Privacy Policy

Kombo Review Bot · Effective 6 October 2026

This policy explains how Kombo Review Bot (“the application”), an internal tool operated by KOMBO (Cơm niêu Singapore KOMBO restaurant chain, Vietnam), accesses, uses, stores and shares data obtained from Google, and how it treats information about the customers who write reviews.

1. Who uses the application

The application is used only by KOMBO staff, signed in with KOMBO's own company Google Account. It is not available to the public, to customers, or to other businesses.

2. Google user data we access

Through Google's OAuth 2.0 consent flow the application requests the scope https://www.googleapis.com/auth/business.manage (“See, edit, create and delete your Google business listings”). With this permission it accesses, from the company account only:

• the list of Google Business Profile locations (restaurants) that the account manages;
• customer reviews on those locations: star rating, review text, reviewer display name, date, and any existing owner reply;
• the ability to create or update the owner's reply to a review.

The application does not read or modify any other part of the business listings (such as hours, address or photos), and it never accesses the Google Account of a customer or of any other person.

3. How we use this data

• Replying to reviews. The star rating and review text are used to draft a reply, which is then published as the business owner's response on Google. Drafts are generated with the help of an AI language-model service; only the rating, the review text and the reviewer's public display name are sent to that service for this purpose.
• Alerting staff. When a review indicates a problem (for example a low rating), the rating, review text and a link to the review are forwarded to KOMBO's customer-care staff through an internal messaging channel so a person can follow up.
• Operations and auditing. We keep a log of which reviews were processed and which replies were posted, so that staff can check the application's work.

We do not use Google user data for advertising, profiling, or any purpose unrelated to responding to customer reviews.

4. Storage and retention

OAuth tokens are stored on KOMBO's own server, protected by file permissions and never shared. Review identifiers, ratings, review text and posted replies are kept in the application's log for up to 24 months for auditing, after which they are deleted. Review data is otherwise already public on Google Maps.

5. Sharing

We do not sell Google user data and do not share it with third parties, except: (a) the AI language-model service used to draft replies, as described above, and (b) the messaging service used to notify our own staff. Both are bound by their own terms and receive only what is necessary for the function described. Data may also be disclosed if required by law.

6. Google API Services User Data Policy

Kombo Review Bot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Revoking access

KOMBO can revoke the application's access at any time from the company Google Account's security settings (Third-party apps & services). Customers who wish to change or remove a review they wrote can do so directly on Google Maps.

8. Contact

Questions about this policy: KOMBO · growth.kombo@gmail.com

Tóm tắt tiếng Việt

Kombo Review Bot chỉ do nhân viên KOMBO sử dụng với tài khoản Google của công ty. Ứng dụng đọc đánh giá của khách trên các Trang doanh nghiệp Google của KOMBO (số sao, nội dung, tên hiển thị của người đánh giá) để soạn và đăng câu trả lời thay nhà hàng, và báo cho bộ phận chăm sóc khách hàng khi có đánh giá chưa tốt. Nội dung đánh giá được gửi tới dịch vụ mô hình ngôn ngữ AI để soạn câu trả lời và tới kênh nhắn tin nội bộ để báo nhân viên; ngoài ra không chia sẻ cho ai khác, không dùng để quảng cáo. Nhật ký xử lý được giữ tối đa 24 tháng. Liên hệ: growth.kombo@gmail.com.