Privacy Policy

Last updated September 27, 2026

This policy explains what information ReviewBot collects, how we use it, and your choices. There are two groups of people whose data we handle: business customers who create an account, and their customers, whose details a business sends us so we can email them a review request.

1. Information we collect

Account information: business name, email address, and a securely hashed password. If you turn on two-factor authentication, we store the data needed to verify it.
Customer details you send us: the name and email address of each of your customers (received through your webhook), the raw webhook payload for debugging, and the review request record.
Review interactions: whether and when a customer opened their review link, the star rating they chose, any private feedback they typed, and which review platform they were directed to.
Billing information: handled by Stripe. We receive subscription status and payment confirmations, not full card numbers.
Technical data: basic server logs (such as IP address and request details) used for security, abuse prevention, and troubleshooting.
Messages: messages you send us through the in-app Inbox.

2. How we use information

To provide the Service: send review requests, show activity and feedback to the business that owns it, and process billing.
To secure the Service, prevent abuse, and provide support and account recovery.
To send service messages such as announcements, verification codes, and password resets.
To comply with legal obligations.

We do not sell personal information, and we do not use your customers' details for our own marketing.

3. Businesses and their customers

For the customer details a business sends us, the business decides why and how they are used and we process them on the business's behalf. A business's data is visible only to that business (and to our administrators for support and security). If you received a review request and want your data removed, contact the business that emailed you, or contact us and we will help.

4. Who we share information with

We use service providers who process data for us, only as needed to run the Service:

Stripe (payments)
Resend (email delivery)
Vercel (hosting) and Neon (database)
Error-monitoring and, where enabled, AI-assistant providers. AI features send only the text needed to answer the request, and are used to help you with the Service.

We may also disclose information if required by law or to protect rights and safety.

5. Retention and deletion

We keep account data while your account is active. You can ask us to delete your account and associated customer data at any time; we will delete it within a reasonable period, except where we must keep certain records (for example billing records) by law.

6. Security

Passwords are hashed, data is encrypted in transit, access to administrative tools is restricted, and we offer two-factor authentication. No system is perfectly secure, so please use a strong, unique password.

7. Your rights

If you live in a state with a consumer privacy law (including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia), you may have the right to:

Know whether we're processing your personal information, and access or get a copy of it.
Correct inaccuracies or request deletion of your personal information.
Opt out of the sale of your personal information, its use for targeted advertising, or profiling. We do not sell personal information or use it for targeted advertising, but you still have this right.
Not be discriminated against for exercising any of these rights.

To make a request, email us at hello@reviewbot.us. We'll need to verify it's really you before acting on it. If we decline a request, you can appeal by contacting us the same way; if we deny the appeal, you may complain to your state attorney general. California residents can also ask, once a year and free of charge, what categories of personal information we've shared with third parties and who those third parties were (California Civil Code § 1798.83).

8. Cookies and Do Not Track

We use only essential cookies to keep you signed in and secure your session. We do not use advertising cookies. Some browsers send a "Do Not Track" signal; there's no agreed-upon standard for how sites should respond to it, so we don't currently change our behavior based on it.

9. Children

The Service is for businesses and is not directed to children under 13 (or 16 where applicable).

10. Changes and contact

We may update this policy and will change the date above. Questions or requests? Email us at hello@reviewbot.us. Mailing address: 12800 Kiska St NE, Blaine, MN 55449.