Privacy Policy
EarnedEcho does two things: it measures where a business appears online, and — if you pay us — it asks your finished customers for a review. This page says exactly what we take for each, how long we hold it, and how to make us delete it.
The short version
To run a free report we only need a business name and city. To send review requests we read the invoice emails you BCC to us — the customer's email address and the invoice number — and nothing about the amounts. We never sell data, we never share your customer list, and one email to us deletes all of it.
01 Who we are
EarnedEcho is operated by EastLight Labs (이스트라이트랩스), a company registered in the Republic of Korea, which is the data controller for the information described below. For anything in this policy write to hello@earnedecho.com.
The service is currently in private testing. It is not open to the public and no payments are being taken.
02 The free report
To produce a report we need the business name and city you type in, plus an email address to send it to. Everything else in the report comes from sources that are already public: Google Maps and Search results, your Google Business Profile, public listing directories, your own website, and answers returned by AI assistants when asked a customer-style question.
| What | Why |
|---|---|
| Business name and city | To find the right business and run the checks. |
| Your email address | To send you the report. We also record when you asked. |
| Your IP address | Only to stop one machine from running hundreds of scans. Not used to identify or profile you. |
| The report itself | Kept so you can re-open the link and so a later report can be compared with it. |
Reports are about businesses, not about consumers. Where a public review is quoted in a report, it is quoted as the reviewer published it on Google.
03 Invoice emails, if you subscribe
Review collection works by you adding our address to the BCC line of the invoice emails you already send. That means we receive a copy of those emails. From each one we take:
| What | Why | Kept for |
|---|---|---|
| Customer email address | To send the review request, and to make sure we never ask the same person twice. | While you are a customer |
| Customer name | So the request does not open with “Dear customer”. | While you are a customer |
| Invoice number | To recognise a job we have already handled and never double-send. | Permanently, as a de-duplication key |
| Date the invoice was sent | To time the request and the 24-hour cancel window. | While you are a customer |
| Send outcome | Delivered, bounced, unsubscribed, clicked — so we know when to stop. | While you are a customer |
What we do not take from your invoices
- Amounts, line items, tax, payment method, or bank details.
- Attachments. If a PDF is attached, we do not open it.
- Anything from emails that are not invoices.
Your customers
Your customers are your contacts, not ours. We contact them once on your behalf, with one follow-up at most, and we stop permanently if they unsubscribe, bounce, or click through to the review page. We never add them to any list of our own and we never contact them about EarnedEcho.
04 What we never do
- We do not offer or allow incentives for reviews.
- We do not screen customers by sentiment before asking. Everyone eligible gets the same request, and it goes to Google — not to a form we control.
- We do not sell, rent or trade your data or your customer list.
- We do not use your customer data to train models.
05 Where it is kept
Everything is stored on Cloudflare's platform, which processes and hosts the data on our behalf. Access is limited to the people running EarnedEcho. This site loads fonts from Google Fonts; that provider will see your IP address when the page loads, as it would on any site that uses them.
06 Your controls
Stop the flow
Remove our address from your invoice BCC line and nothing further reaches us. Existing scheduled requests can be cancelled individually from your dashboard.
Have everything deleted
Email hello@earnedecho.com and ask. We will delete your account, your reports, your customer records and the send history, then confirm. We aim to do this within 30 days.
If you are in the EU, the UK, California, or a similar jurisdiction
You have the right to see the data we hold, correct it, have it deleted, take a copy elsewhere, and object to how we use it. Use the same address above. You also have the right to complain to your local data protection authority. A customer of yours may write to us directly, and we will act on their request without requiring them to go through you.
07 Children
EarnedEcho is a tool for business owners. It is not intended for anyone under 16, and we do not knowingly collect their data.
08 Changes to this policy
We will update this page and change the date at the top. For anything material — a new category of data, a new recipient, a longer retention period — we will email active accounts before it takes effect.