Privacy policy

Reviewman is a tool businesses use to answer their Google reviews. It reads the reviews left on a business's Google Business Profile, drafts replies using the conversations that business already had with the customer, and posts the reply once the business approves it.

This policy covers reviewman.app. Questions, or a request to delete something, go to privacy@reviewman.app.

Our customers are the businesses that sign up. We decide what we do with their account data, so for that data we are the controller.

Their customers are the people who leave reviews and send messages. We hold that data on the business's behalf and act on their instructions — we are a processor, the business is the controller. If you left a review for a business and want your data removed, ask them, or write to us and we will pass it on and act on it.

Account data, for the business that signs up:

• Email address, a bcrypt hash of the password (never the password), business name.
• Session records, so you stay signed in.
• An audit log of actions taken in the workspace.

Google Business Profile data, once a business connects Google:

• OAuth access and refresh tokens, encrypted at rest.
• The Google account and location identifiers, business names, addresses, place IDs and review links.
• Reviews: rating, text, timestamps, the reviewer's display name and profile photo URL as Google supplies them, and any reply already posted.
• Replies we draft, the replies you approve, and when they were posted.

Messaging data, only if a business connects WhatsApp, Instagram or Messenger:

• Customer name, phone number, email address and platform user IDs, where the platform provides them.
• Message text, timestamps, and photos or other media sent in the conversation.
• A short model-written summary of each customer, and model-written descriptions of photos, so a reply can use the context without re-reading the whole thread each time.

We request one Google permission: business.manage. We use it to list the Business Profile accounts and locations you manage, read the reviews on those locations, and post or delete replies to those reviews. Nothing else.

Reviewman's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Concretely: we do not sell Google user data, we do not use it for advertising, we do not use it to train generalised AI or machine-learning models, and no human at Reviewman reads it except where you have asked us to look at something, where it is needed to investigate a fault or abuse, or where the law requires it.

We do not sell data. It reaches these third parties, and no others:

• Our AI provider. To draft a reply we send the review text and the relevant part of that customer's conversation to a large language model through OpenRouter. This is the one place your data leaves our infrastructure in the ordinary course of the product working. We contract for the data not to be retained or used for training.
• Google. Replies you approve are posted back to your Business Profile, which is the point.
• Meta. Only if you connect WhatsApp, Instagram or Messenger, and only to read the conversations and send the review requests you ask us to send.
• Our hosting provider, which runs the servers and the database.

• OAuth tokens are encrypted with AES-256-GCM before they are written to the database.
• Passwords are hashed with bcrypt and are not recoverable, by us or anyone else.
• The site is served over HTTPS.
• Each workspace's data is scoped to that workspace; one business cannot read another's.

Disconnecting Google from Integrations tells Google to revoke our access and deletes our copy of your tokens immediately. Your locations, past reviews and review links stay, so reconnecting picks up where you left off.

Ask us to delete the workspace and everything goes — account, locations, reviews, drafts, conversations, media — within 30 days, save for anything we are required to keep for legal or accounting reasons. Write to privacy@reviewman.app.

Depending on where you live you may have the right to see the data we hold about you, correct it, export it, or object to how we use it. Ask, and we will do it.

If this policy changes in a way that affects what we do with your data, we will tell account holders by email before it takes effect. The date at the top always reflects the current version.