Privacy Policy

1. Information We Collect

ReviewGrowth.ai collects information that you provide directly, including your name, email address, company name, and payment information when you register for an account. When your customers submit testimonials, we collect the content they provide (text, video, audio), along with their name, email, and optional photo.

For Shopify merchants, we also collect your shop domain, shop name, and email through the Shopify OAuth process. We store a Shopify access token to inject and manage script tags on your storefront.

Google Business Profile Data: When you connect your Google account to ReviewGrowth.ai, we collect and store the following data from Google APIs:

• Your Google Business Profile account and location information (business name, location ID, account ID)
• Customer reviews and star ratings from your Google Business Profile listings
• Existing review replies associated with your business profile
• Your Google account email address for identification purposes
• OAuth tokens (access token and refresh token) to maintain your authorized connection

We only access the minimum data necessary to provide our review management and AI reply generation services. We do not access any other Google account data beyond what is listed above.

2. How We Use Your Information

We use collected information to provide, maintain, and improve our services, process transactions, send service-related communications, and provide customer support. Testimonial content is displayed on your website only after you approve it.

Google Data Usage: Data obtained from Google APIs is used exclusively to:

• Display your Google Business Profile reviews within the ReviewGrowth.ai dashboard
• Generate AI-assisted reply suggestions for your customer reviews
• Post review replies to Google on your behalf (only when you explicitly approve them)
• Sync review data so you can manage all your reviews in one place

We do not sell, rent, or share your Google user data with any third parties. Google data is never used for advertising, market research, or any purpose other than providing the core ReviewGrowth.ai service to you.

3. Data Storage and Security

We use Supabase (hosted on AWS) for data storage with row-level security policies. All data is encrypted in transit (TLS 1.3) and at rest. Shopify access tokens are stored securely and are revoked upon app uninstallation.

Google Data Storage: Google OAuth tokens and review data are stored in our secure Supabase database with the same encryption and row-level security protections applied to all user data. Google OAuth tokens are encrypted and are only accessible by your account. Review data synced from Google is stored alongside your other testimonial data and is protected by the same access controls.

4. Data Retention

We retain your account data for as long as your account is active. Testimonial data is retained until you delete it or close your account. Upon Shopify app uninstallation, we revoke access tokens immediately and delete shop-specific data within 48 hours of receiving the shop/redact webhook.

Google Data Retention: Google Business Profile review data is retained in your account for as long as your Google account remains connected. When you disconnect your Google account or delete your ReviewGrowth.ai account, we delete all associated Google data, including OAuth tokens, synced reviews, and review replies, within 30 days. OAuth tokens are revoked immediately upon disconnection.

5. GDPR Compliance

We comply with the General Data Protection Regulation (GDPR). You have the right to access, correct, or delete your personal data. Customers whose data we process on your behalf can request data export or deletion. We process mandatory GDPR webhooks from Shopify including customer data requests, customer redaction, and shop redaction.

To exercise your data rights, contact us at support@reviewgrowth.ai.

6. Revoking Access and Deleting Your Data

You can revoke ReviewGrowth.ai's access to your Google account at any time through either of the following methods:

• From ReviewGrowth.ai: Navigate to Settings in your dashboard and click "Disconnect Google Account." This will immediately revoke our access tokens and begin the data deletion process.
• From Google: Visit your Google Account Permissions page, find ReviewGrowth.ai in the list of connected apps, and remove access. We will detect the revoked access on the next sync attempt and delete your Google data within 30 days.

To request complete deletion of all your data (including account information, testimonials, reviews, and Google data), email us at support@reviewgrowth.ai. We will process your request and confirm deletion within 30 days.

7. Google API Services User Data Policy

ReviewGrowth.ai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In compliance with Google's Limited Use requirements, ReviewGrowth.ai:

• Only uses Google data to provide and improve the user-facing features that are prominent in our application's user interface
• Does not transfer Google user data to third parties unless necessary to provide or improve user-facing features, with user consent, for security purposes, or to comply with applicable laws
• Does not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising
• Does not allow humans to read Google user data unless we have your affirmative consent for specific messages, it is necessary for security purposes, it is necessary to comply with applicable law, or the data is aggregated and anonymized and used for internal operations

8. Third-Party Services

We use the following third-party services to operate ReviewGrowth.ai:

• Stripe — Payment processing
• Supabase (AWS) — Data storage and authentication
• Resend — Transactional email delivery
• Vercel — Application hosting
• OpenAI — AI-powered review reply generation (review text is sent to OpenAI's API to generate reply suggestions; no personally identifiable information is included)
• Google APIs — Google Business Profile review management (My Business Account Management API, My Business Business Information API, My Business API)

Each provider maintains their own privacy policies and security standards. We do not share your data with any other third parties beyond those listed above.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of ReviewGrowth.ai after any changes constitutes your acceptance of the updated policy.

11. Contact

For privacy inquiries, data deletion requests, or questions about how we handle your Google data:

support@reviewgrowth.ai