Privacy Policy — ReviewResponder

1. Who we are

ReviewResponder (“we”, “us”, “our”) operates the website reviewresponderapp.com and provides an AI-powered platform that helps businesses generate and publish responses to their online reviews.

2. Data we collect

Account data: email address and display name when you register.
Business data: business names, categories, addresses and response preferences you enter.
Review data: review text, author names, ratings and dates — either imported from Google Business Profile or entered manually.
Google account data: when you connect your Google Business Profile, we store OAuth access and refresh tokens to sync your reviews and publish replies on your behalf.
Payment data: billing is processed by Stripe. We do not store card numbers or payment details.
Usage data: pages visited, features used, approximate location (country/city).

3. How we use your data

To provide and improve the ReviewResponder service.
To sync your Google Business Profile reviews automatically.
To publish AI-generated responses to your reviews on your behalf, only after your explicit approval.
To process subscription payments via Stripe.
To send transactional emails (account confirmation, password reset).

4. Google user data

ReviewResponder's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

We access your Google Business Profile data solely to fetch your reviews and post replies on your behalf.
We do not share your Google data with third parties except as necessary to provide the service.
We do not use your Google data for advertising purposes.
You can disconnect your Google account at any time from Settings. Upon disconnection, your OAuth tokens are immediately deleted.

5. Data sharing

We share data only with the following service providers, strictly to operate the platform:

Supabase — database and authentication hosting.
Vercel — web hosting and deployment.
Stripe — payment processing.
Anthropic — AI text generation (review text is sent to generate responses; no personal data is stored by Anthropic beyond their standard retention policy).

We never sell your data to third parties.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, we permanently delete all associated data within 30 days, except where required by law (e.g. financial records).

7. Your rights

Depending on your location, you may have the right to access, correct, export or delete your personal data. To exercise these rights, contact us at privacy@reviewresponderapp.com.

8. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.

9. Security

All data is transmitted over HTTPS. OAuth tokens are stored encrypted at rest in our database. We follow industry-standard security practices.

10. Changes to this policy

We may update this policy from time to time. We will notify users of material changes by email or via an in-app notice.

11. Contact

For privacy-related questions: privacy@reviewresponderapp.com