Privacy Policy

Who we are

Reviu is the data controller for the personal data described on this page. If you have a privacy question or want to exercise any of the rights below, contact hello@reviuapp.com.

What we collect

• Account: your email address, used to sign you in via a passwordless login link.
• Business details: your business name, reply style preferences, and language setting.
• Reviews & replies: review text, reviewer names, star ratings, and any draft or approved replies, either pulled from your connected Google Business Profile or entered manually as examples to help Reviu learn your style.
• Billing: if you subscribe, Stripe processes your payment details on our behalf. We store your Stripe customer and subscription IDs, but never your card details.
• Cookies: only strictly necessary cookies set by Supabase to keep you signed in. We don't use analytics, advertising, or tracking cookies, so no cookie consent banner is shown.

How we use it, and our legal basis

• To draft replies to your reviews using AI (Anthropic's Claude), based on your style settings and past approved replies — necessary to perform our contract with you.
• To send login links, billing, and account emails, via Resend — necessary to perform our contract with you.
• To process payments and manage subscriptions, via Stripe — necessary to perform our contract with you.
• To operate, secure, and improve the service — our legitimate interest in running a reliable product, balanced against your rights.

We don't sell your data, and we don't use your review or reply content to train AI models beyond generating your own drafts.

Where it's stored, and international transfers

Your data is stored with Supabase (database and authentication) and processed using Anthropic's API to draft replies. Emails are sent through Resend, payments through Stripe, and the app is hosted on Vercel. Some of these providers process data outside the UK, including in the US. In those cases we rely on the UK International Data Transfer Addendum or equivalent Standard Contractual Clauses to ensure your data stays protected.

How long we keep it

We keep your account, business, and review data for as long as your account is active, and for a reasonable period afterwards to meet legal, accounting, or dispute-resolution obligations (for example, billing records). We delete or anonymise it once it's no longer needed.

Your rights

If UK GDPR applies to you, you have the right to: access the personal data we hold about you; have inaccurate data corrected; have your data deleted; restrict or object to certain processing; and receive your data in a portable format. You can also complain to the UK Information Commissioner's Office (ico.org.uk) if you're unhappy with how we've handled your data, though we'd appreciate the chance to sort it out directly first.

You can edit your business's data at any time from Settings, or ask us to delete your account and associated data entirely, by emailing hello@reviuapp.com. We'll action deletion requests within 30 days.

Changes

We'll update this page if anything material changes about how we handle your data.