Privacy Policy

1. Introduction

This Privacy Policy explains how we collect, use, and protect your personal information when you use our review generation service ("Service"). We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Information You Provide

When you use our Service, we collect:

• Optional name: If you choose to include your name in your review
• Review preferences: Your answers to our questions (experience rating, highlights, etc.)
• Extra comments: Any additional text you choose to provide
• Language preference: Your selected language for the interface

2.2 Automatically Collected Information

We automatically collect limited technical information:

• Anonymized IP address: We hash your IP address for security and spam prevention. The original IP is never stored.
• Session information: A temporary session ID to manage your interaction with the service
• Timestamps: When you generated and copied your review
• Browser information (hashed): Basic user agent data, stored in hashed form

3. How We Use Your Information

We use the collected information to:

• Generate personalized review text based on your preferences
• Provide analytics to business owners (number of reviews, general trends)
• Prevent spam and abuse through rate limiting
• Improve our service quality and user experience
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent: By using our service, you consent to the processing described in this policy
• Legitimate interests: Fraud prevention, service improvement, and security
• Legal compliance: When required by law

5. Data Sharing

We do NOT sell or rent your personal information. Your data is only shared with:

• The business you're reviewing: They can see the review you generated and basic statistics (but not your IP address or identifiable information unless you included it in your review)
• Google: When you choose to post your review to Google (we only redirect you; we don't send data to Google directly)

6. Data Retention

We retain your review data for 365 days (or as configured by the business owner) for analytics purposes. After this period, reviews are automatically deleted unless required for legal compliance.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right to access: Request a copy of your personal data
• Right to rectification: Correct inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restriction: Limit how we use your data
• Right to object: Object to certain processing activities
• Right to data portability: Receive your data in a machine-readable format

To exercise these rights, please contact us using the information below.

8. Data Security

We implement industry-standard security measures:

• Encryption in transit (HTTPS/TLS)
• IP address anonymization (hashing)
• Secure password hashing (Argon2ID)
• CSRF protection
• Rate limiting and spam prevention
• Regular security audits

9. Cookies and Tracking

We use essential cookies only for:

• Session management (to remember your form data while you use the service)
• CSRF protection (security)

We do NOT use tracking cookies, advertising cookies, or third-party analytics (like Google Analytics). Our cookies are strictly necessary for the service to function.

10. Third-Party Services

The only third-party service involved is Google Reviews when you choose to post your review. We simply redirect you to Google's review form. Please refer to Google's Privacy Policy for how they handle your data.

11. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. International Data Transfers

Your data is stored on servers located in the European Union. If you access our Service from outside the EU, your data may be transferred to the EU, which provides adequate data protection under GDPR.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact:

Email: privacy@yourreviews.com
Address: [Your Business Address]

15. Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer:

Email: dpo@yourreviews.com

16. Supervisory Authority

If you believe we have not handled your data properly, you have the right to lodge a complaint with your national data protection authority. For EU residents, you can find your authority at: https://edpb.europa.eu/about-edpb/board/members_en

---

← Back to Review Form