Privacy Policy

Last updated: February 2026

ReviewCrest Inc. ("we", "us", "our"), based in Calgary, Alberta, Canada, is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use ReviewCrest ("the Service").

1. Information We Collect

Account information: Email address, password (hashed), and business details (business name, Google Place ID) you provide during registration and onboarding.

Review data: Reviews synced from Google via your Google Place ID, including reviewer names, ratings, review text, and dates. This data is publicly available on Google and is fetched on your behalf.

Usage data: Notification preferences, plan selection, and interaction with AI-generated content (responses you generate, edit, or approve).

Payment information: Billing is handled entirely by Stripe. We do not store credit card numbers or banking details. We store your Stripe customer ID and subscription status.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Sync and display your Google reviews
• Generate AI-powered review responses and weekly report highlights
• Send email notifications (new review alerts, weekly reports) based on your preferences
• Send review request emails to your customers on your behalf
• Process subscription payments
• Communicate service updates or policy changes

3. Third-Party Services

We share data with the following third-party services as necessary to operate the Service:

• Supabase — Database hosting and authentication. Your data is stored in Supabase-managed PostgreSQL databases with row-level security.
• Stripe — Payment processing. Stripe handles all payment data under their own privacy policy and PCI compliance.
• Google / SerpAPI — We fetch publicly available Google reviews using your Google Place ID via SerpAPI.
• Resend — Email delivery for notifications and review request emails. Recipient email addresses are shared with Resend for delivery purposes.
• AI providers (Google Gemini, OpenAI, or Anthropic) — Review text is sent to the configured AI provider to generate response suggestions and report highlights. No personally identifiable information beyond the review content is shared.
• Vercel — Application hosting and serverless function execution.

4. Data Retention

We retain your data for as long as your account is active. If you delete your account or request data deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

5. Data Security

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, row-level security policies in our database, and secure API key management. However, no method of transmission or storage is 100% secure.

6. Your Rights

Under Alberta's Personal Information Protection Act (PIPA) and applicable Canadian privacy law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Withdraw consent for data processing
• Opt out of marketing communications

To exercise these rights, contact us at support@reviewcrest.com.

7. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking or advertising cookies.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notice. Continued use of the Service after changes constitutes acceptance.

10. Contact

If you have questions about this Privacy Policy or our data practices, contact us at support@reviewcrest.com or write to us in Calgary, Alberta, Canada.