LEGAL

Privacy Policy

This policy explains how ReviewFlow (the "ReviewFlow service") handles information when you use it to request and track customer reviews.

1. Information collected

Account information: your email address and password (stored securely as a hash by the authentication provider), or basic profile details from Google if you choose "Continue with Google".
Business information: your business name, optional logo, review destination links (for example Google or Trustpilot review pages), and message templates.
Customer information you enter: names, email addresses, phone numbers, notes, and purchase details you add manually or import by CSV.
Review request data: the requests you create, their status, follow-up dates, and internal notes.
Billing information: if you upgrade to Pro, payments are processed by Stripe. ReviewFlow stores your plan, subscription status, and Stripe customer and subscription identifiers. Full card numbers are never received or stored.

2. How information is used

To provide the service: storing your customers, preparing personalised review request messages, and tracking their status.
To manage your plan, free trial, usage limits, and subscription.
To send account emails such as email verification and password reset.
To keep the service secure and respond to support requests.

ReviewFlow does not send messages to your customers on your behalf. Review requests are delivered by you, by copying the message or opening it in your own email app. Your data and your customers' data are never sold, and are never used for advertising.

3. Your role for customer data

For the customer information you enter, you are responsible for having a lawful basis to collect it and contact those customers. The ReviewFlow service processes it only to provide ReviewFlow to you.

4. Third-party services

Lovable Cloud — hosting, database, and authentication.
Stripe — payment processing and subscription management (Stripe Privacy Policy).
Google — optional sign-in with your Google account, and web fonts loaded from Google Fonts.

5. Cookies and local storage

Your browser's local storage is used to keep you signed in. No advertising or third-party tracking cookies are used. Stripe may set its own cookies on its checkout and billing pages.

6. Data security

Data is transmitted over encrypted connections. Each account's records are protected by access rules so that only you can read or change your own customers, requests, templates, and destinations.

7. Retention and deletion

Data is kept while your account is active. You can delete your account at any time from Settings; this permanently removes your account, business details, customers, review requests, templates, and destinations. Billing records may be retained by Stripe as required by law.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or object to its processing. You can edit or delete most data directly in the app, or contact support at marketing.digitalinsider@gmail.com.

9. Changes

This policy may be updated. For significant changes, you'll be told about them in the app or by email.

10. Contact

Questions about this policy? Email marketing.digitalinsider@gmail.com. See also Contact & Support.