in your browser settings.
• Change your ad choices with Meta ad settings and Google ad settings.

Data deletion requests

To have your information deleted, including information received through Meta or Google, email contact@reboosthub.com or support@reboosthub.com with the subject "Data deletion request". Tell us the email address or phone number you used and the site where you used it. We will confirm by email and finish within 30 days.

If you connected a Facebook or Instagram account to ReBoost Ads, removing our app in your Facebook settings disconnects it and we stop using it. If you also ask Facebook to delete your data, we delete the data we received through that connection, such as ad results, saved lead form details, and the lead details we copied from Meta. Facebook gives you a confirmation code and a link that shows whether the request is accepted, completed, or being reviewed by our team. Leads already delivered to a business stay in that business's own customer records until the business deletes them. When you disconnect inside the Hub, we also ask Facebook to remove our access, unless another business on ReBoost uses the same Facebook login.