Privacy policy

This privacy policy explains what Revuu collects, why we collect it, how Google Business Profile data is used and stored, how long we retain it, and how you can revoke access or request deletion.

Information we collect

When you use the signup or contact form, we collect the information you submit, such as your email address, name, subject, and message. If you create an account, account information includes your email address, business name, subscription plan, and settings needed to provide the service.

We may also receive basic technical information such as IP address, browser type, request time, and security logs. We use that information to operate the site, prevent abuse, diagnose errors, and protect accounts. See the terms of service for the rules governing use.

We use Google Analytics to understand which public pages are visited and how visitors move through the website. Google Analytics may process device and browser information, page URLs, referral source, approximate location, and an IP address. We use this data in aggregate to improve the website. It is not combined with Google Business Profile reviews, replies, or location data.

Google user data we access

After you choose to connect a Google account, Revuu requests access to the Google Business Profile locations you are authorized to manage. The Google user data used by Revuu is limited to location information, Google reviews, and review replies.

  • Location information includes the account and location identifiers, business name, address, verification status, and information needed to match the correct listing.
  • Reviews include the Google review identifier, reviewer display name, star rating, review text, and creation or update time.
  • Review replies include existing owner replies and replies that you approve or authorize Revuu to post.

Revuu does not use this access to publish customer reviews, edit unrelated Business Profile fields, or sell Google user data.

Why we use Google data

Location information identifies the listing you intend to manage and builds the correct direct review link. Review data lets Revuu display new reviews, notify you, prepare a reply draft, and show review history. Reply access lets Revuu publish a response after you approve it, or post eligible four- and five-star replies when you explicitly enable auto-reply.

Low ratings always require approval. Revuu does not use review data for advertising, credit decisions, or unrelated profiling. The public Google review automation process describes the customer-facing workflow.

To prepare an AI-assisted reply draft, Revuu sends the review text, star rating, reviewer display name, business name, and any optional tone or business context you provide to DeepSeek. Do not place customer contact information or confidential information in the business-context field. DeepSeek processes this information on servers in mainland China. Revuu does not send review-request customer email addresses to DeepSeek.

How Google data is stored and protected

Google location identifiers, reviews, replies, and the OAuth refresh token needed to maintain your connection are stored in encrypted managed infrastructure. Access tokens and refresh tokens are server-only and are never exposed in browser code. Access is limited to systems and authorized personnel who need it to operate or support Revuu.

Data is protected in transit with HTTPS and at rest using the storage provider's encryption. We use access controls, logging, least-privilege credentials, and periodic security review. No method of storage is risk-free, but we work to reduce unauthorized access, disclosure, alteration, and loss.

Retention and deletion

Contact and waitlist messages are retained for up to 24 months unless you ask us to delete them sooner. Product account and Google Business Profile data are retained while your account is active. After cancellation, product data remains available in read-only form for at least 90 days so you can view and export it or restore service. We do not begin routine account cleanup during that recovery period. A verified deletion request is handled separately; we delete account data, stored Google reviews and replies, and OAuth tokens within 30 days unless legal, fraud-prevention, billing, or security obligations require longer retention.

Encrypted backups may retain deleted data for up to 90 additional days before automatic expiration. Data in backups is not restored for ordinary business use.

How to revoke Google access

You can disconnect Google inside Revuu settings. You can also revoke Revuu directly from your Google Account by opening the third-party connections page, selecting Revuu, and removing access. Revocation stops future access. It does not automatically delete data already stored by Revuu, so submit a deletion request if you want that data removed.

To request access, correction, export, or deletion, use the contact form or email hello@getrevuu.com from the account email. We may verify your identity before acting. We aim to answer within 30 days.

Sub-processors

Revuu uses the following sub-processors to provide the service. Each receives only the information needed for its role:

  • DeepSeek receives Google review content, rating, reviewer display name, business name, and optional AI tone and business context to draft replies. Processing occurs on servers in mainland China.
  • Resend receives recipient email addresses, business and customer names, review-request content, and delivery metadata to send account, review-request, reminder, alert, and report emails.
  • Razorpay receives account, plan, subscription, billing, and payment information needed to create and manage paid subscriptions. Revuu does not store complete payment-card data.
  • Neon stores Revuu account, business, customer, review, reply, subscription, and operational data in managed PostgreSQL infrastructure.
  • Google receives sign-in and OAuth requests, Places searches, review-link identifiers, approved review replies, and Business Profile API requests needed to connect and operate the listing you select.

We may replace or add a sub-processor when needed to operate Revuu. We will update this page when a change materially affects how personal or Google user data is processed. We do not sell personal information.

We may update this policy when the product or law changes. Material changes will be posted here with a new effective date. Effective date: August 9, 2026. For pricing and product questions, review the Revuu plan information or contact us.

Have a privacy or deletion question?

Send the request from your account email so we can verify and help you.

Contact Revuu