Privacy Policy

Review Widget ("we", "our", or "us") operates the Review Widget platform (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Account information

When you sign up, we collect your name, email address, and a hashed password (or, if you use Google OAuth, a Google-issued identifier). We never store plain-text passwords.

Business information

You may provide your business name, Google Place ID, and other configuration settings. This information is used solely to operate your widgets and review request flows.

Customer feedback

When one of your customers submits feedback through your review request flow, we store the rating, optional message, and submission timestamp on your behalf. You are the data controller for this data; we process it as a service provider.

Usage data

We collect aggregated widget view counts and click-through events to power your dashboard analytics. Individual visitor IP addresses are hashed (one-way) before storage and cannot be reversed.

Billing information

Payments are processed by Stripe. We store your Stripe customer ID and subscription status but never your full card number. See Stripe's privacy policy at stripe.com/privacy.

2. How We Use Your Information

• To operate, maintain, and improve the Service
• To send transactional emails (password resets, billing alerts, trial reminders)
• To process payments and manage subscriptions
• To detect and prevent abuse or fraudulent activity
• To comply with legal obligations

We do not sell your data to third parties. We do not use your data for advertising.

3. Third-Party Services

We share data with the following categories of third parties to operate the Service:

• Stripe – payment processing
• Google APIs – fetching public review data and OAuth authentication
• SMTP / email provider – transactional email delivery
• Cloud infrastructure – hosting and database services

4. Cookies

We use an httpOnly session cookie to keep you logged in. No third-party tracking or advertising cookies are set by the Service. Your widget visitors may encounter cookies set by their own browser or extensions, but not by us.

5. Data Retention

We retain your account and business data for as long as your account is active. After account deletion, data is removed within 30 days, except where retention is required by law (e.g. billing records).

6. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete the personal data we hold about you. To exercise these rights, email us at privacy@reviewwidget.app. We will respond within 30 days.

7. Children

The Service is not directed to children under 16. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email.

9. Contact

Questions about this policy? Email us at privacy@reviewwidget.app.