Privacy Policy

ReviewRav (“ReviewRav”, “we”, “us”) makes a WordPress plugin and a connected online service. They link to your Google Business Profile so you can see your business details and reviews, send review requests to your customers, and show reviews on your website with a shortcode.

This Privacy Policy applies to the ReviewRav plugin, our dashboard and cloud service, and our website at https://www.reviewrav.click/. “You” means the business owner or authorized manager who installs and connects the plugin.

If you received a review request from one of our users, see “Your customers’ information” below.

We don’t access Gmail, Google Drive, Calendar, Contacts, or any other Google service. We only use the Business Profile data and basic account identity listed above.

We use Google OAuth 2.0. When you choose Connect Google, Google shows you a consent screen that lists exactly what we are asking for. Nothing is accessed until you approve it, and you can withdraw approval at any time.

We request only the permissions needed for the features you use:

Google gives us access and refresh tokens so the plugin can keep your reviews up to date without asking you to sign in again. We encrypt these tokens at rest and delete them when you disconnect. We never see your Google password.

We use the information above to:

• Show your business details and reviews in the dashboard.
• Display the reviews you select on your website through the plugin’s shortcode.
• Send review requests to the customers you choose.
• Post replies to reviews when you write and submit them.
• Show review activity and rating trends.
• Provide support, fix bugs, and keep the service secure.
• Bill you and meet our legal obligations.

We don’t use Google user data for advertising, we don’t sell it, and we don’t use it to train generalized AI or machine-learning models.

In practice, that means:

• Use. We use Google user data only to provide and improve the user-facing features described in this policy.
• Transfer. We don’t transfer Google user data to others except to provide those features, to comply with applicable law, for security or abuse investigations, or as part of a merger or sale, with notice to you.
• No ads. We don’t use Google user data to serve ads, including retargeting and interest-based advertising.
• Human access. Our people don’t read your Google user data unless you give explicit permission for specific items (for example, in a support request), it is needed for security or abuse investigations, we must do so to follow the law, or the data is aggregated and anonymized for internal operations.

When you upload or type in customer names and contact details to send review requests, you decide why and how that information is used. We process it for you as your service provider (“processor” under GDPR). We use it only to send the requests you ask for, record delivery status, and honor opt-outs.

You are responsible for having permission to contact those people. Every request includes a way to opt out, and we keep opted-out contacts on a suppression list so they are not messaged again from your account. Your obligations are set out in our Terms of Service.

If you received a review request and want to stop receiving them or have your details removed, use the opt-out link in the message or email team@reviewrav.click.

Google reviews are public. When you place the plugin’s shortcode on a page, visitors to your site can see the reviews you chose to display, including the reviewer’s public name, photo, rating, and text, as they appear on Google.

To keep pages fast and stay within Google’s request limits, the plugin stores a copy of those reviews. Depending on how you configure it, that copy is kept in your WordPress database, on our servers, or both. Copies refresh regularly, so a review that is edited or deleted on Google is updated or removed on your site at the next refresh.

The shortcode output doesn’t load advertising scripts or set cross-site tracking cookies. As the site owner, you should still describe the reviews on your site in your own privacy notice.

We don’t sell personal information, and we don’t share it for cross-context behavioral advertising. We share information only with:

• Service providers that help us run the service, such as cloud hosting, email and SMS delivery, payment processing, customer support, and error monitoring. They may use the data only to provide services to us and are bound by contract.
• Google, when the plugin calls the Business Profile API on your behalf, for example to fetch reviews or post a reply.
• Authorities and advisers, when required by law, to protect rights and safety, or to enforce our terms.
• A successor, if we are involved in a merger, acquisition, or sale of assets. We will tell you first, and this policy keeps applying to your data unless you agree to a change.

Google user data is shared only as permitted by the Limited Use commitments above.

1. Disconnect in the plugin. Open the ReviewRav settings and choose Disconnect. We revoke our tokens with Google and stop all syncing.
2. Revoke in Google. Remove ReviewRav at myaccount.google.com/permissions. Our access ends right away.
3. Ask us to delete. Email team@reviewrav.click from your account address. We will confirm when deletion is complete.

We use safeguards that fit the sensitivity of the data, including:

• Encryption in transit (TLS), and encryption of OAuth tokens at rest.
• Access limited to staff who need it, with access logging.
• Least-privilege Google permissions: we only request the scopes listed above.
• Regular updates and security reviews of the plugin and its dependencies.

No system is perfectly secure. If we learn of a breach that affects your information, we will notify you and regulators as the law requires.

If you are in the European Economic Area or the UK, we rely on these legal bases:

• Contract. To provide the service you signed up for.
• Consent. For connecting your Google account, which you can withdraw at any time.
• Legitimate interests. To secure and improve the service and prevent abuse, balanced against your rights.
• Legal obligation. To meet tax, accounting, and other legal requirements.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct information that is wrong or incomplete.
• Delete your information.
• Receive a copy of your information in a portable format.
• Object to or restrict certain uses.
• Withdraw consent, without affecting what we did before you withdrew.
• Not be treated differently for exercising these rights.

These rights come from laws such as the GDPR, the UK GDPR, and the CCPA/CPRA in California. To use them, email team@reviewrav.click. We may need to verify your identity, and we will respond within the time the law requires. If you are in the EEA or UK and we haven’t resolved your concern, you can complain to your local data protection authority.

If your information was uploaded by a business that uses ReviewRav, please contact that business first. We will help them respond.

We and our service providers may process information in countries other than your own. When we transfer personal information out of the EEA or UK, we use safeguards such as the European Commission’s Standard Contractual Clauses.

ReviewRav is built for businesses and isn’t directed at children under 16. We don’t knowingly collect their information. If you believe a child has given us data, email team@reviewrav.click and we will delete it.

We will post updates here and change the date at the top. For material changes, we will email account holders or show a notice in the dashboard before they take effect. If a change affects how we use Google user data, we will ask for your consent again where required.

• Company: ReviewRav
• Address: [Registered business address]
• Privacy email: team@reviewrav.click