Privacy Policy
ReviewVoice writes replies to the Google reviews your business receives. To do that we need access to your Google Business Profile. This page says exactly what we take, how long we hold it, and how to make us delete it.
The short version
We keep review content from Google for no more than 30 days, and we never aggregate or analyse it. We do not sell your data, we do not use it to train models, and we run no advertising or analytics trackers. You can disconnect Google at any time and have everything deleted by sending us one email.
01 Who we are
ReviewVoice is the service described at review-voice.com. It is operated by EastLight Labs (이스트라이트랩스), a company registered in the Republic of Korea, which is the data controller for the information described below. For anything in this policy — questions, data requests, complaints — write to [email protected].
The service is currently in private testing. It is not open to the public, no payments are being taken, and the only accounts that exist are ones we set up ourselves.
02 What we collect
| What | When | Why |
|---|---|---|
| Your email address | When you join the waiting list | To tell you when a spot opens. We also record which form you used and the time. |
| Google account email | When you connect Google Business Profile | To show you which account is connected. |
| Google access tokens | When you connect Google Business Profile | To read your reviews and post the replies you approve. Nothing else. |
| Which business you picked | When you connect Google Business Profile | Google's identifiers for the account and location you selected. |
| Review content from Google | Continuously, while connected | Reviewer name, star rating, text, photos and date — used to draft a reply. Deleted within 30 days. |
| Replies we wrote | Every time we draft or post | Our own record of what we did on your behalf. This is our text, not Google's. |
| Your settings | When you change them | Reply mode, timing, tone dials, and any contact detail you choose to include in replies. |
| Consent records | When you turn automatic posting on or off | The exact wording you agreed to, its version, the time, and your browser's user agent. |
03 Google user data
When you connect your Google Business Profile, we ask Google for one permission:
business.manage. That lets us read the reviews for the location you picked and post
replies to them. We also read your account email so we can show you what is connected.
ReviewVoice's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we do not:
- transfer your Google data to anyone else, except where you ask us to or the law requires it;
- use your Google data for advertising, or to build profiles for advertising;
- use your Google data to train, retrain or improve any machine learning model;
- let a human read your Google data, unless you ask us to look at something, we need to for a security investigation, or the law requires it.
The 30-day rule
Google's Business Profile API terms say review content may only be stored temporarily, for at most 30 calendar days, and may not be manipulated or aggregated. We follow this. Each review we fetch is stamped with an expiry date, and the content is erased on or before that date. What survives is our own record: the reply we wrote, when we wrote it, and whether it posted.
This is why ReviewVoice does not offer long-run review analytics from Google data. If we ever add historical trends, it will be built on separately licensed data, and we will say so here first.
04 What we never do
- We do not write, buy, solicit or filter reviews. We only reply to reviews your customers left on their own.
- We do not sell, rent or trade your data.
- We do not run advertising, analytics or tracking scripts on this site.
- We do not post a reply to a review below four stars without you approving it first.
05 Where it is kept, and who can see it
Everything is stored on Cloudflare's platform (Workers and D1), which processes and hosts the data on our behalf. Access is limited to the people running ReviewVoice.
This site loads fonts from Google Fonts and an icon stylesheet from unpkg.com. Those two providers will see your IP address when the page loads, as they would on any site that uses them. We do not send them anything else.
06 How long we keep things
| Data | Kept for |
|---|---|
| Review content from Google | Up to 30 days, then erased |
| Google access tokens | Until you disconnect, or you ask us to delete |
| Replies we wrote and posting logs | Kept as our record of what we did |
| Your settings and consent records | While your account is open |
| Waiting-list email | Until you ask us to remove it |
07 Your controls
Disconnect Google yourself
Go to myaccount.google.com/permissions, find ReviewVoice, and remove access. Our tokens stop working immediately.
Have everything deleted
Email [email protected] and ask. We will delete your account, tokens, settings and any review content still inside the 30-day window, and confirm when it is done. We aim to do this within 30 days.
If you are in the EU, the UK or a similar jurisdiction
You have the right to see the data we hold about you, correct it, have it deleted, take a copy elsewhere, and object to how we use it. Use the same address above. You also have the right to complain to your local data protection authority.
08 Children
ReviewVoice is a tool for business owners. It is not intended for anyone under 16, and we do not knowingly collect their data.
09 Changes to this policy
If we change how we handle data, we will update this page and change the date at the top. For anything material — a new category of data, a new recipient, a longer retention period — we will email connected accounts before it takes effect.