Privacy Policy

1. Information We Collect

1.1 Account information

When you create or use a ReviewGrow account, we may collect:

• Your name
• Email address
• Password in securely hashed form
• Business name
• Business category
• Business contact details
• Account role and permissions
• Subscription and account status
• Login and authentication information

We do not store your account password in plain text.

1.2 Google account and Google Business Profile data

When you connect a Google Business Profile through Google OAuth, we may receive or access information permitted by the Google scopes you approve, including:

• Your Google account email address and identifiers
• Google Business Profile accounts and business locations
• Business names, addresses, contact information, Profile metadata, and connection status
• Customer reviews, ratings, reviewer names, publicly available reviewer information, review dates, and content
• Existing business responses and information needed to submit an approved response
• OAuth access and refresh tokens required to maintain the connection

ReviewGrow accesses Google data only after you authorize access through Google’s consent screen. We do not receive or store your Google account password.

1.3 Review and reputation data

We may process:

• Reviews retrieved from connected Google Business Profiles
• Reviews or feedback uploaded manually, including CSV or spreadsheet data
• Review replies and AI-generated reply suggestions
• Sentiment results, complaints, praises, and business insights
• Reports, review trends, and aggregated statistics

Manually uploaded review data and live Google Business Profile review data may be processed separately depending on the feature being used.

1.4 AI processing information

When you use an AI-powered feature, ReviewGrow may send relevant information to an AI service provider such as Gemini, including review text, ratings, business category, business name or context when required, and instructions used to generate summaries, insights, or suggested replies.

We seek to send only information reasonably necessary for the requested feature. AI-generated information may be inaccurate or incomplete. Users are responsible for reviewing AI-generated replies, reports, and recommendations before relying on or publishing them.

1.5 WhatsApp review request information

When a business user sends or schedules a review request through an available WhatsApp integration, we may process:

• Customer name and telephone number
• Business name and review link
• Message template, status, date, and time
• Delivery-related information provided by the messaging provider

The business user is responsible for ensuring it has the customer’s consent or another valid legal basis to contact the customer. ReviewGrow must not be used for unsolicited, deceptive, or unlawful messages.

1.6 Payment and subscription information

When paid subscriptions are available, we may collect or receive the selected plan, billing status, payment amount, transaction identifier, payment date, subscription dates, payment-provider response, and invoice or tax information where applicable.

Full card, bank, or UPI credentials are generally processed by the applicable provider and are not intended to be stored directly by ReviewGrow.

1.7 Technical and usage information

We may automatically collect IP address, browser and device information, operating system, login timestamps, pages and features used, diagnostic information, security and audit events, approximate IP-derived location, referring URLs, and session and cookie information.

2. How We Use Information

We may use information to:

• Create, maintain, and authenticate accounts
• Protect accounts and prevent fraud, misuse, unauthorized access, and security incidents
• Connect authorized Google Business Profiles and retrieve and display reviews
• Generate summaries, sentiment analysis, insights, suggested replies, and downloadable reports
• Post a reply only after an authorized user takes the required approval or submission action
• Send authorized review requests
• Administer subscriptions and payments
• Provide support, diagnose errors, and improve performance and user experience
• Enforce our Terms, comply with law, maintain records, and resolve disputes

We do not sell personal data.

3. Google API Services and Google User Data

ReviewGrow’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including applicable Limited Use requirements.

Google information is used only to provide or improve user-facing ReviewGrow features visible and relevant to the user who authorized access.

We do not use Google user data to sell information, advertise, create advertising profiles, determine creditworthiness, conduct surveillance, or for purposes unrelated to authorized ReviewGrow features. Access is limited to authorized systems, service providers, and personnel who require it to operate, protect, or support the service.

4. Review Replies and Merchant Authorization

ReviewGrow may generate suggested Google review responses. A suggestion is not automatically endorsed by Google or ReviewGrow. The business user must review it and remains responsible for the final response.

ReviewGrow will submit a response only when an authorized business user has approved or initiated it, or has expressly enabled a clearly disclosed automation feature where legally and contractually permitted. The user confirms they are authorized to manage and respond to reviews for each connected business.

5. Legal Bases and User Instructions

Depending on the circumstances, we process information to perform our agreement with you, with consent, to comply with legal obligations, to protect legitimate business and security interests, or on a business customer’s documented instructions.

For customer information entered by a business user, that user generally determines why it is processed. ReviewGrow processes it to provide the requested service.

