Lamppost
Sign inStart free trial
Last updated · October 16, 2026

Privacy Policy

This Privacy Policy explains what personal information Lamppost collects, how we use and share it, and the choices you have. It covers two groups of people: the businesses that use Lamppost and their team members, and the customers of those businesses whose information passes through Lamppost when a business asks for a review or replies to one.

1. Who We Are and What This Policy Covers

Lamppost is reputation and review software for local businesses, provided by Blythe Technologies, Inc., doing business as Lamppost ("Lamppost," "we," "us," or "our"), a Delaware corporation with its principal place of business in California. The Lamppost service, website, and related applications are the "Service."

The Service is offered only to businesses in the United States, and this Policy is designed to comply with applicable US federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA").

1.1 Business customers and users. For information about the businesses that subscribe to Lamppost ("Customers") and the people who use the Service on their behalf ("Users"), and for visitors to our website, Lamppost decides how the information is used. This Policy governs that information.

1.2 Our Customers’ customers. Businesses use Lamppost to send review requests, collect private feedback, and manage reviews from their own customers ("End Customers"). For End Customers’ personal information, Lamppost acts as a service provider (or processor) to the business: we process it on the business’s behalf and under its instructions and our contract with it. The business’s own privacy notice describes how it uses that information. If you are an End Customer and want to access, correct, or delete your information, please contact the business you dealt with; we will help the business respond. Section 9 explains how text-message opt-outs work.

1.3 Not covered. This Policy does not cover third-party services you reach through the Service, such as Google, Yelp, Facebook, or Nextdoor, which have their own privacy policies.

2. Information We Collect

2.1 Information Customers and Users give us

  • Account information: name, business email address, phone number, role, business name, business type, address, and locations.
  • Payment information: billing contact and address. Card details are collected and stored by our payment processor; we do not store full card numbers.
  • Business content: brand-voice samples, reply templates, staff names, settings, and other content you add to the Service.
  • Communications: messages you send us for support or feedback, and your contact details.
  • Program information: information you provide when you apply to the Founding Partner Program or refer another business, including the referred business’s contact details, used only to follow up on the referral.

2.2 Information about End Customers, processed for our Customers

  • Contact and visit details a business imports or enters: name, phone number, email address, visit or job date, and consent status for texts and email.
  • Message activity: delivery status, opt-outs, and replies to review-request messages.
  • Private feedback an End Customer chooses to send to the business, and any contact details they include.

2.3 Reviews and connected-account information

When a business connects a Google Business Profile or another review or listing account, we retrieve information from that account, including public reviews, reviewer display names, ratings, and listing details, and we post replies and updates the business approves. Reviews are written and published by third parties on those platforms.

2.4 Information collected automatically

  • Device and usage data: browser and device type, operating system, pages and features used, and actions taken in the Service.
  • Log data: IP address, referring URL, and timestamps.
  • General location: city or state derived from IP address. We do not collect precise location.
  • Cookies and similar technologies: see Section 6.
  • Diagnostics: error reports and performance data.

2.5 Information from third parties

  • Sign-in providers: if you sign in with Google, we receive your name and email address as your settings allow.
  • Payment processor: payment status and limited billing details.
  • Referrals: if another business referred you, we may receive your business name and contact details from them.

3. How We Use Information

We use information about Customers and Users to:

  • Provide, operate, and support the Service, including creating accounts, processing payments, and delivering the features you use;
  • Send the review requests, replies, and listing updates you direct, and enforce opt-outs and quiet hours;
  • Generate draft replies with AI Features (see Section 5);
  • Send service messages, such as account, security, and billing notices, and, if you have not opted out, product updates;
  • Understand how the Service is used, fix problems, and improve features, including through aggregated or de-identified statistics;
  • Detect, prevent, and investigate fraud, abuse, and security incidents;
  • Administer the Founding Partner Program and the referral program; and
  • Comply with law, enforce our agreements, and establish or defend legal claims.

We use End Customer information only to provide the Service to the business that submitted it, as described in our Terms of Service, and as required by law. We do not use End Customer information to market Lamppost to End Customers.

4. How We Share Information

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

4.1 Service providers. We use vendors that process information on our behalf under contracts that limit their use of it. They currently include:

  • Google Cloud — Hosting, database, storage, and AI model access (Vertex AI)
  • Anthropic (through Google Cloud Vertex AI) — AI models that draft review replies
  • Clerk — Sign-in, user accounts, and team management
  • Stripe — Payment processing and billing
  • Twilio — Text-message delivery and opt-out handling
  • Twilio SendGrid — Email delivery
  • Sentry — Error monitoring
  • PostHog — Product usage analytics
  • Google Workspace — Our email

We may update this list as our vendors change.

4.2 Review and listing platforms. When a business directs it, we send replies, posts, and listing updates to the platforms it has connected, such as Google, Yelp, Facebook, and Nextdoor. Content published there is public and governed by those platforms’ policies.

4.3 The business you dealt with. End Customer information, including private feedback, is shared with the business that sent the review request.

4.4 Legal and safety. We may disclose information if we believe in good faith it is necessary to comply with law or legal process, protect the rights, property, or safety of Lamppost, our Customers, or others, or detect or prevent fraud or security issues. Where the law permits, we will notify the affected Customer first.

4.5 Business transfers. Information may be transferred as part of a merger, acquisition, financing, or sale of assets. We will notify Customers before their information becomes subject to a materially different privacy policy.

