Ostrolo
Sign In

Privacy Policy

Last updated: August 17, 2026

1. Introduction

Ostrolo ("we," "our," or "us") provides a platform that helps service businesses manage Google review requests and obtain customer marketing consent. This Privacy Policy explains how we collect, use, and safeguard personal information of our users (businesses) and their customers.

2. SMS & Mobile Carrier Compliance (Important)

Carrier Data Protection Policy:

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We do not sell, rent, or lease your or your customers' phone numbers or opt-in consent data to any third party. SMS opt-in consent data is used strictly for conveying messages on behalf of the initiating business as configured in the platform.

3. Information We Collect

We collect personal information to provide and improve our services:

  • Business Owner Account Information: When you register on Ostrolo, we collect your name, email address, password, business name, and Google Review URL.
  • Customer Contact Information: To send review requests on your behalf, you provide customer names, phone numbers, and email addresses.
  • Consent and Opt-In Records: We record timestamps, methods of opt-in, and opt-out preferences (e.g. STOP commands or email unsubscribes) as the source of truth in our database.

4. How We Use Information

We use collected information solely for operational and service delivery purposes:

  • Processing and delivering SMS and email review requests.
  • Verifying and recording consent for marketing messages.
  • Managing subscriptions and billing via Stripe.
  • Preventing duplicate customer entries and keeping business accounts isolated.
  • Sending transactional service notifications.

5. Data Sharing & Third Parties

To deliver messages and process transactions, we integrate with secure third-party providers:

  • Twilio: Used to dispatch review requests and marketing SMS messages. Twilio handles carriers and processes inbound carrier STOP commands.
  • Resend: Used to deliver transactional and review emails.
  • Stripe: Processes payment details and subscriptions. We do not store credit card details directly on our servers.

6. Opting Out of Communications

We prioritize user and customer choice. Recipients can opt out at any time:

  • SMS: Reply with STOP to any SMS message to instantly opt out of future texts. Reply HELP for support information.
  • Email:Click the "Unsubscribe" link in any email header or footer to manage communication preferences.

7. Security

We implement strict security guidelines, including tenant isolation (ensuring businesses can never access other businesses' customer data) and cryptographically secure tokens for public consent routes.

8. Contact Us

If you have any questions about this Privacy Policy, please reach out to us at support@ostrolo.com.