Privacy Policy

This explains what personal data Reviewee collects, why, and what control you have over it.

There are two kinds of people described here: customers, who sign up and use the dashboard, and reviewers, who are sent a review link by a customer. For customer accounts we are the data controller. For the client details and reviews a customer collects, the customer is the controller and we act as their processor.

What we collect

From customers: name, email address, a hashed password (we never store the password itself), organisation name, and — if you subscribe — billing details held by Stripe. We do not see or store your card number.

From reviewers: the name, email address and job title the customer entered when creating the review link, plus the rating and written feedback submitted.

Automatically: IP address and basic request data, used for rate limiting and abuse prevention; and aggregate usage analytics that do not identify individuals.

Why we use it

• To provide the Service — the core of our contract with you.
• To send transactional email: review requests, password resets, billing notices.
• To keep the Service secure and prevent abuse — a legitimate interest.
• To meet legal and accounting obligations.

We do not sell personal data, and we do not use it for advertising.

Published reviews

A review is only shown publicly once the customer approves it. When published through a widget or hosted page, the reviewer's name, job title, rating, comment and submission date may be displayed on the customer's website. Reviewers should be aware their feedback is intended for publication; customers are responsible for making that clear when requesting a review.

Who we share it with

We use a small number of processors, each only for its stated purpose:

• Vercel — hosting and content delivery.
• Our database host — storage of application data.
• Stripe — payment processing and subscription billing.
• Resend — transactional email delivery.
• Google (Gemini) — only when a reviewer chooses the optional “generate with AI” help while writing. The text sent is the context for that draft. This is opt-in per review.

Where data is held

Our providers may process data outside your country, including in the United States. Where required we rely on Standard Contractual Clauses or an equivalent transfer mechanism.

How long we keep it

• Account and review data: until you delete it or close your account.
• Rate limiting records: automatically deleted shortly after they expire.
• Billing records: retained as long as tax and accounting law requires.

Deleting your account permanently removes your organisation, clients, review links and reviews. It is not reversible and we cannot restore it.

Your rights

Depending on where you live you may have the right to access, correct, export, delete or restrict processing of your personal data, and to object to it. You can:

• Correct your account details in your settings.
• Delete everything from Settings → Delete account, which erases your data immediately.
• Contact us for access, export or any other request.

If you are a reviewer and want your review removed, contact the business that requested it — they control that content. If you cannot reach them, contact us and we will help.

You also have the right to complain to your local data protection authority.

Cookies

We use cookies that are necessary for the Service to work: keeping you signed in and protecting against cross-site request forgery. We do not use advertising or cross-site tracking cookies.

Security

Passwords are hashed with bcrypt. Traffic is encrypted in transit. Review links use unguessable tokens, access to organisation data is checked on every request, and public endpoints are rate limited. No system is perfectly secure, but we treat a breach affecting your data as something we would tell you about promptly.

Children

The Service is not directed at children and we do not knowingly collect their personal data.

Changes

We will update this page when our practices change, and will note the date at the top. Material changes will be notified by email.

Contact

For any privacy question or request: get in touch.