Privacy Policy

Reviewful ("Reviewful," "we," "us") is a private-beta tool that lets a business owner search for their Google Business Profile, select one of its existing 5-star Google reviews, and download a styled image of that review for sharing on social media. This policy explains what data Reviewful touches, why, and where it's stored.

This policy describes the product as it actually functions today. If Reviewful's features change, this policy will be updated to match.

There is no account, no login, and no password. The only personal information Reviewful stores about you is an email address you voluntarily submit to join the launch waitlist — and only if you choose to.

1. Information We Collect

a) Business and review data (via Google)

When you search for a business, Reviewful sends your search query to Google's Places API to populate suggestions, and — once you select a business — requests that business's name, overall rating, total number of ratings, and up to five of its public reviews, of which only the 5-star ones are shown to you (including reviewer names as displayed publicly by Google).

• This data is public information about the business, sourced from Google — it is not something you submit to us, and it is not personal data we collect about you.
• Your search keystrokes are sent to our server, which proxies them to Google; we do not log or store your search terms, and they are not placed in the page URL. Your browser never contacts Google directly and never handles a Google API key.
• Business and review data may be held briefly in server-side cache (on the order of hours to a few days) purely to improve performance and limit how often we call Google. This cache is not a database you or we can query, and it is not tied to any individual user or session.
• We never store review text or reviewer names in our database, at all. The only place review content comes to rest is that temporary server cache and the image file you download to your own device.

b) The generated image

The image is created on our server at the moment you press download, streamed straight back to your browser, and then discarded — we do not keep a copy of it afterwards, it is never written to storage, and no third party sits in the delivery path. Nothing about the image is recorded in our database.

The image contains the review text, the star rating, the business name, and the reviewer's name. You choose how the reviewer's name appears before you download — in full, as a first name with a last initial, fully masked, or replaced with a generic label. Your choice is applied to both the on-screen preview and the downloaded image, so what you see is what you get.

Downloading is free, unlimited, and requires no email address. Before downloading you must tick a box confirming you are the owner or an authorized marketing representative of the business. That confirmation is not stored in our database; the fact that a confirmation was ticked is recorded only as an anonymous analytics event (Section 1(e)).

c) Your email address (launch waitlist only)

After you download a graphic — or if you ask to see what's coming at launch — we offer you the chance to join our launch waitlist. This is optional and entirely separate from getting your graphic. If you submit the form, we store:

• The email address you enter
• The name of the business you were working on, where we know it
• The date and time you signed up

Your address is stored in full (not hashed) because contacting you is the point of the waitlist. We use it to tell you when Reviewful launches and to send occasional product updates. Submitting the form is your consent to that; we do not treat any other action in the product as marketing consent. Signing up twice does not create a second record.

Your browser also remembers locally that you signed up, so that we don't ask you again on a later visit (Section 1(d)).

Retention: we currently keep waitlist records indefinitely — there is no automatic deletion process. You can ask us to delete your address, or to stop sending you product updates, at any time by emailing ryan@reviewful.app, and we will do so.

This is the only personal information about you that Reviewful stores in its database.

d) Storage in your browser

Reviewful itself sets no cookies. It does store three small flags in your browser's local and session storage, none of which identifies you and none of which is ever transmitted anywhere:

• Whether you've joined the waitlist, so no part of the page asks you twice
• Whether you've already been shown the one-tap "why are you leaving?" question, so it appears only once
• Whether a purchase confirmation has already been counted, so a page refresh doesn't count it twice

Our analytics provider, PostHog, separately sets its own cookies — see Section 1(e) and Section 4.

e) Analytics and error tracking (PostHog)

We use PostHog, a product analytics service, to understand how Reviewful is used and to catch errors. This is a real third-party data flow, distinct from everything above, because PostHog receives data directly from your browser rather than only through our own server.

