Audit my network

Privacy Policy

Last updated: 26 September 2026

This page is a courtesy translation. Only the French version is legally binding.

1. Introduction

Welcome to Reviewser (“Company”, “we”, “us”, or “our”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our B2B SaaS platform accessible at https://www.reviewser.io (the “Service”).

Reviewser is a business review analytics platform that connects to your Google Business Profile, Uber Eats, Deliveroo, and other review platforms to help you manage and analyse customer feedback from one centralised dashboard.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please discontinue use of the Service.

2. Data Controller

The data controller responsible for your personal data is:

Reviewser
72 Avenue Emile Van Becelaere
1170 Watermael-Boitsfort, Belgium

For any questions regarding this Privacy Policy or to exercise your rights, please contact us:

  • By email: [email protected]
  • By mail: 72 Avenue Emile Van Becelaere, 1170 Watermael-Boitsfort, Belgium

3. Information We Collect

3.1 Information You Provide Directly

When you register or use the Service, we may collect:

  • First name and last name
  • Email address
  • Phone number
  • Billing address, city, postal code, country
  • Business name and details

3.2 CX Audit Request Form

When you submit the CX audit request form available on www.reviewser.io, we collect:

  • Your first and last name
  • Your professional email address
  • Your company name
  • The size of your network (range of locations) and your role

Purpose: These data are used exclusively for commercial contact purposes — to carry out the requested CX audit, present it to you and introduce the Reviewser Service.

Legal basis: This processing is based on the legitimate interest of Reviewser (Article 6(1)(f) GDPR), namely commercial outreach to professionals who have expressed interest in the Service.

Retention period: Data collected via the CX audit form is retained for a maximum of 3 years from the date of last contact with the prospect. At the end of this period, data is deleted or anonymised.

3.3 Information Collected via Google OAuth and Google APIs

When you connect your Google account to Reviewser, we collect and process the following data via Google API Services:

  • Your Google Account email address and unique Google identifier
  • Your Google Business Profile account information (account ID, location IDs)
  • Customer reviews and ratings associated with your Google Business Profile location(s)
  • Review metadata (date, rating, review text, author information)

Reviewser’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data obtained from Google APIs is:

  • Used solely to display and analyse reviews within your Reviewser dashboard
  • Never sold to third parties, data brokers, or advertising platforms
  • Never used for targeted advertising, retargeting, or interest-based advertising
  • Never used to determine creditworthiness or for lending purposes
  • Never transferred to third parties except as required to provide the core Service functionality

Legal basis: Article 6(1)(b) GDPR (performance of a contract) — i.e., the delivery of the Service you subscribed to.

Retention period: Google API data (reviews, account IDs) is retained for the duration of your active subscription. Upon account deletion, this data is removed within 30 days.

3.4 Payment Information

When you subscribe to a paid plan, payment processing is handled by a third-party payment processor (such as Stripe). We do not store your full credit card details. We may store transaction records and subscription status.

Legal basis: Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)© GDPR (legal obligation for accounting/tax purposes).

Retention period: Billing records are retained for 10 years in accordance with Belgian accounting law.

3.5 Usage and Analytics Data

We may collect information about how you use the Service:

  • Pages visited and features used
  • Log data (IP address, browser type, device information, timestamps)
  • Performance and diagnostic data

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) to improve the Service and ensure security.

Retention period: Log data is retained for a maximum of 12 months.

4. Sub-processors and Third-Party Service Providers

Reviewser uses the following sub-processors to deliver the Service. Each is bound by data processing agreements compliant with GDPR:

Sub-processor Role Location Privacy Policy
Cloudflare, Inc. Hosting, CDN, DDoS protection United States cloudflare.com/privacypolicy
Resend Transactional email delivery and notifications United States resend.com/privacy
Google Ireland Ltd Marketing-site analytics (Google Analytics 4), subject to consent Ireland / United States policies.google.com/privacy
LinkedIn Ireland Marketing and retargeting (LinkedIn Insight Tag), subject to consent Ireland / United States linkedin.com/legal/privacy-policy

For transfers to sub-processors located outside the EU/EEA (such as the United States), Reviewser ensures appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) as approved by the European Commission.

5. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Service
  • Aggregate and display your customer reviews in your dashboard
  • Send you transactional emails (account confirmations, subscription receipts, service notifications) via Resend
  • Respond to your demo requests and commercial inquiries
  • Comply with legal obligations
  • Detect and prevent fraud or abuse

We will not use your data or your customers’ Google review data for:

  • Serving advertisements to third parties
  • Selling or licensing data to data brokers
  • Training AI/ML models on your business data without your explicit consent

6. Sharing and Disclosure of Information

We do not sell or rent your personal information to third parties. We may share your data in the following limited circumstances:

  • Sub-processors: As listed in Section 4 above
  • Legal Compliance: When required by law, regulation, or legal process
  • Business Transfers: In the event of a merger, acquisition, or sale of all or part of our assets, with prior user notification
  • Safety: To protect the rights, property, or safety of Reviewser, our users, or the public

7. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction:

  • Encryption of data in transit (TLS/HTTPS) and at rest
  • Access controls limiting data access to authorised personnel only
  • DDoS protection and CDN security via Cloudflare
  • Regular security reviews of our infrastructure

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we strive to use commercially acceptable means to protect your data.

8. Children’s Privacy

Our Service is intended for business users and is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13.

However, please note that reviews displayed in our platform are sourced from public review platforms (Google Business Profile, Uber Eats, Deliveroo, etc.). Some publicly posted reviews may have been authored by individuals under 13. We do not control the content of those platforms. If you believe a minor’s data has been submitted through our Service, please contact us at [email protected] so we can take appropriate steps.

9. Your Rights (GDPR — EU/EEA Users)

As Reviewser is based in Belgium and operates within the European Union, we comply with the General Data Protection Regulation (GDPR). As an EU/EEA resident, you have the following rights:

  • Right of Access (Art. 15): Request a copy of the personal data we hold about you
  • Right to Rectification (Art. 16): Request correction of inaccurate data
  • Right to Erasure (Art. 17): Request deletion of your personal data (“right to be forgotten”)
  • Right to Restriction (Art. 18): Request limitation of how we process your data
  • Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
  • Right to Object (Art. 21): Object to processing based on legitimate interests, including commercial prospecting
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Belgian supervisory authority:

Data Protection Authority (APD/GBA)
Rue de la Presse 35, 1000 Brussels
www.dataprotectionauthority.be

10. Your Rights (CCPA and CPRA — California Residents)

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have the following rights:

  • Right to Know: Request information about what personal data we have collected, used, or disclosed in the preceding 12 months
  • Right to Delete: Request deletion of your personal information, subject to certain exceptions
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioural advertising
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights

To submit a request, contact us at [email protected]. We will respond within 45 days.

We do not sell personal information.

11. CalOPPA (California Online Privacy Protection Act)

Pursuant to CalOPPA, we agree to the following:

  • Users can visit our site anonymously
  • This Privacy Policy is linked from our homepage
  • Users will be notified of any material changes to this Privacy Policy by email or prominent notice
  • Users can update their personal information by contacting us at [email protected]
  • We honour “Do Not Track” signals and do not track users when a DNT browser mechanism is in place

12. Cookies and Tracking

The www.reviewser.io marketing site uses analytics and marketing cookies and trackers, subject to your consent. Specifically:

  • Google Analytics 4 (Google Ireland Ltd) — analytics: understanding how the site is used (page views, referral source, device).
  • LinkedIn Insight Tag (LinkedIn Ireland) — marketing and campaign measurement, which may be used for advertising retargeting.

The legal basis for these trackers is your consent (Art. 6(1)(a) GDPR). None of them is enabled until you accept them via the banner shown on your first visit. You can withdraw your consent at any time using the “Cookies” link in the page footer. The form’s anti-bot protection (Cloudflare Turnstile) sets no cookie.

Where applicable, the Reviewser application (accessible after authentication) may use cookies and similar technologies:

  • Essential cookies: Required for the Service to function (authentication, session management)
  • Analytics cookies: To understand how the Service is used
  • Marketing cookies: If remarketing services were to be enabled

If we were to enable non-essential cookies, your prior consent would be collected in accordance with applicable regulations. You can also control cookies through your browser settings; disabling certain cookies may affect the functioning of the Service.

13. Advertising and Remarketing

The LinkedIn Insight Tag described in Section 12 may be used for advertising retargeting, subject to your consent. You might therefore see our advertisements on LinkedIn or other websites after visiting www.reviewser.io. Your consent is collected beforehand and can be withdrawn at any time.

Important: Data collected from Google API Services (i.e., your customers’ Google Business Profile reviews) is never used for advertising or remarketing purposes. This is prohibited by the Google API Services User Data Policy.

14. Links to Third-Party Sites

Our Service may contain links to third-party websites (Google, Uber Eats, Deliveroo, etc.). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

15. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. We will notify you of significant changes by email or through a prominent notice within the Service at least 30 days before they take effect. The last updated date at the top of this page indicates when the policy was last revised.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

Reviewser
72 Avenue Emile Van Becelaere
1170 Watermael-Boitsfort, Belgium [email protected]

This Privacy Policy was prepared in accordance with GDPR (EU/Belgium), CCPA/CPRA (California), and CalOPPA requirements.