Privacy Policy

1. Introduction

Evolve Review ("Evolve Review," "Company," "we," "our," or "us") respects your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our review management platform and related services (the "Services").

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

Account Information:

When you create an account, we collect information such as your name, email address, business name, phone number, password, and Google review URL.

Customer Data:

When you use the platform, you may upload or otherwise provide information about your customers (for example, names, email addresses, and phone numbers) so we can send review requests on your behalf.

Payment Information:

Payment details (such as credit card information) are collected and processed securely by our payment processor, Stripe. We do not store complete payment card numbers on our servers.

Communications:

We collect information you provide when you contact our support team or communicate with us in any way (such as email, chat, or in-app messages).

2.2 Automatically Collected Information

Usage Data:

We automatically collect information about how you interact with our Services, such as features used, pages visited, links clicked, and actions taken.

Device Information:

We may collect information such as IP address, browser type, operating system, device type, and device identifiers.

Cookies and Similar Technologies:

We use cookies and similar tracking technologies to operate and improve the Services, remember your preferences, and analyze usage. For more information, see our Cookie Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, maintain, and improve the Services
• To create and manage your account
• To send review request emails (and, when enabled, SMS messages) to your customers on your behalf
• To process payments, manage billing, and administer your subscription
• To send you service-related notifications, updates, and administrative messages
• To provide customer support and respond to inquiries
• To analyze usage patterns and improve or develop features
• To detect, prevent, and address technical issues, fraud, and security threats
• To comply with legal and regulatory obligations and to enforce our Terms of Service

Your responsibility for contacting your customers:

When you upload customer data and use Evolve Review to send emails or SMS messages to your customers, you are responsible for ensuring you have a lawful basis and any required consent to contact them under applicable laws (for example, email and SMS marketing or anti-spam regulations). We provide tools to include clear unsubscribe or opt-out instructions in messages.

4. Third-Party Services

We use trusted third-party service providers to help operate the Services. These may include:

• Clerk: User authentication and account management
• Stripe: Payment processing and subscription management
• Resend: Email delivery service for review requests and notifications
• Twilio: SMS delivery service for review requests (when enabled)
• Supabase: Database hosting and related infrastructure
• Vercel: Application hosting and deployment
• OpenAI: AI-powered response generation and analysis of customer feedback

These providers have access to your information only to perform tasks on our behalf and are obligated to protect your data in accordance with their own privacy policies and applicable law.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• With Your Consent: When you explicitly authorize us to share information.
• Service Providers: With third-party vendors, service providers, and contractors who perform services for us or on our behalf, as described above.
• Legal Requirements: When required to do so by law, regulation, subpoena, court order, or governmental request.
• Business Transfers: In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
• Protection of Rights: When we believe it is necessary to protect the rights, property, or safety of Evolve Review, our users, or the public.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS
• Secure authentication and authorization systems
• Regular security updates and monitoring
• Limited access to personal information based on role and need-to-know

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

When you close your account, we will delete or anonymize your account data and customer data within 30 days, except where we are required or permitted to retain it for legal, regulatory, accounting, fraud prevention, or other legitimate business purposes. Data that remains in backups will be deleted in the ordinary course of our backup lifecycle.

8. Your Rights and Choices

Depending on your location, you may have some or all of the following rights in relation to your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to certain exceptions.
• Data Portability: Request a copy of your data in a structured, commonly used, and machine-readable format.
• Restriction: Request restriction of our processing of your personal information in certain circumstances.
• Objection: Object to certain types of processing (for example, processing based on legitimate interests).
• Opt-Out of Marketing: You can unsubscribe from marketing communications at any time by following the unsubscribe link in our emails or contacting us. (Note: customer review request messages you send through the Services are part of the core service, not our own marketing.)

To exercise any of these rights, please contact us at support@evolvereview.com. We may need to verify your identity before fulfilling your request.

9. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and similar laws grant you additional rights.

For our users in these regions:

• We generally act as a data controller with respect to your account and billing information.
• We act as a data processor with respect to customer data you upload to the Services, processing such data on your instructions in order to send review requests and provide the Services.

In addition to the rights listed above, you have the right to:

• Lodge a complaint with a supervisory authority in your country of residence, place of work, or where an alleged infringement has occurred.
• Withdraw your consent at any time where processing is based on consent (without affecting the lawfulness of processing prior to withdrawal).

Our legal bases for processing your personal information include: performance of a contract (providing the Services to you), compliance with legal obligations, and our legitimate business interests (such as improving the Services and preventing fraud).

10. CCPA Compliance (California Users)

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) and related laws, including:

• The right to know what personal information we collect, use, disclose, and, if applicable, sell.
• The right to request deletion of your personal information, subject to certain exceptions.
• The right to opt out of any "sale" of your personal information (we do not sell personal information as defined by the CCPA).
• The right to non-discrimination for exercising your CCPA rights.

California residents can exercise these rights by contacting us at support@evolvereview.com.

11. Children's Privacy

Our Services are not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe we might have any information from or about a child, please contact us.

12. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that are different from the laws of your country.

Where required by applicable law, we implement appropriate safeguards (such as Standard Contractual Clauses or equivalent mechanisms) to ensure that your personal information remains protected in accordance with this Privacy Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. If we make material changes, we may provide additional notice (such as by email or through the Services).

Your continued use of the Services after the posting of the updated Privacy Policy constitutes your acceptance of the changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: support@evolvereview.com

We will respond to your inquiry within 30 days, or sooner where required by applicable law.