• Your IP address: PostHog receives and stores your raw IP address with every event, and uses it for coarse geolocation. It is not anonymized. Reviewful's own servers do not read, log, or store your IP address for any purpose.
• A persistent identifier: PostHog stores an identifier in your browser (via cookies and local storage) so that repeat visits can be recognized as the same browser. It carries no name, email, or profile information, and we do not use it for advertising or for tracking you across other websites.
• The page address you arrive on: captured with each page view. If you followed a link we sent that names a business in the web address, that business name is included. We never place an email address in a web address, precisely for this reason.
• Automatic interaction data ("autocapture"): page views and clicks on general navigation and interface elements, including the text on the element you clicked. The parts of the interface that display review text, reviewer names, business names, or your email address — the business search suggestions, the review picker, and the waitlist email field — are explicitly excluded from this in our code, so that content is not sent to PostHog through it.
• Specific product events: non-content records such as "a business was selected," "the confirmation box was ticked," "a graphic was downloaded" (including which style preset and reviewer-name option were used), "the waitlist offer was shown," "the waitlist was joined," and "the Early Adopter's Pass was purchased" (including the payment reference described in Section 1(f)). These events contain no review text, no reviewer name, no business name, and no email address.
• Exit feedback: if you appear to be leaving, we may show a one-tap question asking why. Your answer is one of a few fixed choices we wrote — there is no text box — and it is sent only to PostHog, alongside which step of the flow you were on. It is not stored in our database. The question is shown at most once per browser, and never after a successful download.
• Errors: when something goes wrong, the error message and technical details (stack trace) are sent to PostHog to help us fix bugs. This happens both automatically for unexpected errors and deliberately at specific points in our code.
• What we don't use: session recording and heatmaps are both switched off, in our code and in our PostHog configuration. PostHog does not record your screen or your mouse movement.
• Retention: PostHog retains this data for approximately 7 years.

f) Payment information (Stripe)

If you purchase an Early Adopter's Pass, checkout is handled entirely by Stripe on Stripe's own pages. The email address, card details, and billing information you enter there go to Stripe, not to us — Reviewful never receives or stores your payment details. After payment, Stripe returns you to our confirmation page with an opaque checkout reference, which we record as an analytics event (Section 1(e)) so we can count purchases. That reference is not linked to any address you may have entered elsewhere in the product, and the address you gave Stripe is never shown to us.

2. What We Don't Collect

• No account registration and no password
• No payment or card details (see Section 1(f))
• No stored copies of review text, reviewer names, or the images you generate
• No email address at all unless you choose to join the waitlist — the download itself asks for nothing
• No advertising trackers, and no analytics beyond what's described in Section 1(e) — we don't sell your data or use it for ad targeting
• No geolocation or precise location tracking beyond the coarse, IP-based geolocation our analytics provider performs (Section 1(e))
• No IP addresses or device identifiers collected by Reviewful itself. Earlier versions of this product set an rf_uid cookie and stored hashed IP addresses to enforce usage limits; that system has been removed entirely, and neither the cookie nor those records exist any more.

3. Third Parties (Subprocessors)

• Google (Places API): receives your search queries and selected place IDs so Reviewful can retrieve business and review data. Use of this data is also subject to Google's own terms and privacy practices. Reviewful is not affiliated with, endorsed by, or partnered with Google — the "via Google" attribution shown on exported images is a requirement of Google's Places API terms, not a claim of partnership.
• Supabase: hosts the database table holding the waitlist records described in Section 1(c). It receives no review content, reviewer names, or images. Access is restricted to our server-side credentials.
• PostHog: provides product analytics and error tracking, as described in Section 1(e). Unlike the others, PostHog receives data directly from your browser rather than only through our server.
• Stripe: handles Early Adopter's Pass checkout and holds the payment and contact details you enter there, under its own privacy policy (Section 1(f)).

Reviewful does not send email through any provider today. If we begin sending launch announcements to the waitlist, this policy will be updated to name that provider before the first message goes out.

We do not sell your information, and we do not share it with any party for advertising purposes.

4. Cookies

Reviewful itself sets no cookies. It does store three non-identifying flags in your browser's local and session storage, described in Section 1(d). Our analytics provider, PostHog, does set cookies — it stores a persistent identifier in your browser via cookies and local storage so that repeat visits can be recognized as the same browser (Section 1(e)). These are analytics cookies, not strictly necessary ones.

We do not currently present a cookie consent banner. You can block or clear these cookies through your browser settings at any time; the product will continue to work normally without them. Depending on where you're located, local law may give you additional rights over the data flows described in Section 1(e), notably PostHog receiving your raw IP address — we encourage you to review your rights under your local privacy law and to contact us with any request.

5. Your Choices

• Don't sign up: you can use the entire product — search, preview, and download as many graphics as you like — without giving us an email address at all.
• Deletion: email ryan@reviewful.app to have your waitlist record (Section 1(c)) deleted, or to receive a copy of what we hold about you. Because Reviewful has no accounts, this record is the entirety of it.
• Product updates: ask us at the same address to stop sending them, and we will.
• Analytics: clearing or blocking cookies in your browser, or using a tracker-blocking extension, prevents the persistent analytics identifier described in Section 1(e).
• Reviewer names: you can mask or replace the reviewer's name before the image is generated (Section 1(b)).

6. Children's Privacy

Reviewful is intended for use by business owners and their representatives and is not directed at children. We do not knowingly collect information from children.

7. Changes to This Policy

We may update this policy as Reviewful's features change. We'll update the effective date above when we do.

8. Contact

Questions about this policy: ryan@reviewful.app. See our Terms of Use for how the product may be used.