Security

Know what you authorise.
See what was published.

Works with Google Business Profile, Apple App Store and Google Play. More sources on the way.

What we ask permission for

Google Business Profile

Read location reviews and publish business replies for the connection you authorise. Check the provider’s permission screen before granting access.

Apple App Store

Read reviews by territory and version and publish developer replies for the connection you authorise. Check the provider’s permission screen before granting access.

Google Play

Read reviews by version and publish developer replies for the connection you authorise. Check the provider’s permission screen before granting access.

What we never do

  • Publish without a rule you wrote or a click you made.
  • Publish when a review is unclear, unsupported, unmatched or affected by a degraded connection.
  • Sell your review data.

Model-training policy: Enstap does not use customer or review data to train its own AI models. Reviews and drafts are processed by third-party AI services to produce classifications and draft replies, under those services’ own data policies..

Where data lives

Core application processing takes place in the UK. Certain specialist service providers, including our AI provider, may process data outside the UK or EEA under appropriate contractual safeguards. Email support@enstap.com for details of the safeguards that apply.

Sub-processors

Enstap uses service providers in these categories: cloud infrastructure and storage, authentication, AI processing, email delivery and payment processing. No analytics provider is used.

Retention and deletion

We keep personal and review data only for as long as we need it to provide Enstap and to meet our legal, security and operational obligations. How long that is varies by the type of data.

Contact support@enstap.com with a data-deletion request. Do not include private customer details in your initial message.

Disconnecting

Disconnect a source in one step. Enstap’s access ends immediately. Replies already published stay on that source. Data deletion and access revocation are separate actions.

Audit record and export

Every action records who made the decision, what was published and when. Export the record for review outside Enstap.

Example audit record

Example data
  1. 09:41 · Routine-praise rule matched. Reply published automatically.
  2. 09:42 · Alex edited and approved a reply. Published text recorded.
  3. 09:43 · Account-security concern escalated to Jordan. No reply published.

Reporting a security issue

Report a security issue to support@enstap.com. There is no separate security mailbox.

Describe the issue without sending credentials or customer data.

Try the publication controls →

Read pricing and trial terms →