Privacy Policy

Last Updated: April 3, 2024

ReviewLead ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

Business Account Information

When you create a ReviewLead account, we collect:

• Business name
• Email address
• Phone number
• Password (encrypted)
• Google Review URL (optional)

Customer Feedback Information

When end customers provide feedback through your ReviewLead QR code, we collect:

• Rating (1-5 stars)
• Name (optional)
• Phone number (optional)
• Email address (optional)
• Feedback text (for ratings of 3 stars or below)
• Timestamp

Automatically Collected Information

• IP address
• Browser type
• Device information
• Usage data

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our service
• Process customer reviews and feedback
• Send email notifications about new reviews
• Improve our service and user experience
• Respond to customer support requests
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA) or UK, our legal basis for processing your personal data is:

• Consent: You have given clear consent for us to process your personal data
• Contract: Processing is necessary to fulfill our service agreement with you
• Legitimate Interest: Processing is in our legitimate interest (e.g., fraud prevention)
• Legal Obligation: Processing is necessary to comply with the law

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in these circumstances:

• With your consent: When you explicitly authorize us to share
• Service providers: Third parties who help us operate our service (Firebase/Google Cloud)
• Legal requirements: When required by law, court order, or government request
• Business transfers: In connection with a merger, sale, or acquisition

5. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

• Business account data: Until you delete your account
• Customer feedback data: Until you delete it or request deletion
• Anonymous analytics: Up to 26 months

6. Your Rights

All Users

• Access your personal data
• Update or correct your data
• Delete your account and data
• Export your data
• Opt-out of marketing emails

GDPR Rights (EU/UK Users)

• Right to be forgotten (data deletion)
• Right to data portability
• Right to restrict processing
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

CCPA Rights (California Users)

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access personal information
• Right to equal service and price

7. Data Security

We implement appropriate security measures to protect your data:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest (Firebase/Google Cloud)
• Password hashing
• Regular security updates
• Access controls and authentication

8. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication (keeping you logged in)
• Analytics (Google Analytics)
• Preferences (saving your settings)

You can control cookies through your browser settings.

9. International Data Transfers

Your data may be transferred to and stored on servers outside your country. We use Google Cloud/Firebase, which complies with:

• EU-US Data Privacy Framework
• Standard Contractual Clauses (SCCs)
• Appropriate safeguards for international transfers

10. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for material changes)

12. Contact Us

13. State-Specific Rights

California Residents (CCPA/CPRA)

To exercise your CCPA rights, email sreeskvk@gmail.com with "California Privacy Request" in the subject line.

Canadian Residents (PIPEDA)

You may file a complaint with the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

EU/UK Residents (GDPR)

You have the right to lodge a complaint with your local Data Protection Authority.

---

← Back to Home | Terms of Service