Privacy Policy

1. Information we collect

Account information

When you sign up, we collect your name, email address, business name, and login credentials. If you subscribe to a paid plan, our payment processor (Stripe) collects and stores your payment details — we never see or store full card numbers.

Business and review data

To power the dashboard, we collect your Google business listing details (such as your place ID, review count, and rating) and the same publicly available data for the competitors you choose to track. We store time-stamped snapshots of this data to show trends.

Customer data you provide

If you use review-request features, you may provide your customers’ names, email addresses, or phone numbers so the Service can send requests on your behalf. You control this data; we process it for you (see “Your customers’ data” below).

Usage data

We collect basic technical and usage information — such as IP address, device and browser type, pages viewed, and review-link scans/clicks — to operate, secure, and improve the Service.

2. How we use information

• To provide, maintain, and improve the Service.
• To send review requests, weekly digests, and product or account notifications you’ve opted into.
• To process payments and manage your subscription.
• To secure the Service, prevent abuse, and enforce our Terms of Service.
• To respond to your support requests.

We do not sell your personal information, and we do not sell or rent your customers’ contact data to anyone.

3. Your customers’ data

When you upload or enter customer contacts, you are the controller of that data and we act as your processor. We use it only to deliver the review-request features you ask us to perform, we honor opt-outs and unsubscribe requests, and we do not use it to market our own products to your customers. You are responsible for having the proper consent and lawful basis to contact those people.

4. How we share information

We share information only with service providers that help us run the Service:

• Supabase — database, authentication, and hosting of your account and review data.
• Stripe — subscription billing and payment processing.
• Google — business listing and review data lookups.
• Email and SMS providers — to deliver digests and the review requests you send.

We may also disclose information if required by law, to protect our rights, or in connection with a business transfer. Each provider is bound to use the data only to provide services to us.

5. Data retention

We keep your account and review data for as long as your account is active. If you cancel and close your account, we delete or anonymize your data within a reasonable period, except where we must retain certain records (for example, billing records) to comply with the law.

6. Security

We protect data with encryption in transit, scoped database access controls (row-level security), and least-privilege access for our systems. No method of transmission or storage is perfectly secure, but we work to safeguard your information and to notify you of any breach as required by law.

7. Your rights and choices

• You can access and update most of your information directly in the app.
• You can unsubscribe from non-essential emails using the link in those emails or your settings.
• You can request a copy of your data or ask us to delete it by emailing us. Depending on where you live, you may have additional rights under laws such as PIPEDA, the GDPR, or the CCPA.

8. International users

The Service is operated from Canada and uses providers in Canada and the United States. By using the Service, you understand that your information may be processed in those countries.

9. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email or in the app and update the date above.

10. Contact

Questions or privacy requests? Email privacy@outreview.ca.