Privacy Policy
Last updated: October 2026 • Product of Digital Medium
Stelesta protects your local business data with absolute transparency. We never sell your data, never use your business information or customer reviews to train public AI models, and enforce AES-256 encryption at rest for all Google OAuth tokens.
1. Information We Read
When you connect your Google Business Profile to Stelesta, we request authorized read access via the official Google Business Profile APIs (scope: https://www.googleapis.com/auth/business.manage).
- Profile Details: Business name, address, primary and secondary categories, service attributes, operating hours, phone numbers, and website URL.
- Reviews: Customer review text, star ratings, reviewer display names, creation timestamps, and existing merchant replies.
- Photos & Media: Public photos uploaded to your listing to audit coverage against nearby competitors.
- Performance Metrics: Aggregate search impressions, profile views, calls, directions, and website clicks.
2. Changes We Make to Your Profile
We classify every potential profile modification strictly into Safe and Risky categories:
- Safe Changes: Profile description, service attributes, confirmed special hours, weekly local posts, and review replies. These can be reviewed and applied in one click, and are backed by an atomic snapshot with one-click undo.
- Risky Fields Locked: Stelesta will never automatically modify your business name, primary category, street address, or primary phone number. These fields are strictly suggest-only to safeguard your listing against Google suspensions or re-verification triggers.
3. Data Never Sold & Never Used to Train AI
We strictly maintain that your customer data is your proprietary property:
- Your customer contact information (phone numbers and emails) is used solely to dispatch compliant review requests and appointment reminders.
- We do not sell, rent, monetize, or broker any customer or business profile information to third parties or advertising networks.
- Your private business data, reviews, and correspondence are never used to train generalized artificial intelligence models.
4. Disconnect and Permanent Deletion
You retain full sovereign ownership of your Google Business Profile. You can revoke Stelesta's access at any time:
- Clicking Disconnect Google in your account settings immediately invalidates and permanently purges your encrypted OAuth refresh tokens from our database.
- You may request complete account erasure by contacting privacy@digitalmedium.com. All profile snapshots, review caches, and audit logs will be permanently deleted within 48 hours.