Privacy Policy
Effective Date: April 4, 2026 | Last Updated: April 4, 2026
1. Information We Collect
We collect information you provide directly to us, including your name, email address, phone number, business information, payment information, and any content you submit through the Service. We also collect information about your customers that you enter into ShopHawk in order to provide the Service.
2. How We Use Information
- Provide, operate, and improve the Service
- Process transactions and manage billing
- Send administrative notices, support messages, and product updates
- Respond to questions and provide customer support
- Monitor usage, prevent fraud, and secure the Service
3. Sharing of Information
We do not sell your personal information. We may share information with vendors that help us operate the Service, comply with the law, or in connection with a business transfer. We only share customer data as needed to provide the Service or as instructed by you.
4. SMS / Text Messaging Consent and Communications
By providing your phone number when registering for ShopHawk, you consent to receive SMS messages from ShopHawk CRM, LLC related to your account, such as onboarding assistance, billing alerts, and product updates. Message frequency varies. Message and data rates may apply.
By providing your phone number and submitting this form, you consent to receive SMS messages from the automotive service shop you are engaging with, powered by ShopHawk. Message frequency varies. Msg&Data rates may apply. Reply STOP to unsubscribe, HELP for help.
Opt-in data is not sold or shared with third parties or affiliates for marketing or promotional purposes.
Learn more on our SMS Consent page.
5. Data Retention
We retain information for as long as needed to provide the Service and for legitimate business or legal purposes.
6. Your Rights
Depending on your location, you may have rights to access, correct, delete, or restrict the use of your personal information. Contact us at fly@shophawk.io to make a request.
7. Google User Data
ShopHawk connects to Google services so you can manage your business from one place. You choose whether to connect each one. Nothing is connected unless you click Connect and approve it on Google's own consent screen.
YouTube
When you connect a YouTube channel, ShopHawk asks Google for two permissions:
- Upload videos (youtube.upload): to publish the videos you create and schedule in ShopHawk.
- View your YouTube account (youtube.readonly): to show which channel is connected, to check that a video we uploaded finished processing, and to load YouTube's video categories.
We use these permissions only for the videos you publish through ShopHawk. We do not read, edit, or delete videos that ShopHawk did not upload, and we do not read your comments, ratings, watch history, or subscriber list.
Google Business Profile
If you connect a Google Business Profile, ShopHawk asks Google for these permissions:
- Manage your business listings — so we can read your locations and your customer reviews, and post your replies to those reviews.
- Your name and email address — so we can label the connection in your ShopHawk account.
We use this only to show your reviews inside ShopHawk and to send the replies you write. We do not change your business hours, address, photos, or any other listing detail unless you explicitly ask us to.
Gmail
If you connect a Gmail account, ShopHawk asks Google for permission to read, send, and organise the email in that mailbox.
We use this only to show your customer emails inside the ShopHawk inbox and to send the replies you write there. We do not scan your mail for advertising, we do not sell it, and we do not use it to train any AI model.
How we store it
The access and refresh tokens for your connected Google accounts are encrypted before they are stored.
Your Google data is stored in databases we run. Every record is tagged with your company's ID, so it is only ever returned to your own account.
How we protect your data
- Encrypted connections: all traffic between your browser, ShopHawk, and Google uses HTTPS (TLS). Our services connect to the database over TLS.
- Encrypted storage: our databases run on DigitalOcean managed PostgreSQL, which encrypts all stored data at rest.
- Encrypted tokens: your Google access and refresh tokens are also encrypted with AES-GCM before we store them. We decrypt a token only at the moment we call Google for you.
- Encrypted email credentials: the credentials for your connected email account are encrypted with AES-256 before we store them.
- Separation between companies: every record is tagged with your company's ID, and every database request is filtered by that ID. Your data is returned only to your own account.
- No selling and no ads: we do not sell Google user data, and we do not use it for advertising or to train AI models.
- Disconnect at any time: when you disconnect an account in Settings, we delete its stored tokens right away.
Who we share it with
We do not sell, rent, or trade Google user data. We do not pass it to advertisers or data brokers.
There is one case where Google data leaves our systems. When you ask ShopHawk to draft a reply to a Google review, that review's text and the reviewer's name are sent to OpenAI so it can write the draft. Nothing else is sent, and this only happens when you ask for a draft.
Otherwise we share your data only where the law requires it, or with the providers that host our systems, who are bound to protect it.
How to disconnect and delete
You can disconnect any Google account from ShopHawk at any time, in Settings. Disconnecting deletes the stored tokens right away and stops all future access.
You can also revoke ShopHawk from your Google Account permissions page.
To have the data we already stored deleted, email us at fly@shophawk.io and we will remove it.
Limited Use
ShopHawk's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Facebook and Instagram
ShopHawk connects to Facebook and Instagram only when you choose to link your accounts. When you do, we store your page or account name, your account ID, the access token Meta gives us, and the posts we publish for you. We use this only to publish your content and to show your comments and messages inside ShopHawk. We never sell it and we never share it with anyone else.
You can disconnect at any time inside ShopHawk, under Marketing then Integrations. Disconnecting removes the access token right away.
To delete the data we already stored, email fly@shophawk.io from the email on your ShopHawk account and write "Delete my data" in the subject. We delete it within 30 days and confirm by email.