Proposal
What's already shipped, what's queued next, and the longer-term roadmap. Each item is tagged with effort (S/M/L) and risk.
Shipped
5Hardening + launch-blocker work already live in production.
8 launch-blocker bugs
Auth link rows, atomic credits, timing-safe LS sig, idempotency, Polar fallback
Cache-leak headers
no-store + Vary + X-Robots on private API routes
GBP parser hardening
Malformed encoding, inline place_id, hex CID, coordinate-only URLs
Email queue backoff + dead-letter
Exponential retry + admin-retryable failed state
GDPR geo-block on cold email
EU/EEA/UK/CH skipped on all send paths
Next up
4Highest-value items queued — mostly post-launch features and safe payment additions.
Refund flow
refunds table + order_refunded webhook + credit refund on Google denial
Plan switcher / downgrade UI
Self-serve tier change in /portal/billing
Audit job retry budget + orphan cleanup
Cap retries, sweep abandoned jobs
Email queue exponential backoff dashboard
Surface backoff state + dead-letter in admin UI
Future / roadmap
6Bigger bets to evaluate once the launch sprint settles.
Self-serve removal submission
Let users file appeals without admin in the loop
Multi-platform removal (Yelp/BBB)
Extend beyond Google to other review platforms
White-label reseller portal
Custom domain + branding for agencies
In-app review-response AI co-pilot
Realtime reply drafting inside the monitoring feed
Usage-based billing for resellers
Per-removal metered billing on top of seats
Mobile app (alerts + approvals)
Push alerts + one-tap approve removals/replies