Privacy Policy

This Privacy Policy explains how Renowna ("Renowna", "we", "us"), a service operated by Lilium Digital LLC, a Wyoming limited liability company, collects, uses, and protects information when you use our website and software (the "Service"). If you do not agree with this policy, please do not use the Service.

1. Who we are & how to reach us

Renowna provides reputation-management software for clinics, including AI-drafted replies to public reviews and review-request automation. Questions about this policy or your data:

• Email: privacy@renowna.com
• Mail: Lilium Digital LLC, 5830 E 2nd St, Ste 7000 #22937, Casper, WY 82609, USA

2. Information we collect

• Account information you provide: name, business name, email, password, and billing details (payments are processed by Stripe; we do not store full card numbers).
• Google account & business data you authorize us to access (see Section 4): your Google Business Profile details and your public Google reviews and ratings.
• Content you create in the Service: brand voice settings, reply approvals, and configuration.
• Usage & device data: log data, IP address, browser type, and basic analytics to operate and improve the Service.

We do not collect protected health information (PHI). Renowna is not designed to receive patient charts, treatment records, or any clinical data, and our AI is instructed never to confirm a person was a patient or reference a treatment in a public reply.

3. How we use information

• To provide the Service: read your public reviews, draft and (with your settings) post replies, and send review requests.
• To authenticate you, process subscriptions, and provide support.
• To secure, maintain, and improve the Service.
• To send service and, where permitted, marketing communications (you can opt out anytime).

We do not sell your personal information, and we do not use it for advertising profiling.

4. Google user data & API disclosure

Renowna's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• What we access: with your explicit OAuth consent, your Google Business Profile and its public reviews/ratings, so we can display them, draft replies, and (where you enable it) post replies on your behalf.
• How we use it: solely to provide and improve the user-facing features described above. We do not use Google user data for advertising, and we do not sell it.
• Sharing: we do not transfer Google user data to others except as needed to provide the Service (e.g., our AI sub-processor to draft a reply), to comply with law, or as part of a merger with successor privacy protections.
• AI processing: review text may be sent to our AI provider (Anthropic) to draft replies. It is used only to generate your reply and not to train third-party models.
• Retention & deletion: we retain Google data only as long as needed for the Service. You can revoke access anytime at myaccount.google.com/permissions, and you can request deletion by emailing us.

5. Service providers

We share data with vendors who process it on our behalf under contract, including: Stripe (payments), Supabase (database/auth/hosting), Anthropic (AI reply drafting), Google (Business Profile data), and email/analytics providers. They may access data only to perform services for us.

6. Cookies

We use essential cookies to keep you signed in and basic analytics to understand usage. You can control cookies through your browser settings.

7. Data security & retention

We use industry-standard safeguards (encryption in transit, access controls). No method is 100% secure. We keep personal data while your account is active and as needed for legal, accounting, or dispute-resolution purposes, then delete or anonymize it.

8. Your rights (incl. California)

Depending on where you live, you may have the right to access, correct, delete, or port your data, and to opt out of marketing. California residents (under the CCPA/CPRA) may request disclosure or deletion of personal information and will not be discriminated against for exercising these rights. We do not sell or "share" personal information as those terms are defined under California law. To exercise any right, email privacy@renowna.com.

9. Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect their data.

10. Changes

We may update this policy. Material changes will be posted here with a new "Last updated" date.