Privacy Policy

Effective Date: July 25, 2026

1) Overview

ReviewScout AI ("we," "us," "our") is a web and mobile application developed by Deeprion Labs LLC, designed to help businesses manage and respond to Google Business Profile reviews, generate AI-assisted reply drafts, and surface review insights. This Privacy Policy explains what information we collect, how we use it, and your choices.

2) Information We Collect

A) Account Information

• Email address
• Display name
• Authentication identifiers (e.g., user ID from Firebase Authentication)

B) Connected Business & Review Data (when you connect Google Business Profile)

• Business profile identifiers necessary to connect your location(s)
• OAuth tokens required to maintain your connection (stored securely, never shared)
• Review content and metadata (e.g., star rating, review text, date/time, reply status, and reviewer details made available by the platform)

C) AI Feature Inputs

• Text you submit for AI features, including review text, tone preferences, custom instructions, and business context you provide
• Generated outputs (draft replies and insights) associated with your account

D) Device Information

• Device identifiers used for push notification delivery and fraud prevention
• Push notification tokens for the mobile app (Expo push tokens)
• Web push subscription details for each browser in which you turn notifications on: the delivery address issued by that browser's push service, the public keys the browser generates so that we can encrypt messages to it, and the browser and platform identification sent with that request

E) App Usage, Diagnostics, and Performance

• Basic usage events (e.g., feature usage, screens visited) to improve product experience
• Crash reports and performance diagnostics

F) Customer Support Communications

• Messages and files you send when contacting support

G) Subscription Information

• Subscription status and entitlements for Starter and Pro plans (including free trial status)
• RevenueCat customer identifiers for subscription management

We do not collect or store your full payment card details. Purchases are handled entirely by Apple's In-App Purchase system.

H) Free Google Review Health Check (no account required)

When you use the free Google Review Health Check, we ask Google Maps Platform for the public listing of the business you select, and we receive its name, address, category, star rating, review count and up to five public reviews. We use that information to calculate and display your score. It is not attached to any account, it is not used to build a profile of you, and it may be held on our servers only for as long as it takes to serve that check. What we record for measurement is the Google Place ID, an identifier Google permits us to retain, together with the score, letter grade and industry we calculated. We send those measurement values to our analytics provider (Google Analytics). We do not send the business name, address, phone number, star rating, review count or the text you typed into the search box to our analytics provider. If you use the share buttons on the result, the business name and score are placed into a post you compose on that social network, and nothing leaves this page until you choose to publish it. You do not need an account, and we do not ask for your email address to see your score.

If your browser offers to share your location and you allow it, we send approximate coordinates, rounded to roughly 100 metres, to Google with your search so that nearby businesses appear first. Your location is sent in the body of the request rather than in the web address, it is not stored in any ReviewScout record, and it is never sent to our analytics provider. Declining the browser prompt does not limit the tool in any way.

One exception is worth stating plainly: like every website, our hosting providers keep short-lived operational request logs, and those logs record the web address of each request. If you open a health check from a link that someone shared with you, that web address can contain the business name and address that were in the link. We do not use those logs for analytics or marketing.

3) How We Use Your Information

We use information to:

• Provide core functionality (sync reviews, display review inbox, generate AI drafts, publish replies you approve)
• Operate and improve the service (debugging, performance monitoring, product improvements)
• Send push notifications for new reviews and important alerts (with your permission)
• Send email communications such as weekly review digests (with your permission)
• Provide support and communicate service-related notices (e.g., onboarding help, important product updates)
• Prevent fraud and abuse and maintain security (including device fingerprinting for referral fraud prevention)
• Manage access to paid features and trials (Starter and Pro)

4) AI Features

If you use AI-assisted drafts or insights:

• We process relevant review text, your tone preferences, custom instructions, and business context to generate suggestions using third-party AI services (Google Vertex AI and OpenAI).
• AI content is provided as a draft. You are responsible for reviewing and approving any reply before publishing.
• We do not use your data to train AI models.
• We do not use your data to build advertising profiles.

5) Google User Data and Limited Use

When you connect your Google Business Profile, you grant ReviewScout AI access to Google user data through Google APIs. We request the business.manage scope for a single purpose: to read the reviews of the location you choose and to publish the replies you approve. We also read your basic profile and email address to identify your account.

ReviewScout AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the features you see in the app: your review inbox, your Review Pulse score, AI reply drafts and the insights built from your own reviews.
• We do not sell Google user data, and we do not transfer it to others except to the service providers that operate these features on our behalf (listed in the next section), or when required by law.
• We do not use Google user data to train generalized AI or machine learning models. Review text is sent to our AI providers only to generate a draft for you at the moment you ask for it.
• We do not use Google user data for advertising, and no humans read it except with your explicit permission (for example, when you send us a support request that includes it) or where required for security or legal reasons.
• You can disconnect Google at any time from Profile → Platform Connections; deleting your account removes the reviews and replies we stored, as described in the Account Deletion section.

