Privacy Policy

1. Introduction

ReviewFlow ("we," "our," or "us") provides a review management and automation service for businesses. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website and services.

2. Information We Collect

Account information: When you sign up, we collect your name, email address, and password (stored in hashed form). If you sign in with Google, we receive your Google profile email and name.

Business information: Business name, address, phone, email, and Google review link that you add to your account.

Review and customer data: Customer names, phone numbers, and email addresses you provide to send review requests; ratings and feedback submitted by customers through our review pages.

Usage data: We may log access to our API and pages (e.g., IP address, timestamps) for security and operation.

3. How We Use Your Information

We use your information to: provide and operate the service; send review requests and follow-up messages (email/SMS) on your behalf; display analytics and dashboards; process payments via Stripe; improve our service; and communicate with you (e.g., password reset, important updates).

4. Third-Party Services

We use:

• Google – OAuth sign-in, Maps/Places (e.g., address validation, lead data), and optional AI (e.g., feedback summaries). Google's privacy policy applies to their services.
• Stripe – Payment processing. Payment data is handled by Stripe; we do not store full card numbers.
• Twilio – SMS delivery when you send review requests via SMS.
• Email delivery – We send email via configured SMTP (e.g., Gmail) for review requests and notifications.

5. Cookies and Similar Technologies

We use session cookies and local storage for authentication and preferences (e.g., selected business). These are necessary for the service to function. We do not use third-party advertising cookies.

6. Data Retention

We retain your account and business data for as long as your account is active. Review and customer data is retained in accordance with your use of the service. You may request deletion of your account and associated data by contacting us.

7. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data, or to object to or restrict certain processing. To exercise these rights, contact us at the email provided on our Contact page. If you are in the EU/EEA, you may also have the right to lodge a complaint with a supervisory authority.

8. Security

We use industry-standard measures (e.g., encryption, hashed passwords, secure connections) to protect your data. You are responsible for keeping your password confidential.

9. Changes

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Continued use of the service after changes constitutes acceptance.

10. Contact

For privacy-related questions or requests, contact us via the Contact page.