6. Cookies and Similar Technologies

ReviewGrow may use essential cookies or similar technologies to maintain authenticated sessions, remember security settings and preferences, protect against fraudulent requests, and measure and improve reliability. Essential cookies may be necessary for the service to function.

If non-essential analytics or marketing cookies are introduced, ReviewGrow will provide any notice or consent controls required by law.

7. How We Share Information

We may share information where reasonably necessary with cloud hosting, database and storage providers; Google APIs and OAuth; AI providers; WhatsApp or messaging providers; payment processors; email providers; security, monitoring, and logging providers; professional advisers; and authorities where legally required.

Providers process information under their own terms and privacy practices or contractual obligations. We may also disclose information to comply with law, protect rights and safety, investigate fraud or security incidents, or in a merger, acquisition, financing, restructuring, or service transfer subject to safeguards. We do not permit providers to use personal data for unrelated purposes merely because they process it for ReviewGrow.

8. Data Storage and International Processing

ReviewGrow and its providers may process or store information in India or other countries where relevant infrastructure operates. Those countries may have different data-protection laws. Where required, we will take reasonable measures to protect cross-border information.

9. Data Retention

We retain information only as long as reasonably necessary to provide ReviewGrow, maintain accounts and integrations, complete transactions, meet legal, tax, accounting, and security requirements, resolve disputes, enforce agreements, maintain backups, and prevent fraud.

Google OAuth tokens are retained while the integration is active or until revoked, deleted, expired, or no longer required. After account deletion, associated information is deleted or anonymized within a commercially reasonable period except where retention is required. Residual copies may remain temporarily in protected backups until overwritten according to our backup schedule.

10. Disconnecting Google and Revoking Access

You can disconnect Google Business Profile through available ReviewGrow settings or revoke ReviewGrow access from your Google Account’s third-party access or security settings. After revocation, ReviewGrow cannot retrieve new Google Business Profile information and Google-dependent features may stop working. Previously stored information may remain until deleted or deletion is requested, subject to lawful retention. Disconnecting Google does not delete your ReviewGrow account.

11. Account and Data Deletion

You may use the account deletion option where available or email founder@reviewgrow.in from your registered email with the subject “ReviewGrow Data Deletion Request.” We may verify your identity.

A request may remove account information, associated businesses, stored Google Business Profile information, reviews, AI reports and insights, stored replies, OAuth tokens, uploaded files, and WhatsApp request records subject to lawful retention. We will not delete another account’s or business’s information without authorization. See the Data Deletion page for instructions.

12. Your Rights

Subject to law, you may have rights to ask whether we process your data, access it, correct inaccuracies, request deletion, withdraw consent, revoke Google access, raise a grievance, nominate another person to exercise certain rights where applicable, and request processing information. Contact founder@reviewgrow.in. We may request reasonable identity and authority verification.

13. Business Users’ Responsibilities

Business users must have authority to manage each profile; use ReviewGrow lawfully; provide appropriate notices; obtain required consent before uploading customer information or sending messages; avoid unnecessary sensitive data; review AI content; ensure replies are accurate and lawful; and respond to privacy requests where the business controls the data. ReviewGrow is not responsible for unlawful third-party data use by a business user.

14. Security

We use reasonable administrative, technical, and organizational measures designed to protect information, which may include access controls, password hashing, secure communications, restricted credentials, monitoring, backups, and other appropriate safeguards. No transmission or storage is completely secure, and we cannot guarantee absolute security. Users must protect their credentials and promptly report suspected unauthorized access.

15. Children

ReviewGrow is intended for businesses and people legally capable of entering a contract. It is not intended for children, and we do not knowingly collect personal data directly from children to create accounts. Contact us if you believe a child provided data without authorization.

16. Third-Party Links and Services

Third-party links and integrations are governed by their own terms and privacy policies. ReviewGrow is not responsible for independent third parties’ privacy or security practices.

17. Changes to This Privacy Policy

We may update this Policy for changes in ReviewGrow, law, providers, or business practices. We will revise the “Last updated” date and provide additional notice or consent where required. Continued use after an update constitutes acknowledgement to the extent permitted by law.

18. Grievance and Contact Information

We will review legitimate requests and respond within the timeframe required by applicable law.

19. Google Disclaimer

ReviewGrow is an independent service and is not sponsored by, endorsed by, or affiliated with Google LLC. Google, Google Business Profile, and related names and logos are trademarks of Google LLC.