Privacy Policy

Last updated September 20, 2026

This policy explains what information ReviewBot collects, how we use it, and your choices. There are two groups of people whose data we handle: business customers who create an account, and their customers, whose details a business sends us so we can email them a review request.

1. Information we collect

Account information: business name, email address, and a securely hashed password. If you turn on two-factor authentication, we store the data needed to verify it.
Customer details you send us: the name and email address of each of your customers (received through your webhook), the raw webhook payload for debugging, and the review request record.
Review interactions: whether and when a customer opened their review link, the star rating they chose, any private feedback they typed, and which review platform they were directed to.
Billing information: handled by Stripe. We receive subscription status and payment confirmations, not full card numbers.
Technical data: basic server logs (such as IP address and request details) used for security, abuse prevention, and troubleshooting.
Messages: messages you send us through the in-app Inbox.

2. How we use information

To provide the Service: send review requests, show activity and feedback to the business that owns it, and process billing.
To secure the Service, prevent abuse, and provide support and account recovery.
To send service messages such as announcements, verification codes, and password resets.
To comply with legal obligations.

We do not sell personal information, and we do not use your customers' details for our own marketing.

3. Businesses and their customers

For the customer details a business sends us, the business decides why and how they are used and we process them on the business's behalf. A business's data is visible only to that business (and to our administrators for support and security). If you received a review request and want your data removed, contact the business that emailed you, or contact us and we will help.

4. Who we share information with

We use service providers who process data for us, only as needed to run the Service:

Stripe (payments)
Resend (email delivery)
Vercel (hosting) and Neon (database)
Error-monitoring and, where enabled, AI-assistant providers. AI features send only the text needed to answer the request, and are used to help you with the Service.

We may also disclose information if required by law or to protect rights and safety.

5. Retention and deletion

We keep account data while your account is active. You can ask us to delete your account and associated customer data at any time; we will delete it within a reasonable period, except where we must keep certain records (for example billing records) by law.

6. Security

Passwords are hashed, data is encrypted in transit, access to administrative tools is restricted, and we offer two-factor authentication. No system is perfectly secure, so please use a strong, unique password.

7. Your rights

Depending on where you live (for example California), you may have the right to access, correct, delete, or receive a copy of your personal information, and to not be discriminated against for using these rights. To make a request, email us at williejoe2012@outlook.com.

8. Cookies

We use only essential cookies to keep you signed in and secure your session. We do not use advertising cookies.

9. Children

The Service is for businesses and is not directed to children under 13 (or 16 where applicable).

10. Changes and contact

We may update this policy and will change the date above. Questions or requests? Email us at williejoe2012@outlook.com. Mailing address: 12800 Kiska St NE, Blaine, MN 55449.