1. Introduction
ReviewMaster Pro ("we," "our," or "us") operates the review response service at reviewmaster.built-simple.ai. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.
By using ReviewMaster Pro, you agree to the collection and use of information in accordance with this policy.
2. Information We Access and Collect
When you use ReviewMaster Pro, we collect and access the following information:
2.1 Account Information You Provide
- Email address and password when you create an account
- Business profile information (name, industry, location, brand voice preferences)
- Custom prompt configurations you create
2.2 Review Content You Submit
- Customer reviews you paste or import for response generation
- Reviewer names and ratings
- Platform source (Google, Yelp, etc.)
2.3 Google Business Profile Data (When Connected)
When you authorize ReviewMaster Pro via Google OAuth, we access:
- Account information: Your Google email address and profile name
- Business profile: Your Google Business Profile name and location ID
- Reviews: Customer reviews including reviewer names, ratings, review text, and dates
- Review responses: Ability to post responses to reviews on your behalf
2.4 What We Do NOT Access from Google
- Your Gmail or email content
- Your contacts or address book
- Your calendar or other Google services
- Your Google account password
2.5 Payment Information
- Payment processing is handled securely by Stripe
- We do not store credit card numbers on our servers
- We receive confirmation of payment status from Stripe
2.6 Automatically Collected Information
- IP address (for rate limiting and security)
- Browser type and version
- Usage data (features used, response generation count)
3. How We Use Your Information
We use your information solely to provide the ReviewMaster Pro service:
- Authentication: To verify your identity and maintain your session
- Response Generation: To generate AI-powered review responses customized to your business profile
- Review Management: To display and organize reviews from connected platforms
- Response Posting: To post responses to Google Business Profile on your behalf (when you authorize this action)
- Payment Processing: To manage subscriptions and billing through Stripe
- Service Communications: To send important service-related notifications
- Service Improvement: To understand usage patterns and improve the service
4. Google API Services User Data Policy Compliance
ReviewMaster Pro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4.1 Limited Use Disclosure
Specifically, ReviewMaster Pro:
- Only uses Google Business Profile data to provide the review management and response features visible in our application
- Does not transfer Google data to third parties except as necessary to provide the service (OpenAI for response generation), comply with laws, or with your explicit consent
- Does not use Google data for advertising, marketing, or to build user profiles for advertising purposes
- Does not sell, rent, or lease your Google data to any third party
- Does not use Google data for AI/ML model training beyond providing direct service features to you
- Human access to your Google data is limited to: investigating security issues, complying with applicable law, or with your explicit consent
4.2 Data We Store from Google
- Your Google account email and name (for account identification)
- OAuth access and refresh tokens (stored encrypted)
- Google Business Profile location ID and name
- Cached reviews for display in our interface
4.3 Revoking Google Access
You can disconnect your Google Business Profile at any time:
When you disconnect, we immediately delete your Google OAuth tokens and cached Google data.
5. Data Sharing and Disclosure
We do NOT sell, trade, rent, or share your personal information with third parties, except in the following limited circumstances:
5.1 Service Providers
We share data with service providers necessary to operate ReviewMaster Pro:
- OpenAI: Review text and business profile information is sent to OpenAI to generate responses. OpenAI does not retain this data for training purposes under our API agreement.
- Stripe: Payment information is processed by Stripe. We do not store credit card details.
- Infrastructure providers: Our servers are hosted on secure infrastructure with appropriate data protection agreements.
5.2 Connected Platforms
When you authorize posting responses:
- Google: AI-generated responses are posted to your Google Business Profile when you click "Post" or enable Autopilot
5.3 Legal Requirements
We may disclose information when required by law, legal process, or government request, or to protect our rights, privacy, safety, or property.
6. Data Storage and Security
We implement appropriate security measures to protect your data:
- All data transmission uses HTTPS/TLS encryption
- Passwords are hashed using bcrypt with appropriate cost factors
- OAuth tokens are stored encrypted
- Database access is restricted and monitored
- Regular security assessments are performed
- We never see or store your Google password
7. Data Retention
- Account data: Retained while your account is active
- Generated responses: May be retained in anonymized form for service improvement
- Google data: Deleted immediately upon disconnection or account deletion
- Payment records: Retained as required by law and Stripe's policies
Upon account deletion, we delete your personal data within 30 days, except where retention is required by law.
8. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate information
- Deletion: Request deletion of your account and associated data
- Export: Export your data in a portable format
- Disconnect: Revoke access to your Google connection at any time
- Withdraw consent: Opt out of non-essential data processing
To exercise these rights, contact us at [email protected]
9. Children's Privacy
ReviewMaster Pro is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.
10. International Data Transfers
Your data may be processed in the United States where our servers are located. By using ReviewMaster Pro, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes by:
- Posting a notice on our website
- Sending an email to registered users
- Updating the "Last updated" date at the top of this policy
Continued use of the service after changes constitutes acceptance of the updated policy.
12. Contact Us
For privacy-related questions, concerns, or to exercise your rights: