Privacy Policy

1. Who we are

ReviewShield ("we", "us") provides review response automation and dispute package generation for local businesses. This policy explains what data we collect, why, and how you can control it. Questions: privacy@getreviewshield.com.

2. Data we collect

• Account data: name, business name, email address, password hash or Google sign-in identifier, and support correspondence.
• Google Business Profile data: when you authorise the connection, we access your business locations, review content, reviewer display names and ratings, and replies you publish through us.
• Dispute content: incident timelines, evidence notes and generated appeal letters you create in the Dispute Engine.
• Payment data: plan, billing status, last four digits and card brand, and gateway transaction identifiers.
• Usage data: log events, device and browser information, IP address, and feature usage counters used for rate limits and analytics.

3. Google account data

We request the narrowest Google OAuth scopes needed to read reviews for the locations you connect and to publish replies you approve. Access and refresh tokens are stored encrypted at rest and are never shared with third parties or used for advertising. You can revoke access at any time from your Google Account permissions page or from ReviewShield Settings; revoking stops all future syncing immediately.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to train generalised AI or machine learning models.

4. Payment information

Card and bank details are collected and processed directly by our PCI-DSS compliant payment providers (Razorpay, PayPal and supported UPI providers) through hosted fields and redirects. Full card numbers, CVV codes and UPI credentials never reach ReviewShield servers. We store only the tokenised references and billing status needed to manage your subscription.

5. AI processing

Review text and dispute details you submit are sent to our AI provider to generate draft replies and appeal letters. Content is processed to fulfil your request only and is not used by us to train models. Do not paste sensitive personal, medical or financial details into AI inputs.

6. How we use data

• To provide, secure and support the service.
• To generate AI responses and dispute packages you request.
• To process subscriptions, invoices and refunds.
• To detect abuse, fraud and policy violations.
• To send service notices and, with consent, product updates.

7. Sharing

We share data only with processors who help us run the service: cloud hosting and database providers, our AI provider, payment gateways, email delivery and error monitoring. We do not sell personal data. We may disclose data where required by law or to protect our rights.

8. Retention

Account and business data is retained while your account is active and for up to 90 days after cancellation, after which it is deleted or anonymised. Billing records are retained for as long as tax and accounting law requires. You may request earlier deletion.

9. Your rights (GDPR / CCPA)

Depending on where you live, you may request access, correction, deletion, portability, or restriction of your personal data, object to certain processing, and opt out of the sale or sharing of personal information (we do not sell it). Contact privacy@getreviewshield.com and we will respond within 30 days. You also have the right to complain to your local data protection authority.

10. Security

Data is encrypted in transit with TLS and at rest. Access to production data is limited to authorised personnel, tenant data is isolated with row-level security, and we monitor for unauthorised access. No system is perfectly secure; report concerns to security@getreviewshield.com.

11. International transfers

Data may be processed in countries other than yours, including the United States and the European Union. Where required, transfers rely on Standard Contractual Clauses or an equivalent safeguard.

12. Children

ReviewShield is a business tool and is not directed to anyone under 16. We do not knowingly collect data from children.

13. Changes

We will post material changes on this page and update the date above. Continued use after changes take effect means you accept the revised policy.