Privacy Policy

Effective June 27, 2026

HeyKarl is a product of Blacklotus Software LLC ("HeyKarl," "we," "us"). This policy explains what information we access, how we use it, and the choices you have. Questions: privacy@heykarl.co.

Who uses HeyKarl

HeyKarl is used by small businesses ("clients") who authorize us to help manage their online presence: their website, their Google Business Profile, and their customer communications.

Information we collect and access

• Business information you provide or that we gather to build your profile: business name, address, hours, services, descriptions, and similar details.
• Communications handled on your behalf (calls, texts, messages, and reviews), and any drafts, approvals, and feedback you give.
• Google account data, only when you authorize it (see below).
• Account and billing data needed to operate your subscription.

Google user data

When a client connects their Google Business Profile, HeyKarl accesses that profile through Google APIs only to provide the service the client has asked for, for example, reading and replying to reviews (with the owner's approval), and keeping business information (hours, services, photos, posts) accurate. We act only on profiles a client has explicitly authorized us to manage.

HeyKarl's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically: we use Google user data only to provide and improve the features the client requested; we do not sell it, use it for advertising, or transfer it to others except as needed to provide the service, with the client's consent, or as required by law. We never create reviews or alter ratings.

How we use information

• To operate the service: answer and route communications, draft and (with approval) post replies and updates, build and maintain your website, and report on results.
• To improve quality, using your feedback to better match your voice and preferences.
• To provide support, billing, and security.

Sharing

We do not sell your information. We share it only with service providers that help us run HeyKarl (for example, hosting, telephony, email delivery, and the model provider that powers Karl), under agreements that limit their use to providing those services, or when required by law.

Retention and deletion

We keep information for as long as your account is active or as needed to provide the service. You can request access to, correction of, or deletion of your data, and you can disconnect Google access at any time from your Google account settings. To make a request, email privacy@heykarl.co.

Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is perfectly secure, but we work to safeguard your data.

Changes

We may update this policy; we'll post the new version here and update the effective date.