4.6 With consent. We may share information for other purposes with your consent.

4.7 Aggregated or de-identified data. We may share information that has been aggregated or de-identified so it cannot reasonably identify any person or business.

5. AI Features

Lamppost uses AI models to draft replies to reviews. To do this, we send the review text, the reviewer’s display name and rating, the business’s name and type, and the business’s brand-voice settings and sample replies to our AI model provider. The business reviews and approves every reply before it is posted.

We access AI models through Google Cloud’s Vertex AI. Under our agreements with these providers, they may not use the content we send to train their models. Lamppost does not use Customer Data, including End Customer information, to train generalized AI models.

6. Cookies and Similar Technologies

We use cookies and local storage to sign you in and keep you signed in, remember your settings, keep the Service secure, and understand how the Service is used (product analytics). We do not use advertising or cross-site tracking cookies, and our marketing website does not use analytics cookies.

You can control cookies in your browser settings. Blocking essential cookies will prevent you from signing in. Because we do not sell personal information or share it for cross-context behavioral advertising, there is nothing to opt out of; if your browser sends a Global Privacy Control signal, we treat it as a request not to sell or share your information, consistent with our practices.

7. Data Retention

We keep personal information for as long as needed to provide the Service and for the purposes in this Policy.

  • Customer accounts: while the account is active. When a Customer deletes its account, deletion takes effect after a 30-day grace period, and we then delete the account’s data, including End Customer information, within 90 days, except for copies in backups that expire in the ordinary course and records we must keep by law (such as financial records).
  • End Customer information: as long as the business keeps it in the Service, or until the business deletes it or its account.
  • Opt-out records: we keep records of text and email opt-outs as long as needed to honor them and to show compliance.

8. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS 1.2 or higher) and at rest, access controls based on least privilege, separation of each business’s data, multi-factor authentication options, and monitoring. No system is perfectly secure. If a breach affects personal information, we will notify affected Customers and individuals as required by law.

9. Text Messages and Email

9.1 Review-request messages. Businesses use Lamppost to send text messages and emails to their customers, such as a request to leave a review after a visit. The business is responsible for having the recipient’s consent. Message frequency varies, and message and data rates may apply.

9.2 Opting out. Reply STOP to any text message to stop receiving texts sent through Lamppost. Because businesses share our sending numbers, this stops texts from every business that uses Lamppost, not only the one that texted you. Reply START to opt back in, or HELP for help. Every review-request email includes an unsubscribe link. Opt-outs take effect immediately.

9.3 No sharing of mobile information. We do not share or sell mobile phone numbers or text-message opt-in data and consent with third parties or affiliates for their marketing or promotional purposes. Mobile information is shared only with service providers that help us deliver messages, such as our text-messaging provider.

9.4 Messages to Customers. Lamppost sends service emails to Customers and Users. You can opt out of product updates and promotional email using the unsubscribe link; you will still receive account, security, and billing notices.

10. Your Privacy Rights

10.1 California residents. In the past 12 months, we have collected the following categories of personal information about Customers, Users, and website visitors: identifiers (name, email, phone, IP address, account identifiers); commercial information (subscription and billing history); professional information (role, business name and type); internet activity (usage, log, and cookie data); and general geolocation derived from IP address. We collect these from you, from your devices, and from the third parties in Section 2.5, for the purposes in Section 3, and disclose them to the categories of recipients in Section 4. We do not sell or share personal information, we do not knowingly sell or share the information of anyone under 16, and we do not use sensitive personal information to infer characteristics about anyone.

California residents have the right to know what personal information we have collected about them, to delete it, to correct it, to opt out of its sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights.

10.2 Other states. Residents of other states with consumer privacy laws, including Virginia, Colorado, Connecticut, Texas, Oregon, and others, may have similar rights to access, correct, delete, and obtain a copy of their personal information, to opt out of certain processing, and to appeal our decision on a request.

10.3 How to make a request. Email privacy@getblythe.com. We will verify your identity, usually by confirming the email address on your account, and respond within the time the law requires (for California, 45 days, extendable once by 45 days with notice). You may use an authorized agent, who must provide your signed permission; we may still ask you to verify your identity. If we deny your request, you may appeal by replying to our decision within 30 days, and we will respond within 60 days.

10.4 End Customers. If you are an End Customer of a business that uses Lamppost, please send requests about your information to that business, as described in Section 1.2. If you contact us, we will forward your request to the business or help it respond.

11. Children

The Service is for businesses and is not directed to children. We do not knowingly collect personal information from children under 13, and businesses may not submit it. If we learn that we have, we will delete it.

12. Data Location

Lamppost is based in the United States, and we store and process personal information in the United States. If a service provider processes information outside the United States, we require appropriate safeguards.

13. Google API Services

Lamppost’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Business Profile data only to provide the features the business has enabled, such as showing reviews, posting approved replies, and updating listings.

14. Changes to This Policy

We may update this Policy from time to time. For material changes, we will notify Customers by email or in the Service at least 30 days before the changes take effect. The "Last Updated" date shows the latest revision.

15. Contact Us

Blythe Technologies, Inc., d/b/a Lamppost — Privacy
c/o Legalinc Corporate Services Inc. (registered agent)
131 Continental Dr, Suite 305, Newark, DE 19713
Email: privacy@getblythe.com
Support: support@getblythe.com