Privacy Policy

Last updated 2026-07-11

This policy explains how Reviowl (sole proprietorship) ("we") handles personal data for the Reviowl service. We act as a processor for the customer contact data our business users upload, and as a controller for their own account data.

1. Data we process

Account data of business users (name, email, business details, billing identifiers). Contact data uploaded by business users (their customers' names, phone numbers, emails, visit dates) — used only to send that business's messages.

2. How we use it

To provide the Service: sending review requests and win-back messages, enforcing opt-outs, billing, and support. We do not sell personal data. AI providers process message text solely to generate that message and do not train on it.

3. Opt-outs & suppression

Every message includes a one-click unsubscribe (email) or STOP keyword (SMS). Opt-outs are recorded on a global suppression list and honored before every send.

4. Sub-processors

We use Supabase (database/auth), Stripe (payments), Twilio (SMS), our email provider, Google (reviews/discovery), and Anthropic (message generation). Each processes data only as needed to run the Service.

5. Retention & your rights

We keep data while your account is active. Business users can delete contacts at any time, and may request export or deletion of their account data. Data subjects can exercise GDPR rights (access, erasure, objection) by contacting the business that messaged them, or us at the address below.

6. Contact

Privacy questions: support@reviowl.com. Reviowl (sole proprietorship), [your registered business address], the Netherlands.