Privacy Policy

Last updated: 24 June 2025

1. Who we are

Reviewl (“we”, “our”, “us”) is a review automation platform that helps businesses collect genuine customer reviews on platforms such as Google and Trustpilot. We are based in the United Kingdom.

If you have any questions about this policy or how we handle your data, contact us at privacy@reviewl.co.uk.

2. What data we collect

2.1 Business account data

When you create a Reviewl account, we collect your name, email address, and business information (business name, website, review platform URLs). We use this to provide the service.

2.2 Customer data (your contacts)

You may upload customer names and email addresses so we can send review requests on your behalf. You are the data controller for this information. We act as a data processor — we only use it to send review request emails as instructed by you.

We do not sell, share, or use your customers’ data for any purpose other than sending the emails you request.

2.3 Email tracking data

Review request emails include an invisible tracking pixel and unique click links. These allow us to track whether an email was opened or whether a customer clicked a review link. We capture the event time and, for clicks, approximate location data from the IP address. This data is used solely to provide analytics within your dashboard.

2.4 Billing data

Payment processing is handled entirely by Stripe. We do not store your card details. We receive confirmation of subscription status from Stripe.

2.5 Usage and logs

We may collect basic usage data (page visits, feature usage) to improve the product. We do not use advertising tracking or share this with third-party advertisers.

3. How we use your data

  • To provide and operate the Reviewl platform
  • To send automated review request emails on your behalf
  • To provide analytics on your review campaigns
  • To process payments via Stripe
  • To send important service communications (e.g., billing notifications)
  • To improve the platform and fix issues

We will not send you marketing emails without your consent, and you can opt out at any time.

4. Legal basis for processing (UK/EU users)

Where applicable under UK GDPR or EU GDPR, we rely on the following legal bases:

  • Contractual necessity — to provide the service you signed up for
  • Legitimate interests — to improve the platform, prevent abuse, and provide analytics
  • Legal obligation — where required by law

You, as a business user, are responsible for ensuring you have appropriate consent or a legitimate interest basis when sending review request emails to your customers under applicable law (including PECR in the UK).

5. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your business and customer data within 30 days.

Email tracking events are retained for 24 months to support analytics.

Billing records may be retained for up to 7 years to comply with financial regulations.

6. Data sharing

We do not sell your data. We share data only with the following trusted service providers, solely to operate the platform:

  • Resend — email delivery
  • Stripe — payment processing
  • Neon — database hosting (EU/US)
  • Vercel — platform hosting

Each provider is bound by their own privacy policy and data processing agreements.

7. Your rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Data portability
  • Lodge a complaint with the ICO (UK) or your local supervisory authority

To exercise any of these rights, email us at privacy@reviewl.co.uk.

8. Cookies

We use essential cookies to keep you logged in and to make the platform work. We do not use advertising or tracking cookies. See our Cookie Policy for full details.

9. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted connections (TLS), hashed passwords, and access controls. No system is completely secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice in the platform. Continued use of Reviewl after changes take effect constitutes acceptance of the updated policy.