Privacy Policy

Molarstack Web Presence · Effective October 1, 2026

This policy explains what information Molarstack ("we", "us") collects through the Molarstack Web Presence app and the molarstack.com website, how we use it, and the choices available to you. Molarstack Web Presence is used by dental practices ("practices") to audit their websites and manage their Google Business Profile.

1. Information we collect

Practice account information

Names and email addresses of practice staff who sign in to a Molarstack dashboard, and practice details they enter (practice name, website address, city, services, phone number, and keywords to track).

Public website information

For the monthly audit we fetch the practice's public website pages and public page-speed and search-ranking data. This is information anyone can see on the web.

Google user data

When a practice owner or manager connects a Google account, Molarstack requests the Google Business Profile permission (https://www.googleapis.com/auth/business.manage). With it we access:

• the list of Business Profile accounts and locations the user manages;
• location details: business name, categories, services, hours, phone number, website and description;
• Google reviews of the location (reviewer display name, star rating, review text, dates, and any existing reply);
• the number of photos and the practice's Business Profile posts.

We also receive an OAuth refresh token from Google. We never receive or store the user's Google password.

Facebook Page information

If a practice chooses to connect its Facebook Page, we store an access token for that Page so we can publish posts the practice approves.

2. How we use information

• Website and profile audits: to produce the practice's monthly web presence report and recommendations.
• Review replies: to show the practice its Google reviews, draft replies, and — only after a staff member approves a reply — post it to Google.
• Business Profile posts: to draft posts and, only when a staff member chooses to publish, post them to the practice's profile.
• Operating the service: to sign users in, secure accounts, troubleshoot errors, and send the practice its reports.

Molarstack does not use Google user data for advertising, does not sell it, and does not use it to build user profiles.

3. Google API Services — Limited Use

Molarstack Web Presence's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the user-facing features described above.
• We do not transfer Google user data to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice to users.
• We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based ads.
• We do not allow humans to read Google user data except with the user's affirmative agreement for specific data, when necessary for security purposes or to comply with law, or when the data is aggregated and anonymized for internal operations. Practice staff viewing their own reviews in their dashboard is part of the service they requested.
• We do not use Google user data to develop, improve, or train generalized or non-personalized AI or machine-learning models.

4. Service providers

We share information only with providers that help us run the service, under terms that restrict their use of it:

• Amazon Web Services — hosting, database, and email delivery.
• Anthropic — AI processing used to write audit recommendations, review-reply drafts, and post drafts. We send only what is needed for the task (for example, a review's text and star rating to draft a reply). Under Anthropic's commercial terms, this data is not used to train its models.
• DataForSEO and Google PageSpeed Insights — public search-ranking and page-speed data about the practice's website. No Google user data is sent to these providers.

We do not sell personal information.

5. Storage and security

Data is stored on servers in the United States. Google and Facebook tokens are encrypted at rest with AES-256-GCM, and all connections to Molarstack use HTTPS. Access to production systems is restricted to authorized administrators.

6. Retention and deletion

• Disconnecting Google: a practice can disconnect Google at any time from the Web Presence tab of its dashboard. This immediately deletes the stored Google tokens and connection details. Users can also revoke access at myaccount.google.com/permissions.
• Reviews, drafts and reports are kept while the practice uses Molarstack so it can see its history. They are deleted within 30 days of a request or of the practice closing its account.
• Deletion requests: email us at the address below and we will delete the requested data within 30 days, except where we must keep it to comply with law.

7. Your choices

You may ask to access, correct, or delete information about you by contacting us. Connecting Google or Facebook is optional; the website audit works without them.

8. Patient information

Molarstack Web Presence does not request patient health records from Google. Reviews are public content already visible on Google, and reply drafts are written so they never confirm that a reviewer is a patient or reveal treatment details.

9. Children

Molarstack is a business tool for dental practices and is not directed to children under 13.

10. Changes

We will post any changes to this policy on this page and update the effective date. Material changes will be communicated to practices before they take effect.

11. Contact

Molarstack
Email: benjohnsondds@gmail.com