IQReview ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at iqreview.co and our AI-powered review management service (the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.
1. Information We Collect
1.1 Information You Provide Directly
- Account registration: When you sign up via Google OAuth, we receive your name, email address, and Google profile information.
- Business information: Business name, location details, and brand voice preferences you configure within the Service.
- Employee data: Names and identifiers for employees you add for performance tracking purposes.
- Billing information: Payment details are processed by Stripe. We do not store your full credit card number.
1.2 Information Collected via Google APIs
When you connect your Google Business Profile, we access:
- Your Google Business Profile locations and associated data
- Customer reviews posted to your business listing
- Business metadata (name, address, category, hours)
We access this data solely to provide the Service — generating AI reply suggestions, surfacing analytics, and enabling review management. We do not use Google user data to serve advertising or share it with third parties for advertising purposes.
1.3 Information Collected Automatically
- Usage data: Pages visited, features used, actions taken within the dashboard.
- Log data: IP address, browser type, device type, access times, referring URLs.
- Cookies: Session cookies for authentication and preference storage. We do not use tracking cookies for advertising.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Generate AI-powered review reply suggestions based on your brand voice
- Display employee performance analytics and review attribution
- Process subscription payments via Stripe
- Send transactional emails (account alerts, subscription receipts)
- Respond to support requests
- Improve Service quality through aggregate usage analysis
- Comply with legal obligations
We do not sell your personal information. We do not use your Google Business Profile data for any purpose other than providing the features you requested.
3. Data Storage and Security
Your data is stored on Neon PostgreSQL infrastructure hosted in the United States. We implement the following security measures:
- Google OAuth tokens are encrypted at rest using AES-256-CBC before storage
- All data in transit is encrypted via HTTPS/TLS
- Authentication uses industry-standard JSON Web Tokens (JWT)
- Database access is restricted to application-level parameterized queries
No system is 100% secure. We encourage you to use a strong, unique password and to log out of shared devices after use.
4. Third-Party Services
We share your information with the following categories of third parties solely to operate the Service:
- Google LLC: OAuth authentication and Google Business Profile API access. Governed by Google's Privacy Policy.
- Anthropic / OpenAI: AI model providers used to generate review reply suggestions. Reply text and anonymized context are transmitted to generate suggestions. These providers do not receive your personal account information.
- Stripe, Inc.: Payment processing. Stripe's use of your payment information is governed by Stripe's Privacy Policy.
- Render (hosting): Application hosting infrastructure.
- Neon (database): Cloud-hosted PostgreSQL database provider.
We do not sell, rent, or share your personal data with any other third parties for their independent use.
5. Google API Limited Use Disclosure
IQReview's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only use Google user data to provide and improve the features that you have requested.
- We do not use Google user data to develop, improve, or train generalized AI or ML models.
- We do not transfer Google user data to third parties for advertising purposes.
- We do not allow humans to read your Google user data unless you explicitly grant permission, or it is necessary for security or legal purposes.
6. Data Retention
We retain your account data for as long as your account is active or as needed to provide the Service. If you delete your account:
- Your personal information and connected Google tokens are deleted within 30 days.
- Review data imported from your Google Business Profile is deleted with your account.
- Aggregate, anonymized analytics data may be retained for product improvement purposes.
- Billing records may be retained as required by law (typically 7 years).
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data ("right to be forgotten").
- Portability: Request your data in a portable format.
- Objection: Object to processing based on our legitimate interests.
- Restriction: Request that we restrict processing in certain circumstances.
To exercise any of these rights, contact us at voicereply@polsia.app. We will respond within 30 days.
If you are located in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.
8. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- The right to know what personal information we collect and how we use it.
- The right to request deletion of your personal information.
- The right to opt-out of the sale of personal information. We do not sell personal information.
- The right to non-discrimination for exercising your privacy rights.
To submit a CCPA request, email voicereply@polsia.app.
9. Children's Privacy
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, contact us immediately at voicereply@polsia.app.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised "Last updated" date and, where appropriate, by email. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us:
- Email: voicereply@polsia.app
- Service: IQReview — iqreview.co