Last updated: February 2026
ReviewGrowth.ai collects information that you provide directly, including your name, email address, company name, and payment information when you register for an account. When your customers submit testimonials, we collect the content they provide (text, video, audio), along with their name, email, and optional photo.
For Shopify merchants, we also collect your shop domain, shop name, and email through the Shopify OAuth process. We store a Shopify access token to inject and manage script tags on your storefront.
Google Business Profile Data: When you connect your Google account to ReviewGrowth.ai, we collect and store the following data from Google APIs:
We only access the minimum data necessary to provide our review management and AI reply generation services. We do not access any other Google account data beyond what is listed above.
We use collected information to provide, maintain, and improve our services, process transactions, send service-related communications, and provide customer support. Testimonial content is displayed on your website only after you approve it.
Google Data Usage: Data obtained from Google APIs is used exclusively to:
We do not sell, rent, or share your Google user data with any third parties. Google data is never used for advertising, market research, or any purpose other than providing the core ReviewGrowth.ai service to you.
We use Supabase (hosted on AWS) for data storage with row-level security policies. All data is encrypted in transit (TLS 1.3) and at rest. Shopify access tokens are stored securely and are revoked upon app uninstallation.
Google Data Storage: Google OAuth tokens and review data are stored in our secure Supabase database with the same encryption and row-level security protections applied to all user data. Google OAuth tokens are encrypted and are only accessible by your account. Review data synced from Google is stored alongside your other testimonial data and is protected by the same access controls.
We retain your account data for as long as your account is active. Testimonial data is retained until you delete it or close your account. Upon Shopify app uninstallation, we revoke access tokens immediately and delete shop-specific data within 48 hours of receiving the shop/redact webhook.
Google Data Retention: Google Business Profile review data is retained in your account for as long as your Google account remains connected. When you disconnect your Google account or delete your ReviewGrowth.ai account, we delete all associated Google data, including OAuth tokens, synced reviews, and review replies, within 30 days. OAuth tokens are revoked immediately upon disconnection.
We comply with the General Data Protection Regulation (GDPR). You have the right to access, correct, or delete your personal data. Customers whose data we process on your behalf can request data export or deletion. We process mandatory GDPR webhooks from Shopify including customer data requests, customer redaction, and shop redaction.
To exercise your data rights, contact us at support@reviewgrowth.ai.
You can revoke ReviewGrowth.ai's access to your Google account at any time through either of the following methods:
To request complete deletion of all your data (including account information, testimonials, reviews, and Google data), email us at support@reviewgrowth.ai. We will process your request and confirm deletion within 30 days.
ReviewGrowth.ai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
In compliance with Google's Limited Use requirements, ReviewGrowth.ai:
We use the following third-party services to operate ReviewGrowth.ai:
Each provider maintains their own privacy policies and security standards. We do not share your data with any other third parties beyond those listed above.
We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.
ReviewGrowth.ai operates a review-request SMS program on behalf of its business customers. Phone numbers are provided to us by our business customers, who obtain them directly from their own customers (the SMS Recipients) at the point of sale or service, along with prior express written consent to receive SMS messages including post-purchase review requests.
No sharing with third parties. Mobile information, including phone numbers and SMS opt-in data, will not be shared with any third parties or affiliates for marketing or promotional purposes. Information sharing is limited to service providers necessary to deliver the SMS messages that Recipients have opted into receiving, such as Twilio (our SMS delivery provider). Twilio processes phone numbers solely for the purpose of delivering messages and maintaining opt-out records in accordance with its own privacy policy and the TCPA.
SMS data retention. Phone numbers and message history are retained for as long as the associated business customer's account remains active, or until a Recipient opts out. Opt-out records (phone numbers on our global suppression list) are retained indefinitely to ensure continued compliance with opt-out requests across the platform, as required by the TCPA.
Opt-out processing. Recipients may opt out at any time by replying STOP, CANCEL, UNSUBSCRIBE, END, or QUIT to any SMS message. Opt-outs are processed immediately and added to our global suppression list. Once a number is on the suppression list, no further messages will be sent from any ReviewGrowth.ai business customer to that number.
Recipient rights. If you are an SMS Recipient and wish to request deletion of your phone number from our platform, or have questions about how your information is used, contact us at support@reviewgrowth.ai. We will respond within 30 days.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of ReviewGrowth.ai after any changes constitutes your acceptance of the updated policy.
For privacy inquiries, data deletion requests, or questions about how we handle your Google data: