Privacy Policy
Updated 27 October 2026 · Contact reviewbuddy.in
Information we process
We process account details, business and location information, campaign activity, customer-submitted feedback, AI drafts, approved review text, usage records, payment references, security logs, and support communications.
How information is used
Information is used to provide the service, secure accounts, generate customer-requested writing assistance, enforce plan limits, process subscriptions, improve reliability, and meet legal obligations.
Service providers
Hosting, payment, email, analytics, and AI providers process only the information required to perform their services. Review text submitted for AI assistance is sent to the configured AI provider.
Customer photos and enquiries
Optional feedback photos are private to the customer session and workspace owner. Supported images are checked and re-encoded; they are not posted to Google automatically. Contact form details and messages are stored for administrator handling. Do not submit passwords, API keys or sensitive information.
Google and email connections
When authorised, a Google connection processes the permitted business location, review, reply and visibility information needed for enabled features. SMTP settings are stored encrypted for configured email delivery. Owners control approvals and optional reply policies. These features depend on service setup and authorisation.
Cookies and regional pricing
Session cookies support sign-in, security, the customer journey. Regional pricing uses the visitor’s IP address with a local country dataset; the lookup does not send the IP to a geolocation API. Country estimates can be inaccurate; prices are selected automatically. Public pages may load Google Fonts and feature or landing pages may load the QR rendering library from a third-party CDN; those services receive normal request data such as IP addresses.
Optional website analytics
If enabled, Google Analytics measures public website page visits and demo, pricing and trial-signup button clicks after you allow analytics. You can decline or change your choice using Analytics preferences in the website footer. Our integration excludes account, payment, admin and real customer review screens and removes URL query strings and fragments from page information. Advertising personalisation is disabled.
AI backup processing
When the optional Groq backup is enabled, review text and relevant context may be sent to Groq after Gemini capacity or temporary service failure. We redact email addresses and common phone-number patterns from review text before sending it to either provider. Do not enter sensitive information. Provider processing and retention follow the applicable provider terms.
Google account and Business Profile data
If you choose Google sign-in, we use your Google account identifier, verified email and name to create or access your ReviewBuddy account. Connecting Business Profiles is a separate choice. We use the locations you can manage to help you select and confirm your business. Access tokens are encrypted on the server. Unconfirmed connection data expires after 30 minutes and is removed by the scheduled worker; confirmed access remains until disconnected. Disconnect from Connections to revoke Business Profile access, or remove ReviewBuddy access in your Google Account. Contact support to remove your Google sign-in association or request account deletion. We do not sell Google user data or use it for advertising or AI model training. Google API data is used and transferred in accordance with the Google API Services User Data Policy, including its Limited Use requirements.
Retention and rights
Contact us to request access, correction, export or deletion of information associated with your account or enquiry. We may need to verify authority before providing records or making changes. Retention depends on the service purpose and applicable payment, fraud-prevention, tax and legal obligations; backups may follow a separate retention cycle.
Security
We use encrypted transport, password hashing, access controls, signed payment webhooks, audit logs, rate limits, and backups. No internet service can guarantee absolute security.
Questions or requests
Use the contact page for account, billing or data enquiries. Provide the information needed to identify your request and avoid sending secrets or sensitive customer details.