Privacy Policy

1. Two types of data

We handle two very different kinds of data, and we treat them differently.

• Account Data comes from you, our business client: your name, business name, work email, sign-in details (a salted hash if you use a password, or basic Google profile data if you use Google sign-in), Google Business Profile connection details, and billing details. We use it to run your account, bill you and support you.
• End-Customer Contact Data is the data about your customers that you upload or sync to ReviewFlow: customer names, phone numbers, email addresses, job or service metadata, and the ratings and feedback they submit. You own this data. We process it only on your behalf and on your instructions.

We also keep basic technical logs (such as IP address and browser) for security and debugging.

2. Zero sharing or reselling

ReviewFlow never sells, rents, trades or shares your end-customer lists, and never uses them for our own marketing, advertising, profiling or any purpose other than delivering review invitations (and handling the replies) on your behalf. We do not combine one client’s customer data with another’s, and we do not use it to train AI models. Google user data is used only to sign you in and, if you connect it, to read and reply to your own Google reviews.

3. How we use Account Data

• To provide the service: sign-in, sending review invites, showing your dashboard, and alerting you to private negative feedback.
• To process subscription payments. We never see or store full card numbers.
• To secure, maintain and improve the product, and to respond to support requests.

4. Subprocessors

We use these infrastructure providers to operate the service. Each processes data only to perform its function for us:

• Turso — database hosting
• Vercel — application hosting
• Telnyx / Twilio — SMS delivery
• Resend — transactional email delivery
• Polar.sh / Paddle — payment processing (Merchant of Record)

All data is encrypted in transit (HTTPS/TLS) and at rest. Access to production systems is restricted to those who need it.

5. Data retention and deletion

All end-customer contact records are permanently deleted within 30 days of subscription cancellation, or immediately upon written request from the business client. To request deletion, email hello@heyreviewflow.com from your account email. Limited billing and tax records may be kept as required by law.

6. Your responsibilities for customer data

You are responsible for having consent or another lawful basis to contact the customers you add, and for following messaging laws. For that data ReviewFlow acts as your data processor; see our Terms of Service and Data Processing Terms.

7. Cookies

We use only essential cookies to keep you signed in. We do not use advertising or cross-site tracking cookies.

8. Changes

We may update this policy and will change the date above when we do. If a change is material we will tell you by email or in the product.

9. Contact

Questions or requests about your data? Email hello@heyreviewflow.com.