KORDY LLC

Privacy Policy

Last updated: August 27, 2026

Kordy LLC ("Kordy," "we," "us") is a New York limited liability company that builds and manages websites, online stores, and related digital services for small businesses. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It also describes how we handle data we access through Google APIs when a business client asks us to manage their Google Business Profile on their behalf.

Information we collect

  • Inquiries you send us. When you use our contact form, we collect the name, email, phone number (if provided), business name, and message you submit, so we can respond.
  • Client business data. For clients who engage us, we handle the business information needed to deliver the service (for example, business details, service menus, and customer records we migrate at your request).
  • Google account data (only with your authorization). When a client authorizes us to manage their Google Business Profile, we access that profile's data through Google APIs — see the Google section below.
  • Basic technical data. Standard server logs and anti-abuse signals (such as IP address and timestamps) used to operate and secure our sites.

How we use information

  • To respond to inquiries and provide the services a client has engaged us for.
  • To operate, maintain, secure, and improve our sites and services.
  • To communicate with clients about their projects and accounts.

We do not sell your personal information, and we do not use it for advertising.

Google user data (Business Profile management)

When a business client grants Kordy LLC access to their Google Business Profile, our application uses Google APIs to access that profile's data — which may include business information, reviews, questions and answers, and performance insights — solely to provide the management service the client requested. Specifically, we use this access to:

  • Read and reply to customer reviews on the client's behalf.
  • Read and answer questions posted to the client's profile.
  • Display the client's own genuine reviews on the client's website.
  • Keep business information accurate and provide performance reporting to the client.

Kordy LLC's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell Google user data, do not use it for advertising, and do not use it to train generalized or standalone artificial-intelligence models. We do not transfer Google user data except as necessary to provide the client's requested service, to comply with applicable law, or as part of a merger or acquisition. The only automated processor we use for this service is our AI text provider (see "AI processing" below), which receives review or question text only to help draft a response and does not use it to train its models. We store a secure authorization credential (an OAuth refresh token) only to operate the service on the client's behalf.

AI processing

To help draft review replies and answers, the relevant review or question text is sent to our third-party AI provider (Anthropic) to generate a suggested response. This text is used only to produce that response and is not used to train AI models. A person or the client's chosen settings control whether responses are posted automatically or after approval.

How information is shared

We share information only with service providers that help us operate, and only as needed:

  • Google — for Business Profile management authorized by the client.
  • Anthropic — AI text generation, as described above.
  • Cloudflare — hosting, content delivery, and security.
  • Stripe — payment processing, where a client's site takes payments.

We may also disclose information if required by law or to protect our rights and users.

Data retention

We keep information only as long as needed to provide the service or as required by law. Contact-form inquiries are retained so we can follow up and maintain our records. When a client ends the Google Business Profile service or revokes access, we stop accessing their Google data and delete the stored authorization credential.

Security

We use reasonable technical and organizational measures to protect information, including encrypted transport (HTTPS) and storing authorization credentials as protected secrets. No method of transmission or storage is completely secure, but we work to protect your information.

Your choices

  • Clients can revoke Google access at any time from their Google Account's security settings (Third-party access), which immediately stops our access.
  • You may request that we access, correct, or delete personal information we hold about you.

Children's privacy

Our services are intended for businesses and are not directed to children under 13, and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.

Contact us

Questions about this policy or your data? Email [email protected], or reach us through the contact form. Kordy LLC is a limited liability company registered in New York State.