Keep the boundary clear
Google’s rules and Xebora’s recommendations are not the same thing
Google controls platform compliance. Its guidance says verified businesses can reply, approved replies appear publicly under the business name, and only policy-violating reviews are eligible for removal. Merchants should not flag a review merely because they dislike or dispute it. Google also prohibits fake engagement, including incentivized reviews and attempts to influence review sentiment or removal.
Xebora’s four routes are editorial operating standards, not Google requirements. Xebora recommends timely replies to routine legitimate reviews, owner context for sensitive or disputed negatives, private recovery when public detail would be inappropriate, and no public reply when engagement could amplify threats or expose private information. Xebora must not invent facts, disclose private service, payment, health, or personal details, argue publicly, pressure a reviewer to change a rating, or promise improved rankings, bookings, revenue, or ratings.
Official sources:Google Business Profile HelpGoogle Business Profile HelpGoogle Business Profile HelpGoogle Maps User Generated Content Policy HelpFederal Trade Commission
Decision system
The salon review reply decision matrix
Start with the content, not the star rating. A one-star review may be an ordinary wait-time complaint, a privacy problem, a threat, or spam. Each requires a different route.
| Review situation | Route | Public action | Owner input | Do not do |
|---|---|---|---|---|
| Positive review with specific praise | Reply now | Thank the reviewer and acknowledge one detail they actually mentioned. Stay conversational, not promotional. | Usually none, unless the review states a fact the business cannot verify. | Do not add services, staff involvement, or appointment details the reviewer did not state. |
| Positive rating with no written comment | Reply now | Use a brief acknowledgment. With no written facts, there is nothing responsible to personalize. | None in routine cases. | Do not invent a visit detail to make the reply appear personal. |
| Neutral or mixed review | Reply now | Acknowledge both the positive and the concern. Invite direct follow-up when useful. | Only when the concern depends on appointment-specific facts. | Do not thank the reviewer for the compliment while ignoring the criticism. |
| Ordinary negative without private or disputed facts | Reply now, then move private | Acknowledge the concern, state a verified general limitation if helpful, and offer a private route. | Optional unless the reply promises a remedy. | Do not argue the visit in public or promise a refund, redo, or discipline without authority. |
| Price, wait-time, cancellation, deposit, or policy complaint | Get owner context | Confirm the policy and communication first. Publicly acknowledge frustration and state only the verified policy. | Confirm the policy, timeline, and any exception or follow-up already offered. | Do not publish timestamps, blame the client, or treat the policy as proof that the experience was acceptable. |
| Review that names an employee | Reply to routine praise; get context for criticism | Acknowledge praise without employment details. Check critical claims before stating facts. | Required for conduct claims, disputed service details, or disciplinary implications. | Do not publicly blame, discipline, defend, or expose the employee. A name alone is not automatic removal grounds. |
| Service-result, payment, health, or other sensitive complaint | Move recovery private | Use a minimal acknowledgment and safe contact path, or wait for approved wording. | Required. Confirm facts privately with the appropriate decision-maker. | Do not reveal formulas, health information, payment history, photographs, contact details, or alleged consent. |
| Suspected fake, spam, repetitive, promotional, or off-topic review | Report or withhold | Match the content to a Google policy category and report only when a plausible violation exists. | Check reasonable records, recognizing that aliases, walk-ins, companions, and third-party bookings exist. | Do not call someone a liar or declare a review fake because the name is unfamiliar. |
| Harassment, doxxing, a specific threat, or review extortion | Report or withhold | Preserve links and evidence, report through Google, and avoid amplifying the content. Use the dedicated extortion form when applicable. | Escalate immediately to the owner and follow the salon’s safety procedures. | Do not pay, offer services for removal, counterthreaten, or expose private information. |
| Legal, discrimination, injury, infection, theft, fraud, or serious safety allegation | Get context; often withhold initially | Preserve the review and seek appropriate guidance. Any later reply should be minimal, factual, and privacy-safe. | Confirm whether an incident, insurer notice, regulator contact, or legal process exists. | Do not improvise an admission or denial, threaten legal action, or promise removal. |
Swipe horizontally on a small screen. The situation column stays visible while you compare the response route, public action, owner input, and prohibited action.
Route 2
Get owner context before the salon states facts
Pause when a review depends on information the responder cannot safely know. Common triggers include a named employee, disputed wait, cancellation fee, deposit, price difference, redo request, alleged promise, or claim about how a service was performed. The pause is a factual control, not avoidance.
Before drafting, establish five things privately: whether the interaction can be identified; which policy and price applied; which staff members were involved; what the salon already communicated or offered; and what follow-up remains authorized. “We cannot find this person” is not proof of a fake review. A booking may use another name, or the reviewer may be a walk-in, companion, or alias.
