Privacy & Data Protection

Privacy Policy

Last updated: September 25, 2026

1. Information We Collect

GetReview operates as a customer review routing and satisfaction management platform. When you interact with our service, we collect:

  • Customer Feedback: Star ratings, comments, and sentiment choices submitted on business review pages.
  • Optional Contact Information: Name, email, or phone number if you voluntarily request a callback or resolution from business management.
  • Business Account Data: Name, business email, slug, logo, and review platform URLs provided during account registration.
  • Technical Data: Anonymized traffic source (QR Code scan, NFC tap, or Direct link), device type, and timestamp for analytics.

2. How We Protect & Use Your Data

We process data solely to deliver, enhance, and secure our review routing service:

Private Management Routing

Critical complaints (1–3★) are routed directly to business management for immediate internal resolution and are never sold or published.

Encryption in Transit & At Rest

All communications and stored credentials are encrypted in transit (TLS 1.3) and at rest using modern AES-256 cryptographic standards.

3. Third-Party Service Providers

We rely on a small set of trusted third-party providers to operate the service. We share only the minimum data each provider needs to perform its function, and none of them are permitted to use your data for their own purposes:

  • Reoon — verifies that an email address is real and deliverable when you sign up for a business account, before your account is created.
  • Resend — delivers the email verification code you receive during signup.
  • Telegram — delivers real-time review alerts to a business owner's connected Telegram account, if they choose to enable it.
  • AI Providers (OpenAI, Google Gemini, Anthropic, Groq, xAI, or OpenRouter) — if a business owner enables the AI Assistant and connects their own API key, the customer's name and negative feedback text for the specific review being responded to are sent to that owner's chosen AI provider to draft a suggested apology/outreach message. This only happens for reviews an owner actively chooses to act on, using a key the owner supplies and controls.
  • Creem — our payment processor and merchant of record. When you subscribe, Creem collects and processes your name, email address, billing country and payment card details, and handles taxes, receipts and refunds. GetReview never sees or stores your full card number. See Creem's privacy policy on creem.io.
  • Supabase — hosts our database, including account details and customer feedback records.
  • Vercel — hosts and serves the GetReview website and application.
  • Upstash — provides short-lived storage used for rate limiting and one-time verification codes.
  • YouTube (Google) — the dashboard tour embeds a YouTube video using YouTube's privacy-enhanced mode. Playing it loads content from YouTube.
  • Sentry — captures technical error reports to help us detect and fix bugs; it does not receive customer feedback content.

4. Cookies, Analytics & Advertising Trackers

Unlike the operational processors above, GetReview lets a platform administrator optionally activate site-wide analytics and advertising scripts that set cookies and other browser identifiers in every visitor's browser — including on this marketing site and, where enabled, the business dashboard. These are separate, optional integrations and are not required for the core review-routing service to function:

  • Google Tag Manager & Google Analytics (GA4) — when enabled, Google sets cookies to measure site traffic and usage patterns. See Google's Privacy Policy and how Google uses cookies in advertising.
  • Meta Pixel — when enabled, Meta sets cookies and receives browsing signals used for advertising measurement and retargeting. See Meta's Privacy Policy.
  • Charla — when the support live-chat widget is enabled, Charla sets cookies to maintain your chat session and processes the messages you send through the widget. See Charla's privacy policy on charla.com.

These trackers are distinct from the essential session cookies GetReview itself uses to keep you signed in. By default, GetReview deployments do not embed advertising cookies or tracking scripts. Where non-essential trackers are enabled by an administrator, appropriate consent is facilitated where required by law (for example, under EU/UK GDPR and ePrivacy rules). If you have questions or believe a tracker is active on a page where consent should have been requested first, contact us via the live chat widget on our website.

5. Data Retention & Your Rights

You maintain full ownership of your data. Business owners can delete individual or bulk customer feedback records at any time directly through the dashboard. To request a complete account deletion or an export of your stored business records, please contact our team via our website live chat widget.

Data stored in your browser. To keep the dashboard fast, GetReview stores a small amount of non-sensitive account information (such as your business name, plan and location list) in your browser's local storage. It does not store customer feedback or customer contact details there, and signing out clears it.

Payments & billing records. We keep records of your subscription (plan, status, billing dates and the identifiers needed to match payments to your account) for as long as your account exists and as long as the law requires us to keep financial records. Card details are handled entirely by Creem. If a paid plan lapses, we keep your account data for at least 90 days so you can renew and restore everything; after that it may be deleted.

For any privacy inquiries or GDPR/CCPA data access and deletion requests, email us at privacy@getreview.app or support@getreview.app, or reach out via our website live chat widget. All verified requests are completed within 30 days.