Privacy policy

If you have a ReviewBrush account

We collect:

• Your email and name, for signing in. We use magic links, so we never see or store a password.
• Your business listing details from Google: name, address, category, rating, review count, and the recent reviews Google makes public. We refresh this daily to draw your growth chart.
• Payment details go to Stripe, our payment processor. We store your subscription status and a Stripe customer reference. We never see or store your card number.
• What you do in the product (a request sent, a reply drafted), so the dashboard works and we can see what to improve.

The customer lists you upload

When you add customers, one at a time or by CSV, those names, emails, and phone numbers stay yours. We use them for exactly one thing: sending the review requests and the one follow-up you asked us to send. We never sell them, never rent them, never use them to market anything of ours, and never contact your customers for any other reason. Delete a contact or close your account and they go with it.

If a business sent you a review request

You got an email from a business you hired, sent through ReviewBrush. That business added your contact details; we did not find them anywhere else. Every request email has an unsubscribe link that works in one click, and once you unsubscribe we will not email you again for any business using ReviewBrush. We store your reply status and nothing more about you.

The free grade tool

The grader looks up public information about a business through the Google Places API: review count, rating, and recent reviews anyone can see on Google Maps. We log which businesses were graded and, if you ask for the report by email, the email you gave us. We use that log to improve the tool and to reach out to graded businesses about ReviewBrush, at most a couple of times, with a working unsubscribe.

AI drafting

Reply drafts and request messages are written with Claude, an AI model from Anthropic. To draft a reply we send Anthropic the review text, your business name and category, and your chosen tone. Anthropic processes it to generate the draft and does not use our API data to train its models.

Cookies and analytics

• A session cookie keeps you signed in. It exists only for signed-in users and is essential.
• Google Analytics sets cookies to count visits and show us which pages people find useful. Blocking these does not break the site.
• Vercel Analytics counts page views without cookies and without identifying you.

Who else touches your data

Nobody buys it, everybody below just runs a piece of the service:

• Vercel hosts the site. Neon hosts the database.
• Stripe handles payments.
• Resend delivers email.
• Google provides business listing data, review links, and analytics.
• Anthropic generates AI drafts.

Some of these companies process data in the United States. We share the minimum each one needs to do its job.

How long we keep things

As long as your account is open. Close your account or ask us to delete it, and we remove your data within 30 days, except the minimal records we must keep for tax and billing law. Unsubscribe records are kept so the unsubscribe keeps working.

Your rights

Ask us any time to see the data we hold about you, correct it, or delete it. Email hello@reviewbrush.com and you will hear back within a few days. We follow Canadian privacy law, including PIPEDA and Canada's anti-spam law (CASL). If we ever change this policy in a way that matters, we will note the date at the top and email account holders.