Employee-named reviews require restraint. Routine praise can be acknowledged, but criticism should not trigger public defense or discipline. Google’s personal-information policy does not make every employee-name mention automatically removable; it permits some references to public-facing professionals while restricting personal information disclosed without consent.
After confirming the facts, publish only what a future reader needs. Internal notes, exact appointment times, staff schedules, payment history, and private conversations belong in recovery records, not the Google thread.
Sources:Google Maps User Generated Content Policy HelpGoogle Business Profile Help

Route 3
Move recovery private when useful details should not be public
A public Google reply is the wrong place to resolve a detailed complaint about a color formula, chemical reaction, skin or scalp concern, payment dispute, refund history, personal schedule, accessibility need, or another sensitive fact. Google advises businesses to protect privacy and move complex situations to phone or email. Its policy also restricts unauthorized personal information, including financial and medical information.
The public response has a narrow job: acknowledge that the concern was seen, avoid confirming private facts, and provide an appropriate contact route. The private conversation can then establish what happened, what the client is requesting, what the salon can offer, and whether an insurer, attorney, regulator, or safety lead should be involved.
Moving private does not hide valid criticism. The review remains public unless Google removes it under policy, and any posted acknowledgment remains visible. The boundary prevents the business from publishing information that could harm the reviewer, an employee, or the salon.
Do not make help conditional on changing or removing a review. Google prohibits offering payment, discounts, free goods, or services in exchange for a review, revision, or removal. The FTC separately prohibits specified fake-review and review-suppression practices in the United States.
Sources:Google Business Profile HelpGoogle Maps User Generated Content Policy HelpFederal Trade CommissionFederal Trade Commission
Route 4
Report a plausible policy violation and decide whether silence is safer
Google will not remove a review merely because a business considers it unfair, inaccurate, or damaging. Its guidance says only policy-violating reviews are eligible and tells merchants not to report criticism simply because they dislike or dispute it. A report should identify a policy category, not merely present the business’s version of events.
Potential categories include content unrelated to a genuine experience, paid or coordinated fake engagement, conflicts of interest, impersonation, unauthorized personal information, harassment, specific threats, doxxing, offensive attacks, obscenity, off-topic commentary, advertising, solicitation, or repetitive content. Google also allows respectful descriptions of negative experiences, so harsh criticism is not automatically prohibited.
Preserve the review link, relevant reviewer-profile link, screenshots, dates, related messages, and reporting reason. Google says evaluation typically takes several days and offers a one-time appeal after an initial no-violation decision. Never promise removal.
Extortion is a separate escalation: negative reviews are followed by a demand for money, goods, or services for removal. Google says not to engage or pay, to gather evidence, and to use its dedicated merchant form. For a threat, doxxing, or urgent safety risk, avoid public confrontation and follow the salon’s safety procedures.
Withholding a reply is appropriate when engagement would repeat private information, amplify abuse, invite more threats, or create an unreviewed statement about a serious allegation. That narrow exception is not permission to ignore ordinary dissatisfied clients.
Sources:Google Business Profile HelpGoogle Maps User Generated Content Policy HelpGoogle Business Profile Help
Escalation boundary
Treat legal and safety allegations as escalation events, not copywriting prompts
A review alleging discrimination, assault, theft, fraud, infection, injury, unsafe chemical practice, or another serious event cannot be handled responsibly with a generic apology. The claim may describe a genuine experience, lack context, or violate a policy category. The wording alone does not establish which.
Preserve the content before it changes, notify the owner, and check whether the matter has reached an insurer, attorney, regulator, landlord, franchisor, or law-enforcement contact. This guide does not determine liability and is not legal advice. Obtain appropriate guidance before publishing a statement that admits, denies, or reframes the allegation.
Google provides policy-reporting routes and a separate path for content a user believes violates local law. That does not mean a salon should label criticism defamatory on its own or assume removal will succeed. Withhold initially, establish the facts and decision-maker, then publish only a minimal, accurate, privacy-safe reply if it remains useful.
Sources:Google Maps User Generated Content Policy HelpGoogle Maps User Generated Content Policy Help
Operationalize it
A repeatable review workflow for a busy salon
The system works only if someone owns it. Each new review should enter one queue with the review link, date, rating, text, assigned route, owner-context status, report status when applicable, approved reply, and publication date. That record prevents duplicate answers and explains why a sensitive review did not receive an instant reply.
Classify first: legitimate and low-risk, context-dependent, privacy-sensitive, or potentially policy-violating. Then identify the public purpose. A reply can acknowledge praise, clarify a general policy, show that a concern is being taken seriously, or provide a private recovery route. It should not try to prove every fact to strangers.
