This Privacy Policy describes how ReviewBounce ("we", "us", or "our") collects, uses, stores, and protects information when you use our white-label reputation management platform, website, and related services (collectively, the "Service"). By using ReviewBounce, you agree to the practices described in this policy.
1. Information We Collect
1.1 Account Information
When you register as an agency on ReviewBounce, we collect your name, email address, agency name, and billing information. If you subscribe to a paid plan, payment processing is handled by our third-party payment provider — we do not store credit card numbers on our servers.
1.2 Client & Business Profile Data
As an agency using ReviewBounce, you connect Google Business Profiles (GBP) on behalf of your clients. Through authorized Google API access, we retrieve and process:
- Google Business Profile information (business name, address, category, photos, posts)
- Google Reviews (review content, reviewer display names, star ratings, review timestamps)
- GBP performance metrics (search impressions, views, direction requests, calls)
- Media assets uploaded by you for GBP posts and profile management
1.3 Review Funnel Data
When end customers interact with a ReviewBounce QR-based review funnel, we collect:
- Sentiment indicator selection (used for offering appropriate resolution paths)
- Optional feedback text (for concerns directed to the business owner)
- Browser and device metadata (for analytics and optimization)
We do not collect personal contact information from end customers through the review funnel unless explicitly configured by the agency.
1.4 AI Processing Data
Our AI engine processes review content to generate automated review responses and perform sentiment analysis. Review text is sent to AI service providers for processing. We do not use your review data to train third-party AI models.
1.5 Usage & Analytics Data
We automatically collect information about how you interact with the Service, including pages visited, features used, session duration, IP address, browser type, and operating system. This data helps us improve the platform.
2. How We Use Your Information
We use the information we collect to:
- Provide the Service — Sync Google Business Profiles, display reviews, generate AI responses, create reports, and manage your agency dashboard
- Enable White-Label Features — Apply your custom branding, domain, logo, and colors across client-facing interfaces
- Process Payments — Handle subscription billing and agency-to-client billing through integrated payment processors
- Generate Reports — Create downloadable performance reports including review analytics, sentiment trends, and GBP metrics for your clients
- Improve the Platform — Analyze usage patterns to improve features, fix bugs, and optimize performance
- Communicate with You — Send transactional emails (account confirmations, billing receipts) and occasional product updates
- Ensure Security — Detect and prevent fraud, abuse, and unauthorized access
3. Data Sharing & Third Parties
We share data only in the following circumstances:
- Google APIs — We access Google Business Profile data through authorized OAuth connections. Our use of Google API data complies with the Google API Services User Data Policy, including the Limited Use requirements.
- AI Service Providers — Review content is processed by AI providers (such as Google Gemini) to generate automated responses and sentiment analysis. No personal client data beyond review text is shared.
- Payment Processors — Billing data is shared with our payment processing partners to handle subscriptions and transactions securely.
- Cloud Infrastructure — Your data is stored on secure cloud servers (Supabase, Cloudflare). These providers act as data processors under our instruction.
- Legal Requirements — We may disclose information if required by law, legal process, or government request.
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
4. White-Label & Client Data
ReviewBounce is designed as a white-label platform. When agencies use our Service to manage their clients' reputations:
- The agency is the data controller for their client's business data
- ReviewBounce acts as a data processor on behalf of the agency
- End customers interacting with branded review funnels see the agency's branding — not ReviewBounce's
- Agencies are responsible for ensuring they have proper authorization from their clients to connect and manage their Google Business Profiles
5. Data Storage & Security
We implement industry-standard security measures to protect your data:
- All data is encrypted in transit using TLS/SSL
- Database access is restricted through strict access control policies ensuring complete data isolation between agencies
- OAuth tokens for Google API access are stored securely and can be revoked at any time
- Media files are stored on Cloudflare R2 with pre-signed URL access controls
- Regular security audits and vulnerability assessments
6. Data Retention
We retain your account data for as long as your account is active. If you cancel your subscription:
- Your account data is retained for 30 days to allow for reactivation
- After 30 days, account data is scheduled for permanent deletion
- Aggregated, anonymized analytics data may be retained indefinitely
- Billing records are retained as required by applicable tax and accounting laws
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access — Request a copy of the personal data we hold about you
- Rectification — Request correction of inaccurate data
- Deletion — Request deletion of your personal data
- Portability — Request your data in a structured, machine-readable format
- Objection — Object to certain types of data processing
- Restriction — Request that we limit how we process your data
To exercise any of these rights, contact us at support@reviewbounce.com. We will respond within 30 days.
8. Cookies
We use cookies and similar technologies to maintain your session, remember preferences, and analyze usage. For detailed information, please see our Cookie Policy.
9. Children's Privacy
ReviewBounce is a B2B platform designed for marketing agencies and businesses. Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children.
10. International Data Transfers
ReviewBounce operates from India. Your data may be processed in countries outside of your residence, including countries that may have different data protection laws. By using our Service, you consent to the transfer of your data to these jurisdictions. We ensure appropriate safeguards are in place for all international data transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
