1. Who We Are

ReviewFlow (“we,” “us,” or “our”) is a software platform that helps local businesses collect more Google reviews by sending SMS messages to their customers. We are operated by CDG Group LLC, a United States company. You can contact us at hello@reviewflownow.com.

2. Information We Collect

Account information

When you create a ReviewFlow account, we collect your name, email address, business name, location name, and Google review link. This information is used to operate your account and configure your review portal.

Payment information

Payments are processed by Stripe. We do not store your credit card number, CVV, or full payment details on our servers. We receive and store a Stripe customer ID and subscription status to manage your account.

Customer recipient data

When you use ReviewFlow to send review requests, you submit the first name and mobile phone number of your customer or patient. We use this information solely to deliver the SMS message on your behalf. We do not sell, rent, or share this data with third parties for marketing purposes. Recipient data is retained for your review history and may be deleted upon request.

Usage data

We collect standard server logs and usage information, such as pages visited, features used, and the number of review requests sent. This helps us improve the product and diagnose issues.

3. How We Use Your Information

✓ To provide and operate the ReviewFlow service
✓ To send SMS review request messages on behalf of your business
✓ To process payments and manage your subscription
✓ To send you transactional emails (account setup, billing, important notices)
✓ To improve our product and fix bugs
✓ To comply with legal obligations

We do not sell your personal information to third parties. We do not use recipient phone numbers for any purpose other than delivering the specific review request you initiate.

4. Third-Party Services

ReviewFlow uses the following third-party services to operate. Each has its own privacy policy:

Twilio

SMS delivery — recipient phone numbers are transmitted to Twilio to send messages

Clerk

User authentication and account management

Stripe

Payment processing and subscription billing

Resend

Transactional email delivery

Neon

Database hosting (your account and usage data)

Vercel

Application hosting and infrastructure

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription and request deletion, we will delete your account data within 30 days, except where we are required to retain it for legal or financial compliance purposes (such as billing records). SMS delivery logs are retained for up to 12 months.

6. Your Rights

Depending on where you are located, you may have the following rights:

✓ Access: Request a copy of the personal data we hold about you
✓ Correction: Ask us to correct inaccurate information
✓ Deletion: Request that we delete your personal data
✓ Portability: Request your data in a machine-readable format

California residents (CCPA): You have the right to know what personal information we collect, to opt out of the sale of your information (we do not sell it), and to request deletion. To exercise these rights, email us at hello@reviewflownow.com.

7. Security

We use industry-standard security practices including encrypted connections (HTTPS/TLS), secure authentication via Clerk, and encrypted payment processing via Stripe. No system is completely secure. If you discover a security vulnerability, please contact us at hello@reviewflownow.com.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Continued use of ReviewFlow after changes take effect constitutes acceptance of the updated policy.

9. Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact us at: hello@reviewflownow.com