This Privacy Policy describes how JK.Creative LLC ("JK Creative," "we," "us," or "our") handles information in connection with OwnRep ("Software"). By installing and using OwnRep, you agree to the practices described in this policy.
For questions or privacy requests, contact support@jkcreative.store.
OwnRep is a locally installed desktop application. All business data — reviews, emails, support tickets, OAuth tokens, configuration settings, and logs — is stored in a SQLite database on your own computer. JK Creative does not operate a cloud server that receives, stores, or processes your business data.
The only data transmitted to JK Creative is your license key, sent at application launch to verify your subscription status. Nothing else is sent to us.
The following data is stored in a local SQLite database on your machine:
| Data Type | What It Is | Why It's Stored |
|---|---|---|
| OAuth access tokens and refresh tokens | Credentials for your Google (Gmail + GBP) or Microsoft (Outlook) account | Required to send emails and monitor reviews on your behalf |
| Business email address | The email account you connect during setup | Identifies which account to use for sending |
| Review data | Review text, reviewer names, star ratings, platform source (Google, Yelp), timestamps | Core function — monitoring and responding to reviews |
| Email send records | Recipients, send timestamps, response status | Tracks which customers received review requests |
| Support ticket content | Ticket text provided by you for macro generation | Used to generate support response templates (one-time analysis) |
| Support macros | AI-generated response templates created from your tickets | Stored for reuse in future support interactions |
| Application configuration | Preferences and notification settings (plaintext) plus any Bring-Your-Own-Key API credentials you enter (e.g., your Yelp Fusion API key — stored encrypted at rest using your operating system's keychain) | App operation |
| Application logs | Diagnostic events, errors, API call timestamps | Debugging and troubleshooting |
| License key | Your subscription license key from Square | Validated on launch |
None of this data is transmitted to JK Creative except the license key as described in Section 4.
When you use OwnRep's features, you or the Software may process:
Each time OwnRep launches, it sends your license key to JK Creative's license validation server. This request:
We log the validation request (timestamp + license key status) for billing and fraud prevention purposes. We do not log IP addresses in association with license keys beyond what is inherent in standard web server logging, and we do not use this data for any purpose other than license management.
OwnRep integrates with several third-party services. When you use a feature that relies on a third-party API, data is transmitted to that service as described below.
safeStorage. The decrypted key never leaves your device and is never transmitted to JK Creative.OwnRep's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Scope requested: https://www.googleapis.com/auth/gmail.send. This scope permits OwnRep to send email as the authenticated user. It does not permit OwnRep to read, modify, or delete any email in the user's mailbox. OwnRep does not request any other Gmail scope.
How OwnRep uses Google user data:
gmail.send for exactly one purpose — to send review-request emails, composed by the authenticated business owner, to customers on lists the owner imports into OwnRep. Emails are sent from the owner's own Gmail account so recipients recognize the sender and messages deliver with the domain's own reputation.How OwnRep does NOT use Google user data:
Where Google user data is stored: OwnRep is a desktop application. OAuth access tokens and refresh tokens are stored locally on the user's own device in the application's configuration directory. These tokens are never transmitted to JK Creative's servers. The contents of outgoing emails are sent directly from the user's device to Google's Gmail API and are not retained by JK Creative after sending.
How to revoke access: Users can revoke OwnRep's access to their Google account at any time at https://myaccount.google.com/permissions. Signing out of OwnRep also deletes the locally stored OAuth tokens.
On launch, OwnRep checks JK Creative's CDN for available software updates. This request:
JK Creative does not collect, and OwnRep does not transmit to JK Creative:
Because all data is stored locally on your machine, you have full control over retention and deletion.
%APPDATA%\OwnRep. On macOS, it is typically ~/Library/Application Support/OwnRep.JK Creative does not store your business data and therefore cannot be breached for it. Sensitive credentials stored locally by OwnRep — OAuth refresh tokens, OAuth access tokens, and any Bring-Your-Own-Key API credentials you provide (e.g., Yelp Fusion API key) — are encrypted at rest using your operating system's keychain (macOS Keychain Services / Windows DPAPI) via Electron's safeStorage. The decryption keys are managed by your OS and are tied to your user account; OwnRep never possesses or transmits them.
The remaining locally stored data (review history, customer email lists, support macros, application settings) is stored in plaintext in OwnRep's local SQLite database, since your operating system already isolates it under your user account. Securing the device itself is your responsibility as the device owner. We recommend:
The license validation connection uses HTTPS. We do not store your OAuth tokens or your Yelp Fusion API key on our servers at any time.
Because OwnRep stores all data locally on your machine and JK Creative does not receive or maintain your personal or business data, most CCPA/CPRA obligations (right to access, delete, or opt out of sale) apply to data held on your device, which you already fully control.
The only personal information JK Creative holds is your license key and billing information processed through Square. For requests related to those:
JK Creative is a US-based company and OwnRep is marketed and sold in the United States. We do not operate EU-directed marketing or maintain EU data transfer mechanisms (e.g., Standard Contractual Clauses) at this time.
If you are located in the European Union or European Economic Area, please be aware:
We recommend reviewing the GDPR policies of Google, Microsoft, and Yelp before deploying OwnRep in an EU context.
OwnRep is a business tool not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has somehow provided information to JK Creative in connection with OwnRep, contact support@jkcreative.store.
JK Creative may update this Privacy Policy at any time. We will post the updated policy at jkcreative.store and update the "Last Updated" date. For material changes, we will provide notice via the email address on file with Square. Continued use of OwnRep after the effective date of a material change constitutes acceptance.
JK.Creative LLC
support@jkcreative.store
jkcreative.store
This Privacy Policy was prepared for informational purposes. JK Creative recommends review by qualified legal counsel, particularly regarding Gemini API data handling practices and any jurisdiction-specific requirements applicable to your business.