Privacy Policy

Last updated: February 2026

This Privacy Policy explains how ReviewResQ ("we", "us", "our") collects, uses, and protects information when you use our website and Service. It also describes how we handle Google Business Profile data for OAuth connections.

Google Business Profile access (OAuth)

Scope requested: https://www.googleapis.com/auth/business.manage

Why we request it: to let you connect your Google Business Profile so ReviewResQ can read review activity and help you manage replies inside the app.

When you connect Google, we only access the data needed to operate review workflows. This includes:

Account identifiers and location IDs for the Google Business Profile locations you connect.
OAuth tokens and refresh tokens so you can stay signed in and post replies.
Review metadata (review content, author name as provided by Google, star rating, timestamps, and reply state).
Business profile details that are necessary to show your locations and reply context.

Data from Google is stored securely in Google Cloud (Firebase/Firestore) with least-privilege access controls and encryption in transit and at rest. Only authorized team members who need to support or operate the Service can access it.

How we use information

We use the information we collect to:

Provide, operate, and improve the Service (including fetching reviews, posting owner responses, and running AI reply workflows).
Generate analytics and reports for your account.
Send transactional emails and notifications.
Maintain security, prevent abuse, and troubleshoot issues.

We do not sell personal information.

Information we collect directly

Account information: name, email address, business name, phone number, login details.
Customer feedback data: information submitted by your customers through the feedback links you send (such as name, rating, comments, and contact details).
Usage and technical data: IP address, browser type, device information, and pages visited.
Payment information: processed securely by Paddle, our Merchant of Record. We do not store full card details.

Data retention

We keep your account, token, and review data while your account is active so we can operate the Service. If you cancel or request deletion, we remove or anonymize personal data that is no longer needed, except where law requires retention. Backup copies are purged on their normal rotation cycle.

Revoking Google access

You can revoke ReviewResQ's Google access at any time by:

Opening your Google Account → Security → Third-party access and removing ReviewResQ, and/or
Using the disconnect/remove Google button inside the app if available.

Revoking access stops new data from syncing and prevents us from posting replies on your behalf.

Requesting deletion

You can request deletion of your ReviewResQ account or Google-derived data by emailing support@reviewresq.com. We will delete OAuth tokens, account identifiers, connected locations, and stored review/reply metadata within a reasonable timeframe (typically within 30 days) unless retention is required by law or for security/audit purposes.

Payments and Paddle

All payments and subscriptions are handled by Paddle (Paddle.com). Paddle may collect additional information necessary to process payments and comply with financial regulations. Paddle’s privacy practices are governed by their own Privacy Policy.

Cookies and tracking

We may use cookies or similar technologies to remember your session, maintain security, and analyze usage. You can manage cookies through your browser settings.

Data sharing

We may share information with:

Service providers that help us operate the platform (hosting, analytics, email, etc.).
Paddle, for payment processing.
Authorities, when required by law or to protect our legal rights.

We do not share your customers’ feedback data with other clients.

Security

We use reasonable technical and organizational measures, including encryption in transit and at rest, access controls, and least-privilege practices for our team. No system is completely secure, but we work to protect your information.

Your rights

You may contact us to:

Access your personal data,
Correct inaccurate information,
Request deletion of your account.

Children

The Service is intended for use by businesses and adults. We do not knowingly collect data from children under 18.

Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be announced via the website or by email.

Contact

If you have questions about this Policy, contact: support@reviewresq.com