Privacy Policy

Review Monster ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

Personal Information You Provide

We collect information you voluntarily provide when you:

• Create an account (name, email, phone number, business name)
• Subscribe to our services (billing information, payment details)
• Contact us for support (communication records)
• Upload customer data for review campaigns

Information Automatically Collected

When you access our Service, we automatically collect:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed)
• Usage data (features used, interactions with the Service)
• Cookies and similar tracking technologies

Customer Data

You may upload your customers' information to use our review generation services. This may include names, email addresses, phone numbers, and service history. You are responsible for ensuring you have proper consent to share this data with us.

Google Account Data

When you connect your Google account during onboarding, we request limited access to send emails on your behalf. Specifically:

• Gmail Send Permission: We request the gmail.send scope, which allows us to send review request emails from your email address. We do not read, modify, delete, or access any of your existing emails, contacts, or other Gmail data.
• OAuth Tokens: When you authorize your Google account, Google provides us with an access token and a refresh token. These tokens are stored securely in our database and are used solely to send review request emails on your behalf.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send review requests on your behalf to your customers via your connected email account
• Respond to your comments, questions, and support requests
• Send promotional communications (with your consent)
• Monitor and analyze usage trends and preferences
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

3. How We Share Your Information

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (payment processing, SMS delivery, email services, analytics)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law or to protect our rights
• With Your Consent: When you have given us permission to share

We do NOT sell your personal information to third parties.

4. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements

When you cancel your account, we will delete or anonymize your data within 30 days, unless retention is required by law.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication measures
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Withdraw Consent: Where processing is based on consent

To exercise these rights, please contact us at privacy@reviewmonster.com.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your preferences
• Analyze how our Service is used
• Deliver targeted advertising

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our Service.

8. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

9. Children's Privacy

Our Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will delete that information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to the transfer of your information to the United States and other countries where we operate.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

12. Google API Services — Limited Use Disclosure

Review Monster uses Google API Services to let you send review request emails from your own email address. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What We Access

We request the gmail.send scope only. This grants permission to send emails on your behalf. We do not request or use any scope that would allow us to read, modify, or delete your emails, contacts, calendar, or any other Google account data.

How We Use Google Data

The sole purpose of connecting your Google account is to send review request emails to your customers from your own email address. This improves email deliverability and ensures your customers recognize the sender. Specifically:

• We use your OAuth refresh token to obtain short-lived access tokens for sending emails.
• We compose and send review request emails on your behalf when triggered by your configured automation settings.
• We do not use your Google data for advertising, market research, or any purpose unrelated to providing our review management service to you.

How We Store Google Data

• Your OAuth refresh token is stored in our secure database with encryption at rest.
• Access tokens are short-lived (typically 1 hour) and are not permanently stored.
• Your Google account email address is stored to identify the sending address for review requests.
• No email content, message history, contacts, or other Google account data is stored by Review Monster.

How We Share Google Data

We do not share, transfer, or disclose your Google account data or OAuth tokens to any third party. Your tokens are used exclusively by Review Monster's servers to send emails through the Gmail API on your behalf.

Revoking Access

You can disconnect your Google account and revoke Review Monster's access at any time by:

• Visiting your dashboard Settings and clicking "Disconnect Google Account"
• Going to your Google Account permissions page and removing Review Monster
• Contacting us at privacy@reviewmonster.com

When you revoke access, we delete your stored OAuth tokens within 24 hours. Review request emails will no longer be sent from your Google account.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Review Monster
Email: privacy@reviewmonster.com
Address: Boise, ID 83704

For data protection inquiries, you may also contact our Data Protection Officer at dpo@reviewmonster.com.