Privacy Policy

Review+ is a review management platform that helps local businesses collect customer feedback and grow their online reputation. Our service is operated by the Review+ team and hosted on Google Cloud infrastructure via Firebase.

For questions about this policy, contact us at: privacy@review-plus.app

Merchant account data

When you sign up as a merchant, we collect the information you provide during onboarding:

• Your name, email address, and phone number
• Business name, address, type, and Google Place ID
• Social media profile URLs (website, Facebook, Instagram, TikTok)
• Google Business Profile data (review URL, rating, review count, logo)
• Profile photo from your Google account (if you sign in with Google)

Customer feedback data

When a customer uses your review link, we collect:

• Sentiment rating (positive, neutral, or negative)
• Free-text feedback describing their experience
• Name, email, and phone number onlyif your account has “Collect Customer Details” enabled and the customer chooses to provide them
• Timestamp of the submission

Automatically collected data

• Browser type, device type, and operating system
• IP address (used for country detection only; not stored)
• Pages visited and actions taken within the platform (via Firebase Analytics)

• To create and manage your merchant account
• To display your business profile and feedback dashboard
• To route customer feedback to you in real time
• To generate AI-assisted review copy for positive customer experiences (the AI processes the customer's free-text input; we do not store the AI prompt beyond the response)
• To send account-related notifications via email or WhatsApp (if configured)
• To detect your country and display localised pricing and content
• To improve the platform and fix bugs using aggregated, anonymised analytics

We do not sell your data to third parties, ever.

We use the following third-party services to operate Review+:

Merchant account data is retained for as long as your account is active. If you delete your account, we permanently delete all associated data within 30 days.

Customer feedback data is retained for up to 24 months to support analytics and reporting. You can request deletion of specific feedback records at any time by contacting us.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to or restrict how we process your data
• Data portability (receive your data in a machine-readable format)

To exercise any of these rights, email us at privacy@review-plus.app. We will respond within 30 days.

We use browser cookies and sessionStorage for the following purposes:

• Language preference — remembers the language you selected on the login page (stored as a cookie for 1 year)
• Country preference — remembers the country you selected via the landing page picker (sessionStorage, cleared when you close the browser)
• Onboarding draft — temporarily stores your onboarding data while you complete setup (sessionStorage, never sent to a server until you submit)
• Firebase Auth — Firebase stores authentication tokens in IndexedDB to keep you signed in

We do not use advertising cookies or third-party tracking cookies.

All data is transmitted over HTTPS. Data at rest is encrypted by Firebase/Google Cloud. Access to Firestore is protected by Firebase Security Rules, ensuring merchants can only access their own data.

See our Security page for more details.

Review+ is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

We may update this Privacy Policy from time to time. When we make significant changes, we will update the effective date at the top and, where appropriate, notify you by email. Your continued use of Review+ after changes take effect constitutes acceptance of the updated policy.