Privacy Policy

We use Google in two separate ways. Each one asks you first, on Google's own screen.

1. Sign in with Google. When you sign in, Google gives us your name, your email address and your Google account ID (scopes: openid, email, profile). We use them to make your account, to sign you in, and to write to you about your account. We never receive your Google password.

2. Connect your Google Business Profile. This is optional. It starts only when you press "Connect" in Settings. You then give dhanaadhan permission (scope https://www.googleapis.com/auth/business.manage) to do these things on your behalf, and nothing else:

• List your business accounts and locations (name and address), so you can choose which listing is yours.
• Publish posts on that listing. We publish a "What's New" photo post with the same picture and words as the post we made for your Instagram. You can switch this off in Settings at any time.
• Read the reviews on that listing (who wrote it, the stars, the words, the date, and whether it has a reply), to show them to you in the app.
• Publish replies to those reviews. On DhanaaDhan Lite, a reply to a 4 or 5 star review is sent automatically, and a reply to a 1, 2 or 3 star review is sent only after you press Send — you can change the words first. On the full DhanaaDhan product, a reply is sent only after you approve it, unless you switch on an automatic rule in your Inbox settings (replies to praise, or answers to questions after four hours). When you edit a reply, exactly your words are sent.
• Understand your business from its reviews. We read what your customers say — what they praise and what they ask — so the posts we write and the answers we suggest fit your business. This happens inside your own account and is used only for you.
• Show your listing's numbers (full DhanaaDhan plans only): searches, views, calls, website clicks, direction requests and search terms, on your Analytics screen.
• Turn a good review into a post (full DhanaaDhan plans only): a short summary of a 4 or 5 star review, with the reviewer's first name, can become a testimonial post on your Instagram. It goes through the same approval as your other posts.

We ask Google for offline access. This gives us a refresh token, which lets posts and replies go out when you are not signed in to dhanaadhan. You can take that back at any time (see Your controls).

DhanaaDhan's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In plain words, about information we get from Google:

• We use it only to give you the features described above. Those features are visible in the app.
• We do not sell it, and we do not give it to data brokers or information resellers.
• We do not use it for advertising of any kind, including retargeting or personalised or interest-based ads.
• We do not use it to decide whether to lend you money or to judge your credit.
• It is never used to train generalized AI or machine-learning models, and never used to develop or improve them. The AI models we use only write the reply or post you asked for (see Who else processes your data).

Google data we store. For the listing you choose: its name, address and Google ID. For its reviews: the reviewer's display name, the star rating, the review text, the date and whether it has a reply, and the reply we or you wrote. For posts: a copy of the post we sent and when it went. Your Google access credential (the refresh token) is stored encrypted on our servers in Mumbai. We do not store anything from your Google account other than what is listed here.

Do people at AarnoTech read your Google data? Not as part of our normal work: the software shows your reviews to you, and to the people on your account — on the full product that can include the DhanaaDhan account manager you see by name in Settings. Our admin tools can open any account, and every time they do it is logged. We use them on your account only when you ask us to look at something to help you, when we need to investigate abuse or a security problem, or when the law requires it. Apart from that we look only at numbers that are combined and cannot be traced to you (for example, how many replies were sent today).

When you connect your Instagram professional account through Instagram Business Login, you grant dhanaadhan permission to access, on your behalf:

• Your profile basics (instagram_business_basic) — username, profile picture and account id, so you can see and confirm which account is connected and so posts, comments and insights are attached to the right one.
• Publishing (instagram_business_content_publish) — posting the content at the time it is scheduled. On the full DhanaaDhan product, nothing is published until you approve it. On DhanaaDhan Lite, your posts go out by themselves on their scheduled day and time, and you do not approve each one; our team can stop a post before it goes out.
• Comments (instagram_business_manage_comments) — reading comments on the posts dhanaadhan published for you, and sending a reply when you choose to send it.
• Insights (instagram_business_manage_insights) — reach, likes, comments, saves, shares and follower count for your own posts and account, shown to you on your analytics screen.

dhanaadhan's use of information received from Meta adheres to the Meta Platform Terms and Developer Policies. Instagram data is used only to provide the features described above to you; it is never sold, never shared for advertising, and never used to train generalized AI or machine-learning models. We read only your own account — never anyone else's — and the moment you disconnect, the token is deleted and we can no longer access anything.

• Anthropic, Google (Gemini) and OpenAI — to write a reply to a Google review, we send the review text, the reviewer's display name, the star rating and your brand details. Review text is also sent when we write your posts and suggested answers from what your customers say, and when a good review needs a short summary for a testimonial post. We do this only to give you those features; they are what you see in the app. The same models get the text of an Instagram comment or message being answered, your brand details and the draft being written — that is how captions and plans are written.
• Photos you upload — checked automatically by an AI model when you upload them, for quality and for whether they fit your business, and again if you ask for a re-check. The photo is sent to whichever one of Anthropic, Google (Gemini) or OpenAI we are using for writing at the time. A finished post you upload without a caption is read the same way, to write one.
• OpenAI and Replicate — image and video generation for your posts. A photo you upload is also sent to Replicate when you ask for that photo to be enhanced or edited. Enhancing sharpens and restores the photo without redrawing it, and it sends the photo even when there is a person in it. An AI edit is different: we look for faces on our own servers first, and a photo where a face is found is refused for editing and is never used to generate or edit images with AI.
• ElevenLabs — music generation for video posts. No customer data is sent.
• Tavily and Google Places — public web and map searches about your business and its competitors, during research. Your business name and website are sent; no reviews, no customer data.
• The infrastructure provider that runs our servers, under confidentiality obligations.

These providers act on our instruction only. Under their API terms the content is not used to train their models. Nothing is sold, nothing is shared for advertising, and in particular data received from Google APIs is never used to train generalized AI or machine-learning models, as the Limited Use requirements demand.