Privacy policy

1. Data controller

Palicz Growth Solutions LP
Friedrichsgaber Str. 59A
25451 Quickborn, Germany
Email: hello@reviewtactic.com

2. What data we collect

When you use ReviewTactic, we collect and process the following data:

• Google account information: email address, name (via Google OAuth)
• Google Business Profile data: reviews, your replies, star ratings, business name, address, and performance metrics (impressions, clicks, direction requests)
• Usage data: pages visited, features used, session duration
• AI interaction logs: review text sent to AI models for reply generation, generated replies
• Payment information: processed by Stripe; we do not store card numbers

3. How we use your data

• Generating AI-powered review replies
• Providing competitor benchmarks and analytics
• Publishing replies to your Google Business Profile on your behalf
• Sending transactional emails (account, billing, feature updates)
• Improving the service through anonymized analytics

4. Legal basis (GDPR)

• Contract performance: processing your reviews and generating replies
• Consent: optional analytics cookies
• Legitimate interest: service improvement, security

5. Google OAuth scope

We request the business.manage scope to read and reply to your Google Business Profile reviews. We do not access your Gmail, Google Drive, or any other Google service.

6. Third-party processors

7. AI and data processing

ReviewTactic uses third-party AI models (Anthropic Claude, Google Gemini) via their commercial APIs to generate review replies, analytics insights, and intelligence reports. Your data is handled as follows:

• No model training: Your review data is never used to train AI models. Both Anthropic and Google contractually guarantee that data sent through their commercial APIs is not used for model training or improvement.
• Publicly available data only: The review text we process is already publicly visible on Google Maps. No private or personal customer data is transmitted to AI providers.
• Processing, not storage: AI providers process your data in real time and do not retain it beyond the duration of the API request, except for brief abuse-monitoring windows as specified in their data processing agreements (typically up to 30 days).
• No shared context: Each AI request is independent. Your business data is never mixed with, or made available to, other ReviewTactic users or any third party.

For details on each provider's data handling, see Anthropic's privacy policy and Google's Gemini API terms.

8. Data retention

We retain your data for as long as your account is active. If you delete your account, all associated data is permanently removed within 30 days. Inactive accounts (no login for 2 years) are subject to automatic deletion after a 30-day notification period.

9. Data deletion

You can delete your account and all associated data at any time from Settings → Delete Account in the app. This action is immediate and irreversible.

10. Your rights (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access: request a copy of your personal data
• Rectification: correct inaccurate personal data
• Erasure: request deletion of your personal data
• Restriction: restrict processing of your personal data
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interest

To exercise any of these rights, email hello@reviewtactic.com. We will respond within 30 days.

11. Cookies

• Essential cookies: Supabase authentication session (required for the app to work)
• Analytics cookies: PostHog (opt-out available; see Cookie policy)

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use of the service after changes constitutes acceptance.

13. Contact

For privacy-related inquiries:
hello@reviewtactic.com
Palicz Growth Solutions LP, Friedrichsgaber Str. 59A, 25451 Quickborn, Germany