Privacy Policy

ReviewAI Inc. ("ReviewAI", "we", "our") provides a mobile-first reputation platform that helps small businesses collect Google reviews, draft AI replies, and monitor their ratings. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using ReviewAI, you agree to the practices described here.

We collect the following categories of information:

• Account information. Name, email, password, billing details, and business profile information you provide when creating an account.
• Google Business Profile data. When you connect your Google Business Profile, we receive business listing information, customer reviews, ratings, and review replies through Google's APIs, in line with the scopes you authorize.
• Customer review submissions. Reviews and ratings submitted by your customers via ReviewAI links and QR codes, including any free-text feedback.
• Device and usage data. App version, device type, operating system, IP address, crash logs, and product analytics.

• To provide and operate the ReviewAI service.
• To draft AI-generated reply suggestions in your tone of voice.
• To send service-related notifications and respond to support requests.
• To detect, prevent, and address abuse, fraud, or technical issues.
• To produce aggregated, de-identified analytics to improve the product.

ReviewAI's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not:

• Use Google user data to serve advertisements (including retargeted, personalized, or interest-based ads).
• Transfer Google user data to third parties except as needed to provide or improve user-facing features, comply with applicable law, or as part of a merger or acquisition with notice.
• Allow humans to read Google user data, except with your affirmative consent for specific items, for security purposes (such as investigating abuse), to comply with applicable law, or where data has been aggregated and anonymized.

We request the following OAuth scopes when you sign in with Google or connect your Google Business Profile:

• openid, email, profile — to create and link your ReviewAI account.
• https://www.googleapis.com/auth/business.manage — to read and reply to reviews on the Google Business Profiles you manage.

You can revoke ReviewAI's access at any time at myaccount.google.com/permissions.

When you use AI reply drafts, we send the relevant review text and a small sample of your prior replies (used to model your tone) to a third-party large language model provider operating under a zero-data- retention agreement. We do not use customer review content to train foundation models.

We share information with the following categories of service providers:

• Hosting and edge delivery (Vercel).
• Authentication, database, push notifications, and crash reporting (Google Firebase — Authentication, Firestore, Cloud Messaging, Crashlytics).
• Payment processing (Stripe on web; Apple App Store and Google Play for in-app purchases).
• Google APIs for Business Profile read/write access.
• AI model providers for reply generation, under zero-data-retention agreements.

We do not sell personal information.

We retain account and business data for as long as your account is active. You can delete your account and associated data at any time:

• In the iOS or Android app: Settings → Account → Delete account.
• On the dashboard: Settings → Account → Delete account.
• By emailing hello@review-ai.app from the address on file.

We permanently delete your profile, business data, customer review submissions, and stored OAuth tokens within 30 days of an account-deletion request, except where retention is required by law (for example, billing records).

Depending on your location, you may have rights to access, correct, export, or delete personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, contact us at hello@review-ai.app.

We use industry-standard administrative, technical, and physical safeguards to protect your information, including encryption in transit and at rest. No system is perfectly secure; we encourage you to use a strong, unique password.

ReviewAI is not directed to individuals under 16. We do not knowingly collect information from children.

ReviewAI is operated from the United States. If you access the service from outside the U.S., your information may be transferred to and processed in the U.S. and other countries with different data protection rules.

We may update this policy from time to time. Material changes will be communicated through the app or by email. The "Last updated" date at the top reflects the most recent revision.

Questions or requests? Email us at hello@review-ai.app.