6) Third-Party Service Providers

We use the following categories of service providers to operate the App:

• Cloud infrastructure and hosting (Google Cloud Platform)
• Authentication (Firebase Authentication)
• Real-time data synchronization (Firebase Firestore)
• AI processing (Google Vertex AI, OpenAI)
• Subscription management (RevenueCat)
• Push notification delivery (Expo Notification Service for the mobile app; the browser push services operated by Google, Apple, and Mozilla for the web app)
• Email delivery (Resend)
• Deep linking and referral attribution (Branch.io)
• Crash reporting and analytics (Firebase Crashlytics)
• Product and website analytics (Google Analytics)
• Business listing and mapping data (Google Maps Platform)
• Error monitoring for the web app (Sentry, hosted in the European Union)

Push notifications always travel through a push service you already use. In the mobile app that service is the Expo Notification Service. In the web app it is the push service run by the maker of your browser: Google for Chrome and other Chromium browsers, Apple for Safari, Mozilla for Firefox. When you turn web notifications on, your browser gives us a delivery address for that one browser on that one device, and every notification for you is handed to that browser's push service. A notification contains the notification title, the reviewer name, the business name, and the star rating. It does not contain the customer's review text. Web push messages are encrypted, so the browser's push service cannot read their contents, but it does see that a message was delivered to your browser and when.

A web push subscription belongs to one browser on one device, so enabling notifications on your laptop does not enable them on your phone. We release the subscription when you sign out, and you can end it at any time by turning notifications off in the App or by revoking the notification permission in your browser settings.

We use a third-party error monitoring provider to detect and fix crashes and server errors. When something fails, we send that provider a technical error report: the error message and stack trace, the page or API route where it happened, your browser type and version, and your internal ReviewScout account identifier. We do not send Google review content, AI-generated reply drafts, reply text you write, your email address, or Google account tokens to this provider. These error reports are stored on servers in the European Union.

Some features display content from Google Maps Platform. Google's collection and use of information in connection with that content is described in the Google Privacy Policy, and your use of Google Maps content is subject to the Google Maps/Google Earth Additional Terms of Service.

These providers are permitted to process data only to provide services to us and are contractually required to protect it.

We do not sell your personal information.

7) Data Retention

We retain information for as long as needed to provide the service and comply with legal obligations. If you delete your account, we delete or de-identify your personal data within 30 days unless we are legally required to retain certain records.

8) Your Choices & Rights

You can:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of your account and associated personal data
• Opt out of push notifications through your device settings, your browser settings, or the Notifications section of your profile in the App
• Opt out of email notifications through the App (Profile > Notification Preferences)
• Disconnect third-party connections within the App (Profile > Connected Platforms)

To exercise these rights, use the in-app options or email contact@reviewscout.ai.

9) California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, email contact@reviewscout.ai.

10) European Economic Area (EEA) Users

If you are located in the EEA, we process your personal data based on the following legal bases:

• Performance of a contract: to provide the Services you requested
• Legitimate interests: to improve and secure our Services
• Consent: for optional features like push notifications and email digests

You have the right to access, correct, delete, restrict processing, and port your data. You also have the right to lodge a complaint with your local data protection authority.

To exercise these rights, email contact@reviewscout.ai.

11) Account Deletion

You can initiate account deletion within the App (Profile > Delete Account). We process deletion requests within 30 days. Upon deletion:

• Your account and profile information are removed
• Your connected platform data (reviews, connections) are deleted
• Your subscription is not automatically canceled. You must cancel your subscription separately through your App Store account settings before or after requesting deletion.
• Some information may be retained if legally required (e.g., billing records)

12) Security

We use reasonable administrative, technical, and organizational safeguards designed to protect your information, including:

• Encryption of data in transit (TLS) and at rest
• Secure credential storage via Google Cloud Secret Manager
• Firebase Authentication for secure sign-in
• Rate limiting on API endpoints

No method of transmission or storage is 100% secure. If you become aware of a security issue, please contact us immediately at contact@reviewscout.ai.

13) Children

ReviewScout AI is not intended for children under 13 (or the minimum required age in your jurisdiction). We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 13, we will delete it promptly.

14) International Data Transfers

If you access the service from outside the United States, your information may be transferred to and processed in the United States or other locations where our service providers operate. By using the App, you consent to such transfers.

15) Changes

We may update this Privacy Policy from time to time. We will update the Effective Date and, if changes are material, notify you through the App or by email.

16) Contact

If you have questions, privacy requests, or concerns, email: contact@reviewscout.ai