Privacy Policy

Starquill helps app developers read and answer their app store reviews. This policy explains what we collect, why, and your choices. Contact: [email protected].

What we collect

• Account: your name, email address and password (stored as a secure hash), or your Google/GitHub profile if you sign in with them.
• Store credentials: the App Store Connect API key or Google Play service account you connect. They are encrypted (AES-256-GCM) and only used to read reviews and post replies you send.
• Review data: reviews of your apps as published on the stores (rating, text, public nickname, country, app version, device), your replies, and the analysis we create (topics, summaries, translations, issues).
• Notification settings: email addresses, Telegram chat IDs and Slack webhook URLs (encrypted) you add.
• Billing: handled by Paddle.com as merchant of record. We receive your plan, subscription status and a customer ID, never your card details.
• Technical data: IP address and browser user agent for sign-in sessions and security.

How we use it

• To provide the service: sync reviews, analyze them, send the alerts and digests you choose, and post the replies you send.
• To keep accounts secure and prevent abuse.
• To send service emails (password resets, alerts you enabled, important account notices). No marketing emails without your consent.

AI processing

Review text is sent to our AI provider (Anthropic or OpenAI, through their business APIs) to analyze it and draft replies. Under their API terms this data is not used to train their models. We never post a reply without you pressing Send.

Sub-processors

• DigitalOcean: hosting and database.
• Anthropic / OpenAI: AI analysis.
• Resend: email delivery.
• Paddle: payments, invoices and taxes.
• Telegram and Slack: only if you connect them, to deliver your alerts.

Retention and deletion

We keep your data while your account exists. When you remove an app or connection, its reviews and analysis are deleted. When you delete your account (Settings → Account), we delete your account, keys, apps, reviews and settings immediately; backups roll over within 30 days. Paddle keeps billing records as required by law.

Your rights

You can access, correct, export or delete your data. Most of it you can manage in the app; for anything else, email [email protected] and we'll answer within 30 days.

Cookies

We use only the cookies needed to keep you signed in. No advertising or tracking cookies.

Changes

If we make important changes, we'll tell you by email before they take effect.