Draft only from confirmed information. Remove appointment details, payment data, health information, internal staff discussion, blame, speculation, promotional language, and any trade of a remedy for a review change. Route sensitive negatives to the owner for context and approval. Log the published reply and private follow-up without copying confidential details into a broad marketing system.
Google recommends timely responses but publishes no universal reply deadline. Routine reviews can move promptly; sensitive, threatening, or serious allegations should wait for the necessary facts and decision-maker.
Sources:Google Business Profile HelpGoogle Business Profile Help
Hard boundaries
What a salon should never do in a Google review reply
- 1
Do not invent an appointment, service, stylist, outcome, or prior conversation. Do not disclose a reviewer’s phone number, payment history, health information, photographs, formula, schedule, or other private facts. Do not shame an employee or client, write a long rebuttal, sell another service, or threaten the reviewer.
- 2
Do not offer a discount, refund, redo, free service, or other benefit in exchange for a positive review, higher rating, revision, or removal. Do not ask staff, family, or vendors for undisclosed reviews or selectively solicit only clients expected to be positive. Google’s fake-engagement policy and U.S. FTC rules both reject manipulative review practices, though their exact standards are not identical.
- 3
Do not report every low rating. Google says disagreement is not a removal ground, and the FTC warns against misusing reporting tools to eliminate honest negative reviews. A defensible program distinguishes criticism from policy violations.
Sources:Google Maps User Generated Content Policy HelpGoogle Business Profile HelpFederal Trade CommissionFederal Trade Commission
Questions salon owners ask
Three practical review-reply questions
Does Google require salons to reply to every review?
No. Google allows verified businesses to reply and describes responding as a best practice, but it does not require an answer to every review. Xebora recommends replying to nearly every legitimate review while pausing for owner context, moving sensitive recovery private, or withholding when policy, privacy, safety, or legal risk makes immediate engagement inappropriate.
Sources:Google Business Profile HelpGoogle Business Profile Help
Should a salon reply to a Google review it believes is fake?
Compare the content with Google’s policy categories and report it when a plausible violation exists. An unfamiliar name is not proof: bookings may use another name, and the reviewer may be a walk-in, companion, or alias. Do not accuse the reviewer publicly. Google says only policy-violating reviews are eligible for removal and offers a one-time appeal after an initial no-violation decision.
Sources:Google Business Profile HelpGoogle Maps User Generated Content Policy Help
How quickly should a salon reply to a negative Google review?
Google recommends timely replies but publishes no universal deadline. A routine negative can be answered promptly when facts and authority are clear. A complaint involving a named employee, disputed policy, private information, payment, health, a threat, or a serious allegation should wait for owner context and approval.
Sources:Google Business Profile Help
Source notes
Official sources and editorial limits
Google sources below define platform mechanics, reporting routes, and prohibited-content categories. FTC sources provide U.S. guidance and the federal rule concerning fake reviews, incentives, insider reviews, and review suppression. Statements about when Xebora pauses, seeks owner approval, moves recovery private, or withholds a reply are Xebora editorial standards, not Google requirements. This guide does not provide legal advice or promise review removal, rating improvement, rankings, bookings, or revenue.
- 01Manage customer reviewsGoogle Business Profile Help
- 02Tips to get more reviewsGoogle Business Profile Help
- 03Report inappropriate reviews on your Business ProfileGoogle Business Profile Help
- 04Prohibited and restricted contentGoogle Maps User Generated Content Policy Help
- 05Report negative review extortion scamsGoogle Business Profile Help
- 06Legal removalsGoogle Maps User Generated Content Policy Help
- 07Final rule banning fake reviews and testimonialsFederal Trade Commission
- 08Soliciting and paying for online reviews: a guide for marketersFederal Trade Commission
When the work is recurring
Use Xebora for recurring reply work—not for facts it cannot know
Xebora is a fit when the salon wants one recurring process for Google review replies alongside ongoing Google Business Profile care and Google, Facebook, and Instagram posting. Sensitive negative replies require owner context or approval rather than an invented answer.
Basic is $99 per month and includes weekly profile checks, automatic replies to new Google reviews, and one weekly post on each channel. Local Presence is $149 per month and adds ongoing profile optimization, new and older review management, matching images, three posts per week per channel, text approvals, and a weekly proof report. Both follow a 14-day trial.
Neither plan promises rating gains, review removal, rankings, bookings, revenue, or a particular customer outcome. Suspicious, threatening, private, legal, or safety-sensitive reviews still require reporting and owner escalation.
Related reading
