ReviewAI
COMPLIANCE VERIFICATION DOCUMENT

Privacy Policy

Last Updated: July 27, 2026 • Version 1.2
At ReviewAI, we are committed to the highest standards of data protection, user privacy, and operational transparency. This Privacy Policy outlines exactly how our platform collects, processes, encrypts, and retains data when you authenticate using Google Sign-In and link your storefront profiles via the official Google Business Profile APIs.

Google Limited Use Compliance Notice

ReviewAI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Zero Data Monetization Guarantee

We strictly do not sell, rent, lease, or trade your Google User Data or business transaction records to any third-party advertising tracking networks or external data brokers.

1. Information We Collect via Google APIs

When you grant ReviewAI permission to connect to your corporate profile footprint, our systems request access to specific data points authorized under the official API parameters:

  • Account Profiles: Merchant account names, public addresses, localized region codes, and geographic location IDs.
  • Inbound Payloads: Public star ratings, reviewer avatars, and consumer comment text blocks left on your listings.
  • Identity Vectors: Your authenticated email address and profile name to construct your user tenant profile context.

2. How We Use and Process Your Data

ReviewAI processes data derived from Google services strictly to deliver reputation automation features inside your tenant workspace: to dynamically populate your command center review streams, supply text parameters to language models to generate draft copy, and safely sync approved responses directly back onto maps listings.

3. Token Encryption and Retention Policies

Security is a core requirement of our infrastructure. Google OAuth 2.0 access and refresh tokens are protected with multi-layered defense frameworks:

  • Tokens are encrypted at rest using AES-256 GCM algorithmic parameters before writing to isolated database vaults.
  • We retain data strings only for the active lifecycle duration of your platform subscription tier.
  • You can completely purge your tokens and data streams at any moment by disconnecting your location or revoking app access from your official Google Account permissions hub.

4. Data Deletion and Portability Rights

In complete alignment with international data regulations, you retain total ownership over your profile footprint. You have the right to request a full CSV export of your review logs or issue a formal erasure command. Upon account cancellation, all saved tokens and generation logs are hard-deleted from our physical servers within 48 hours.

5. Contact and Compliance Officer Info

If you have any questions regarding data encryption protocols, privacy parameters, or Google API limited use policies, please reach out directly to our dedicated security response team at: compliance@reviewai.com.