Privacy Policy

1. Information We Collect

Account information: When you sign in with Google, we receive your name, email address, and profile picture from your Google account.

Payment information: Payments are processed by Stripe, Inc. We never see or store your full card number; Stripe provides us only with your customer ID, subscription status, and billing email.

Google API data: With your explicit permission (OAuth consent), the Service accesses your Google Business Profile account and location information, and your Google Business Profile reviews (reviewer names, star ratings, review text, and existing replies), via the business.manage scope. To keep the Service running while you are logged out, we store a Google refresh token, encrypted at rest in our database (Supabase), used solely to fetch new reviews and post replies on your behalf.

Automatically collected: Basic technical data (IP address, browser type, pages visited) via our hosting provider (Vercel) for security and rate-limiting purposes. We do not use advertising cookies or third-party trackers.

2. How We Use Your Information

We use your information only to: fetch your Google reviews and generate AI-written reply drafts or automated replies; post replies to your Google Business Profile on your behalf (only if you enable automation); manage your subscription and free trial through Stripe; enforce usage limits and prevent abuse; and respond to support requests.

We do not sell your data. We do not use your Google data for advertising, and we do not allow humans to read your reviews except when you explicitly ask for support.

3. Third-Party Processors

Your data is processed by these providers, each under their own privacy terms: Google (authentication and Business Profile APIs), Supabase (database hosting), Vercel (website hosting), Stripe (payments), and OpenRouter (AI language model processing — review text is sent to generate replies; it is not used to train models per OpenRouter's data policies).

4. Data Retention and Deletion

We keep your account data while your account is active. You may disconnect your Google account at any time, which revokes our access. You can also revoke access directly at myaccount.google.com/permissions.

To delete your account and all stored data (including your refresh token), email [SUPPORT EMAIL]. We will complete deletion within 30 days. Review content fetched from Google is processed transiently to generate replies and is not retained longer than needed to operate the Service.

5. Security

We use industry-standard measures: encrypted connections (HTTPS), encrypted database storage, and restricted server-side API keys. No method of transmission over the internet is 100% secure, but we work to protect your information.

6. Children's Privacy

The Service is intended for business users and is not directed at children under 13. We do not knowingly collect data from children.

7. Changes to This Policy

If we update this policy, we will post the new version on this page and update the date above. Continued use of the Service after changes means you accept the updated policy.

8. Contact

Questions about this policy or your data? Email support@reviewshieldhq.com.

ReviewShield AI LLC · 131 Continental Dr Suite 305 Newark, DE, 19713 US · reviewshieldhq.com