1. Who We Are

Wave Business Solutions LLC ("Wave Growth Engine," "we," "us," or "our") is a Missouri limited liability company that provides a software-as-a-service (SaaS) reputation management platform for local businesses. Our platform helps business owners collect and manage customer reviews, respond to feedback on Google Business Profile, and send review request messages to their customers.

For the purposes of data protection law, Wave Growth Engine acts as a data processor when handling consumer contact information submitted by our business clients. Our clients are the data controllers responsible for the lawful basis on which they collect and submit that information to our platform.

2. Information We Collect

Information about our business clients (subscribers):

• Name, email address, and password (for account creation and authentication)
• Business name and location information
• Profile photo (optional, uploaded by the user)
• Billing and subscription information (processed by our payment provider; we do not store full payment card numbers)
• OAuth authorization tokens for Google Business Profile and GoHighLevel (stored encrypted; used solely to operate the platform on your behalf)
• Communications you send to us, such as support requests

Consumer contact data submitted by our clients:

• Consumer first name, last name, email address, and phone number
• This data is submitted by our clients to send review request messages to their customers. We process it solely on their instruction.

Review data from Google Business Profile:

• Reviewer display name, star rating, review text, and review date, retrieved via the Google Business Profile API on behalf of our clients
• Review response text drafted or submitted through our platform

Technical and usage data:

• IP address, browser type, device type, and pages visited within the platform
• Log data generated during your use of the service

3. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Wave Growth Engine platform
• Send review request SMS and email messages to consumers on behalf of our clients
• Retrieve and display Google Business Profile reviews for our clients
• Submit review responses to Google on behalf of our clients
• Process subscription payments and manage client accounts
• Send transactional and account-related emails (password resets, billing notices)
• Respond to support requests
• Comply with legal obligations
• Improve and develop our services (using aggregated, non-identifiable data)

We do not sell personal information. We do not use consumer contact data submitted by our clients for our own marketing purposes.

4. Third-Party Service Providers

We share information with third-party providers only as necessary to operate our platform:

• GoHighLevel (HighLevel, Inc.) — CRM and messaging infrastructure used to manage contacts and deliver SMS and email review request messages on behalf of our clients
• Google LLC — Google Business Profile API, used to retrieve reviews and submit responses; Google OAuth, used for authorization
• Bubble.io (Bubble Group, Inc.) — No-code application platform hosting the Wave Growth Engine application and database
• Stripe, Inc. — Payment processing for subscriptions
• SendGrid (Twilio Inc.) — Transactional email delivery for account notifications

Each of these providers processes data under their own privacy policies and data processing terms. We do not authorize them to use your data for purposes other than providing services to us.

5. Data Retention

We retain client account data for as long as your account is active. Consumer contact records are retained as long as necessary to operate the service and may be deleted upon a client's written request. OAuth tokens are refreshed automatically and are stored only as long as the associated account remains active.

When a client account is closed, we will delete or anonymize associated data within 90 days, except where we are required to retain it for legal or compliance purposes.

6. Data Security

We take the security of your data seriously. Our security practices include:

• OAuth tokens and API credentials stored in encrypted database fields
• All data transmitted over HTTPS/TLS
• Access to production systems limited to authorized personnel
• Use of platform-level security controls provided by Bubble.io
• Regular review of third-party access and credentials

No system is completely secure. In the event of a data breach that affects your personal information, we will notify affected parties as required by applicable law.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to or restrict certain processing
• Receive your data in a portable format

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

If you are a consumer whose data was submitted to our platform by a business client, please contact that business directly. We will assist them in fulfilling your request where we are able.

8. SMS and Text Messaging

Wave Growth Engine enables its clients to send SMS review request messages to their customers. The following applies to all text messaging conducted through our platform:

• SMS messages are sent only to individuals who have provided express consent to receive text messages from the client business
• Mobile information, including phone numbers collected through SMS opt-in, will not be shared with third parties or affiliates for marketing or promotional purposes
• All other data categories we collect — including IP address, browser type, and usage data — exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties
• Recipients may opt out of SMS messages at any time by replying STOP to any message. Opt-out requests are processed immediately and no further messages will be sent
• Recipients may reply HELP to any message to receive assistance
• Standard message and data rates may apply to SMS messages received
• Phone numbers collected for SMS purposes are retained only as long as the associated client account is active or until the recipient opts out, whichever comes first

Our clients are responsible for obtaining proper consent from their customers before submitting phone numbers to our platform for SMS delivery. Wave Growth Engine processes those messages solely on the client's instruction.

9. Children's Privacy

Our platform is intended for use by business owners and their employees. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have inadvertently collected such information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, for material changes, notify active clients by email. Continued use of the platform after an update constitutes acceptance of the revised policy.

11. Contact Us