Dependify logoDependify
Back to site

Privacy Policy

Last updated: January 2026

Dependify ("we", "us", or "our") operates a reputation-management service that sends review-request messages on behalf of local home-service businesses to their own customers. This Privacy Policy explains how we collect, use, and protect personal information.

1. Who We Are

Dependify is a service that helps local home-service businesses (HVAC, plumbing, electrical, roofing, and similar trades) collect Google reviews from their own customers via SMS and email, respond to reviews on their behalf, and monitor their Google Business Profile. We act as a service provider/processor to our clients with respect to their customer contact data.

2. Information We Collect

From our clients (business owners):

  • Business identity: legal name, EIN, address, website, trade
  • Owner contact: name, mobile phone, email
  • Google Business Profile access (manager-level, per our service agreement §2)
  • Customer contact lists: names, phone numbers, emails, last-service dates
  • Business preferences: tone, sign-off style, competitor references

From our clients' customers (end users):

  • Phone number and/or email address (provided by the client business)
  • First name (for message personalization)
  • SMS reply content (when a customer responds to a check-in or review request)
  • Google review content (publicly available, accessed via Google Business Profile API)

Automatically collected:

  • Website usage data: pages visited, referring URL, IP address, browser type (via privacy-friendly analytics)
  • Message delivery status: sent, delivered, failed, opt-out (for TCPA compliance audit log)

3. How We Use Information

  • To deliver the service: send review-request SMS/emails, monitor reviews, draft responses, generate weekly reports
  • For compliance: maintain TCPA-mandated audit logs (message content, timestamps, opt-in/opt-out status) for 4 years
  • To improve the service: aggregate, anonymized analysis of message performance and review-generation rates
  • For billing: process payments, issue invoices, manage subscriptions
  • For support: respond to client inquiries and resolve issues

We do not sell customer contact data. We do not use client customer data to market unrelated services. We use data solely to perform the Services described in our client service agreement.

4. Data Sharing & Subprocessors

We share data only with subprocessors necessary to deliver the service:

  • Twilio — SMS and voice message delivery, phone number provisioning, carrier registration
  • Google — Google Business Profile API (review monitoring, response publishing), Google Maps Platform Places API (prospect identification)
  • Anthropic (Claude) — AI-assisted review-response drafting and sentiment classification
  • Resend / SendGrid — transactional email delivery (reports, lead-magnet delivery)
  • Vercel — web application hosting
  • Stripe — payment processing (clients only)

Each subprocessor is bound by data-processing agreements that limit their use of data to providing services on our behalf. We do not share data with advertising networks or data brokers.

5. Data Retention

  • Active clients: data retained for the duration of the service agreement
  • Message audit logs: retained for 4 years (TCPA statute of limitations) regardless of client status
  • On termination: client customer lists and review data deleted or returned in CSV format within 60 days (per service agreement §10), except the message audit log
  • Lead-magnet leads: retained until the prospect requests deletion or 24 months of inactivity

6. Data Security

We apply reasonable technical and organizational security measures including: encrypted data transmission (TLS), encrypted storage of OAuth refresh tokens and API credentials, access controls limiting data access to authorized personnel, and regular security reviews. No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard practices.

7. Your Rights

If you are a client, you may: access your data, correct inaccurate data, request deletion (subject to legal-retention requirements), or export your data in CSV format. Contact hello@dependifyllc.com to exercise these rights.

If you are a client's customer receiving messages from a Dependify-powered business, you may: opt out of messages by replying STOP (see our SMS Consent Policy), or contact the business directly to update your contact information.

8. Children's Privacy

Our service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

9. International Users

Dependify primarily serves US-based businesses. If you are accessing our service from outside the United States, please be aware that your data will be processed in the US. GDPR-related rights (for EU users) may be limited as our service is not targeted to EU residents.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active clients by email of any material changes at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

Questions about this Privacy Policy? Email us at hello@dependifyllc.com.