Privacy Policy

Last Updated: October 30, 2025

Reviewshake, Inc. (“Reviewshake,” “we,” “our,” or “us”) provides software tools that help businesses and agencies generate, manage, analyze, and market online reviews. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website, platform, and related services (collectively, the “Services”).

By using Reviewshake, you agree to this Privacy Policy. If you do not agree, please do not use our Services.

Who We Are

Reviewshake, Inc. is a Delaware corporation with its registered office at:
2035 Sunset Lake Road, Suite B2, Newark, Delaware 19702, USA.

We act as a data controller for our direct customers (SMBs and agencies) and as a data processor for their end customers when we process review-related data on their behalf.

You can reach our Privacy Officer at privacy@reviewshake.com
.

Information We Collect

We collect information to operate our platform effectively, provide customer support, and improve our Services.

a. Account Information

Information you provide when creating or managing an account:

Name, business name, and contact information (email, phone)

Billing and payment details (processed securely via Stripe)

b. Customer & Review Data

Information you or your customers provide when using the platform:

Review invitations, responses, and messages

Customer contact details used for sending review requests (e.g., email, SMS)

Ratings, comments, and feedback submitted via your review campaigns

Review content imported from third-party sites (e.g., Google, Facebook, Yelp)

c. Usage Data

Automatically collected data about how you interact with our platform:

IP address, device information, and browser type

Log data (login times, feature usage, performance metrics)

Cookies and analytics (via Google Analytics and similar tools)

d. AI Interaction Data

If you use AI-powered features (e.g., review summaries, sentiment analysis, or automated responses), we process review content through secure AI APIs.

These AI systems are used only for delivering your requested service (e.g., generating replies).

Data processed by AI features is not used to train public AI models or shared externally.

e. Integration Data

If you connect external services (Google, Facebook, etc.), we may collect tokens or data from those integrations per your authorization.

How We Use Your Information

We use collected data to:

Provide, operate, and maintain our Services

Deliver review invitations, alerts, and reports

Enable AI-powered review management and analytics features

Personalize the platform experience

Communicate with you (support, onboarding, product updates)

Improve our Services and develop new features

Detect and prevent security incidents or fraudulent activity

We may also use aggregated, anonymized data to improve our algorithms and reporting models. This data cannot identify any individual or business.

Legal Bases for Processing (GDPR)

If you are located in the EEA or UK, we process your data under the following legal bases:

Contractual necessity: To provide and maintain the Reviewshake platform.

Consent: For marketing emails or integrations you enable.

Legitimate interest: To improve our products, prevent abuse, and ensure security.

Legal obligation: To comply with applicable laws or regulatory requirements.

How We Share Information

We never sell your personal data.
We may share data only in the following limited cases:

Purpose Recipients
Service delivery Cloud hosting (AWS), communication (Twilio), CRM (Zoho), email/SMS delivery, and analytics providers
Payments Stripe for secure payment processing
AI processing Trusted AI vendors for generating review replies or summaries
White-label accounts Authorized agencies that manage their clients’ Reviewshake instances
Legal or security When required by law, or to protect Reviewshake’s rights and property

All subprocessors are bound by strict confidentiality and data protection agreements. A live list of subprocessors is maintained in our Help Center.

White-Label & Agency Accounts

If you access Reviewshake through an agency’s white-labeled platform, that agency may have access to your data as the data controller.
Reviewshake acts as a data processor in these cases and processes data strictly according to the agency’s instructions.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

Remember user preferences

Measure website traffic and performance

Support login sessions and security
You can adjust your cookie preferences in your browser settings.

For EU/UK users, a cookie consent banner is displayed to manage preferences in compliance with the ePrivacy Directive.

Data Retention

We retain your data only for as long as necessary to fulfill the purposes described in this policy:

Account and billing data: retained for up to 6 years (for tax and compliance).

Review and customer data: retained for the duration of your active account, and deleted within 90 days of cancellation unless required by law.

AI interaction logs: retained temporarily (up to 30 days) for service optimization and debugging.

You may request early deletion by contacting privacy@reviewshake.com
.

Data Transfers

Reviewshake is based in the United States.
If you access our Services from outside the U.S., your data may be transferred to and processed in the U.S. or other countries.
We rely on Standard Contractual Clauses (SCCs) to ensure adequate protection for EU/UK users.

Your Rights (GDPR & CCPA)

Depending on your location, you have the right to:

Access a copy of your personal data

Request correction or deletion

Request data portability

Restrict or object to processing

Withdraw consent (for marketing communications)

File a complaint with your local data protection authority

California residents may also:

Request disclosure of personal information categories collected

Opt out of “sale” or “sharing” of data (Reviewshake does not sell user data)

Request deletion of personal information

To exercise your rights, email privacy@reviewshake.com
with the subject “Data Request.”

Security

We use strong organizational and technical measures to safeguard data, including:

Encryption in transit (TLS 1.2+) and at rest (AES-256)

Role-based access control for employees

Annual penetration testing and regular security audits

Continuous monitoring and intrusion detection

If a data breach occurs, we will notify affected users and regulators within 72 hours as required by law.

Children’s Privacy

Our Services are not directed to children under 16. We do not knowingly collect information from minors.
If you believe a child has provided personal data, contact us immediately at privacy@reviewshake.com
for deletion.

Changes to This Policy

We may update this Privacy Policy periodically to reflect new features or regulatory changes.
When we make material changes, we will notify users via email or dashboard notice and update the “Last updated” date above.

For any privacy-related questions or concerns:

Privacy Officer
Reviewshake, Inc.
2035 Sunset Lake Road, Suite B2
Newark, Delaware 19702, USA
📧 privacy@reviewshake.com