Legal
Last updated: [date]
Draft notice: this page is a structural starting point and has not been reviewed by a solicitor. Do not publish without proper UK GDPR legal review.
What this policy covers
This policy explains what information ReviewFlow ("we", "us") collects when you use our Google review reply service, how we use it, and what rights you have over it.
Information we access
Your Google Business Profile data — reviews (text, star ratings, reviewer names as shown publicly on Google), and basic business/location information, via manager-level access you grant us. We do not access or store your Google account password.
Business configuration you provide directly — brand voice preferences, reply signature, contact details, and similar settings.
Contact information — name, email, and business details you provide when booking a demo or signing up.
What we don't access
We do not request or need access to your Google account password, payment details stored in your Google account, or any Google services beyond your Business Profile's review management functions.
How we use this information
To monitor your Google Business Profile for new reviews; to generate draft replies using AI, based on your review content and brand voice settings; to post approved replies back to your profile; to generate your monthly performance report; and to provide customer support.
Third-party processing
Review text and your configured brand voice guidance are sent to Anthropic (our AI provider) solely to generate draft replies. We do not sell, rent, or share your data with third parties for their own marketing purposes.
Data retention
We retain review data and reply history for as long as your account is active, plus a defined period after cancellation. You can request deletion of your data at any time by contacting us.
Your rights (UK GDPR)
You have the right to access, correct, or request deletion of your personal data, and to object to or restrict certain processing. You also have the right to complain to the UK Information Commissioner's Office (ICO).
Data security
[State your actual security practices here.]
Changes to this policy
We'll notify active clients of material changes to this policy by email.
Contact
Questions about this policy: [email protected]