Small businesses are often asked to trust a vendor with sensitive things: their Google Business Profile, their customers' calls, their website. This page lays out, plainly, what we actually do to protect that trust. We'd rather tell you exactly where things stand today than make claims we haven't earned yet.
Beacon connects to a business's Google Business Profile through Google's own OAuth2 authorization flow, the same standard used by major apps that request access to your Google account. We never see or store your Google password. Access is scoped to what's needed to read and reply to reviews, and can be revoked at any time from your Google account settings. Our use of Google user data follows the Google API Services User Data Policy, including its Limited Use requirements: review data is used only to provide the review management service, never for advertising, and never sold.
Calls to our AI answering line are processed through Telnyx, a telecom infrastructure provider, and transcribed for the assistant to respond in real time. Call details we intentionally capture (caller name, callback number, and a note on what the call is about) are stored so a message can be passed along. We don't use call content for anything beyond answering that call and logging the message.
Sites we build are served over HTTPS and hosted on established infrastructure providers rather than self-managed servers, which means the underlying network and platform security is handled by companies whose full-time job is exactly that.
We collect the minimum information needed to run each service. Access to stored data is limited to the people actually operating The Devente Group. We do not sell personal or business data to third parties, and we do not share it beyond what's needed to deliver the service itself (for example, the hosting and AI providers each product runs on).
We're a small, early-stage company, and we want to be upfront about that rather than overstate it. We haven't pursued formal third-party certifications like SOC 2, and we don't currently make a formal claim of GDPR or CCPA compliance. If a specific certification or compliance requirement matters for your business, reach out and we'll tell you honestly where we stand and what our plan is to get there.
If you have a specific security or privacy question that isn't answered here, contact us directly at ldevadmin@thedeventegroup.org or call 704-386-1818. See also our full privacy policy.
