This Privacy Policy explains how ReviewNudge ("we", "us") collects, uses, and shares information when you use our website and email service (the "Service").
Information we collect
- Account information: your email address, name, and authentication credentials when you sign up.
- Business information: business name, Google review URL, reply-to email, mailing address, and other information you enter during onboarding.
- Customer data (you provide this): when you add customers to your account, you provide their name, email, optional phone number, and consent status. We store this so you can send emails and track clicks — we never use your customers' data for our own marketing.
- Email and click activity: whether an email was delivered, when a tracking link was clicked, and the IP address / user agent of the click (used to filter out automated bot clicks).
- Diagnostic data: server logs, error reports, and usage telemetry that helps us debug issues.
How we use information
- To provide the Service — authenticate you, send emails you request, track clicks.
- To process payments via our billing provider (Polar).
- To send you service-related notices (e.g. billing failures, quota warnings).
- To detect abuse and keep the Service secure.
We do not sell your data or your customers' data. We do not use your customers' email addresses to send marketing of our own.
Subprocessors and service providers
We use the following third-party providers to deliver the Service:
- Supabase — database and authentication.
- Resend — transactional email delivery.
- Polar — billing, payments, and subscription management.
- Vercel — hosting and serverless infrastructure.
When emails are sent through Resend, your customer's email address and the message content are transmitted to Resend for delivery subject to their privacy policy.
Data retention
- Account and business data is retained as long as your account is active.
- Customer records and review request history are retained while your account is active; you can delete individual customers or your whole account at any time.
- Diagnostic/server logs are retained for up to 30 days for debugging.
Your rights
Depending on your jurisdiction you may have rights to access, correct, export, or delete personal data we hold about you. Because customer records belong to you (the ReviewNudge account holder), your customers' data-rights requests should be directed to you in the first instance; we will support you in fulfilling them as required by law.
To request deletion of your account or your data, email privacy@reviewnudge.app.
Cookies
We use a small number of cookies required to keep you logged in and to protect against cross-site request forgery. We do not use third-party advertising or analytics cookies.
Changes
We may update this policy occasionally. Material changes will be announced by email or an in-app notice.
Contact
Privacy questions? Email privacy@reviewnudge.app.