Privacy Policy

Account data. Your email address and password hash, held so you can sign in. We never see your password in plain text.

Google Business Profile data. When you connect your Google account, we request the https://www.googleapis.com/auth/business.manage scope. With it we read the business locations you own or manage and the reviews on them — reviewer display name, star rating, review text, and timestamps — and we post replies you have approved.

Content we generate. Draft replies written for your reviews, their approval status, and any edits you make.

Google Business Profile data is used for one purpose: to show you your reviews, draft replies to them, and publish the replies you approve.

No reply is ever published without your explicit approval. There is no setting that changes this.

We do not sell your data. We do not use it for advertising, and we do not use it to build advertising profiles. We do not use your Google user data to train generalized artificial intelligence or machine learning models.

Reviewer Wizard’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data is held in a dedicated database instance used only by this Service. Access is enforced per-account at the database layer, so one customer cannot read another's reviews, replies, or credentials.

Google OAuth refresh tokens are encrypted by the application before they are written, and the table holding them is not readable by any client-facing role — only by the server process that refreshes them.

We share Google user data with no one. We rely on infrastructure providers for hosting, database, and email delivery, which process data on our behalf under their own terms and only to run the Service.

We disclose data if legally compelled, and will tell you unless we are prohibited from doing so.

You can disconnect your Google account from inside the Service at any time. Doing so deletes the stored credentials immediately and stops all further access to your Business Profile.

You can also revoke access directly at myaccount.google.com/permissions, which takes effect regardless of anything we do.

To delete your account and everything attached to it, email support@reviewerwizard.com. We remove it within 30 days, backups included.

If we change this policy materially, we will email you before it takes effect. The date at the top always reflects the current version.

Questions about this policy: support@reviewerwizard.com