Privacy Policy

1. Introduction

Welcome to Review Insyt ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Google Business Profile review monitoring service.

2. Information We Collect

2.1 Information from Google

When you sign in with Google, we collect:

• Your Google account email address
• Your name and profile picture
• Your Google Business Profile reviews and ratings (read-only access)
• Business listing information associated with your account

2.2 Automatically Collected Information

We may automatically collect:

• IP addresses
• Browser type and version
• Device information
• Usage data (pages visited, time spent, features used)

3. How We Use Your Information

We use your information to:

• Monitor and display your reviews: We fetch and display your Google Business Profile reviews on your dashboard
• Provide analytics: We analyze your review data to show you trends, ratings, and insights
• Authenticate your account: We use your Google account information to verify your identity and provide secure access
• Improve our service: We analyze usage patterns to enhance features and fix bugs
• Communicate with you: We may send you service updates, security alerts, or support messages

4. What We Do NOT Do With Your Data

5. Google API Services

Review Insyt's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We request the business.manage scope to access your Google Business Profile data. While this scope includes permissions to edit and delete data, we only use it to read your review information. We never modify your business data.

6. Data Storage and Security

We store your data securely using industry-standard encryption:

• Database: Hosted on Supabase with encryption at rest and in transit
• API tokens: Encrypted using AES-256 encryption before storage
• Access controls: Role-based access with Row Level Security (RLS) policies
• HTTPS: All data transmission uses secure HTTPS connections

7. Data Retention

We retain your information for as long as your account is active. When you delete your account or revoke access:

• Your review data is deleted within 30 days
• Your Google access tokens are immediately revoked
• Your account information is anonymized for analytics purposes

8. Your Rights

You have the right to:

• Access: Request a copy of your data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Revoke access: Disconnect your Google account at any time through Google Account Permissions

9. Third-Party Services

We use the following third-party services:

• Google OAuth: For authentication and API access
• Supabase: For database and authentication services
• Vercel: For hosting and deployment

Each service has its own privacy policy governing their data practices.

10. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our service. The "Last updated" date at the top of this page indicates when this policy was last revised.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please visit our home page and use the contact form.