Privacy Policy
Last updated: January 1, 2025
1. Introduction
ReviewReply, Inc. ("ReviewReply", "we", "us", or "our") operates the ReviewReply platform accessible at reviewreply.com. This Privacy Policy describes how we collect, use, disclose, and protect information about you when you use our services.
By using ReviewReply, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our services.
2. Information We Collect
Account information: When you register, we collect your name, email address, and password (stored as a salted hash).
Business information: Business name, address, industry vertical, and brand voice preferences you provide during setup.
Google Business Profile data: When you connect your GBP account, we access review content, reviewer display names, star ratings, and your business location details. We do not store your Google account password.
Review data: Reviews imported from connected platforms, AI-generated responses, and posting history.
Usage data: Log files, IP addresses, browser type, pages visited, and time stamps collected automatically when you use our service.
Payment information: Billing details are processed and stored by Stripe, Inc. We never store full credit card numbers on our servers.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the ReviewReply platform
- Generate AI responses to your reviews using the Anthropic Claude API
- Post approved responses to Google Business Profile on your behalf
- Send transactional emails (account creation, billing receipts, alerts)
- Send product update and marketing emails (you may opt out at any time)
- Detect, prevent, and respond to fraud, abuse, and security incidents
- Comply with legal obligations
4. Data Sharing and Disclosure
We do not sell your personal data. We share information only in the following circumstances:
Service providers: We share data with trusted vendors who help us operate our services, including Anthropic (AI), Google (GBP integration), Stripe (payments), Resend (email), and Vercel (hosting). Each vendor processes data only as instructed by us.
Business transfers: If ReviewReply is acquired or merges with another company, your information may be transferred as part of that transaction.
Legal compliance: We may disclose information when required by law or to protect our rights, users, or the public.
5. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required to retain it by law (e.g., billing records for tax purposes, which we retain for 7 years).
Review data and AI-generated responses are retained for the lifetime of your account to provide analytics and history.
6. Security
We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, bcrypt password hashing, role-based access controls, and regular security audits. However, no method of transmission over the internet is 100% secure.
7. Your Rights
Depending on your jurisdiction, you may have rights to:
- Access: request a copy of your personal data
- Correction: update inaccurate or incomplete data
- Deletion: request deletion of your personal data
- Portability: receive your data in a machine-readable format
- Objection: object to certain processing activities
To exercise any of these rights, email us at privacy@reviewreply.com.
8. Cookies
We use cookies and similar tracking technologies to maintain your session, remember preferences, and analyze usage. See our Cookie Policy for full details.
9. Children's Privacy
ReviewReply is not directed at children under 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided personal information, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a prominent notice on our website at least 30 days before the changes take effect. Your continued use of ReviewReply after the effective date constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy, please contact us at:
ReviewReply, Inc.
privacy@reviewreply.com
support@reviewreply.com