Privacy Policy

Reviewello is a service that lets businesses show their own Google reviews on their websites through an embeddable widget. This policy explains what data we handle and why.

Account data. When you sign in with Google we receive your name, email address and Google account ID. We use them to create and identify your Reviewello account.

Google Business Profile data. If you choose to connect a Business Profile, we ask for the business.manage permission. We use it only to list the locations you can manage and to read the reviews of the location you select. We store the location name, the reviews (author name, rating, text, date, link) and an encrypted refresh token so reviews can be kept up to date.

Public place data. If you use the public search option, we fetch public information and up to five public reviews from the Google Places API when the widget loads. We do not store them.

Visitor feedback. If you enable the review collector, a visitor's star rating, optional message and optional email address are sent to the business owner and stored so the owner can read them.

Billing data. Payments are handled by Stripe. We store your Stripe customer ID and plan, not your card number.

Usage data. We use Vercel Analytics and Speed Insights to measure page views and performance. They do not use advertising cookies.

We use data from your Google account only to provide the features you ask for: signing you in, showing your Business Profile reviews in your widget, and keeping them synchronised. We do not sell Google user data, use it for advertising, or transfer it to others except as needed to provide the service (for example our hosting and database providers) or if the law requires it.

Reviewello's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not allow humans to read your Google data except with your consent, for security reasons, to comply with law, or for internal operations on aggregated, anonymised data.

Data is stored in a Supabase (PostgreSQL) database hosted in the EU, and the app runs on Vercel. Refresh tokens are encrypted before they are stored. Stripe processes payments. These providers act as processors on our behalf.

We keep your data while your account is active. You can disconnect a business or delete it in the dashboard, which removes its stored reviews, widget settings and visitor feedback. You can also revoke Reviewello's access at any time at myaccount.google.com/permissions. To have your whole account deleted, contact us.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. Contact us to exercise these rights.

We may update this policy and will change the date at the top when we do.

You can contact us through the contact details on our website.