Privacy Policy

1. Who we are

Reviewr (“we”, “us”, “our”) is an AI-powered review management service that helps business owners manage and respond to Google Business Profile reviews. This Privacy Policy explains how we collect, use, and protect information about you when you use our service at reviewrai.app.

2. Information we collect

We collect the following types of information:

• Account information: Your name and email address when you sign up.
• Business information: Your business name, type, description, and phone number that you provide.
• Google Business Profile data: Review content, reviewer names, ratings, and timestamps — accessed via the Google Business Profile API with your explicit permission.
• Billing information: Payment is handled securely by Stripe. We store only your Stripe customer ID and subscription status — never your card details.
• Usage data: Basic analytics about how you interact with the service (e.g., which reviews you approve or discard).

3. How we use your information

• To provide and improve the Reviewr service
• To generate AI-drafted review replies on your behalf
• To send you email notifications about new review drafts
• To process payments and manage your subscription
• To communicate important service updates

4. Google data

We access your Google Business Profile data only with your explicit OAuth permission. We use this data solely to read your reviews and post replies that you have approved. We do not sell, share, or use your Google data for advertising purposes. You can revoke our access at any time through your Google Account settings.

5. Data sharing

We do not sell your personal data. We share data only with:

• Supabase: Our database and authentication provider.
• Stripe: Our payment processor. Subject to Stripe's privacy policy.
• Resend: Our email delivery provider, used to send you review drafts.
• OpenAI / Anthropic: AI providers used to generate draft replies. Review content is sent to these services for this purpose only.
• n8n: Our automation workflow tool used to orchestrate review processing.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., billing records for up to 7 years).

7. Cookies

We use only essential cookies necessary for the service to function (authentication sessions). We do not use advertising or tracking cookies. You can disable cookies in your browser, but this may prevent you from signing in.

8. Your rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict our processing of your data
• Data portability

To exercise any of these rights, email us at privacy@reviewrai.app.

9. Security

We take security seriously. All data is encrypted in transit (TLS) and at rest. We use industry-standard authentication practices and regularly review our security measures. However, no system is perfectly secure and we cannot guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Email us at privacy@reviewrai.app