Privacy Policy

Last updated: 10/22/2026

ReviewHub (“ReviewHub,” “we,” “us”) helps businesses manage their Google reviews and Google Ads from one place. This policy explains what information we collect when you use reviewhub.biz and our app, how we use it, and the choices you have. Questions? Email info@reviewhub.biz.

1. Information we collect

Account information: your name, email address and password (stored by our sign-in provider, never in plain text), your business name, and the team members you invite, with their roles and location access.
Google account data: when you connect your Google account, we receive your basic profile (name, email address and profile photo) and the OAuth tokens needed to act on the permissions you grant.
Google Business Profile data: your locations, business details and reviews, synced regularly so your inbox stays current.
Review content and reviewers' public information: review text, star ratings and dates, the public name and photo a reviewer shows on Google, and the replies you or our AI draft and post.
Google Ads data: if you connect Google Ads, your Ads account ID and name, campaigns, ads, keywords, budgets, bids, search terms, and performance and conversion (booking) data.
Your customers' contact details: names and email addresses you enter to send review-request emails. If you use the Google Ads “exclude existing customers” feature, the phone numbers you import are converted to one-way SHA-256 hashes on our servers; only the hashes are stored and uploaded to Google Ads Customer Match, and the original numbers are not kept.
Billing information: your plan and billing history. Card details are entered into and processed by our payment processor, Square; we never see or store full card numbers.
Technical data: server logs (such as IP address, browser and the pages requested) used for security and troubleshooting, and browser storage (cookies, local storage and IndexedDB) used to keep you signed in, remember your preferences and load your data quickly. We do not use advertising or third-party analytics cookies.

2. What we access in your Google account

We request only the Google permissions our features need:

Google Business Profile (business.manage): read your locations and reviews, post and edit your replies, and update business details you change in ReviewHub.
Google Ads (adwords): only if you connect Google Ads, to create and manage campaigns, adjust bids and budgets, and read performance and booking data.
Basic profile (userinfo.email, userinfo.profile): to show which Google account is connected.

ReviewHub never posts a reply or changes your Google account without an action you've set up or approved, such as an auto-reply rule you turned on.

3. How we use information

To provide the service: syncing reviews, drafting and posting replies in your business's voice (automatically by star rating, or after your approval), checking low ratings against Google's review rules and drafting removal requests, and showing all your locations in one inbox.
To send email alerts, your daily digest and the review-request emails you set up.
To create insights and PDF reports.
To build and manage Google Ads search campaigns written from your reviews, optimize bids and track bookings, only when you turn this feature on.
To secure accounts, prevent abuse, provide support and improve the product.
To meet legal obligations.

4. We do not sell your data

We do not sell or rent personal information, and we do not use Google user data to serve advertising to you or to anyone else.

We share data only with service providers that help us run ReviewHub, under terms that limit their use of it:

Google APIs, including the Google Business Profile APIs and the Google Ads API, to read and act on your accounts as you direct.
Google Cloud and Firebase, which host the app and store its data.
Google Gemini API, which drafts reply text, ad text and review checks. Review content is sent only to return those results and is not used to train Google's models.
An email delivery provider that sends alerts, digests and review-request emails.
Square, which processes subscription payments.

We may also disclose information if required by law, to protect rights and safety, or as part of a merger or sale of the business, in which case we will notify you.

6. Google API Services: Limited Use

ReviewHub's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, for data received from Google APIs:

We use it only to provide and improve the user-facing features of ReviewHub described above.
We transfer it only as needed to provide those features, for security, to comply with law, or as part of a merger or sale with notice to you.
We do not use it for advertising, and we do not sell it.
People at ReviewHub do not read it unless you give us permission (for example, in a support request), it is needed for security or to comply with law, or it is aggregated and anonymized for internal operations.

7. Security

Data is encrypted in transit (HTTPS) and at rest, including stored OAuth tokens. Access to production data is limited to the people who need it to run the service. No system is perfectly secure, but we work to protect your information and will notify you of a breach that affects your data as the law requires.

8. Where data is stored

ReviewHub runs on Google Cloud in the United States. If you use ReviewHub from outside the U.S., your information is transferred to and processed in the U.S.

9. Data retention and deletion

We keep your data while your account is active. To close your account and delete your data, email info@reviewhub.biz; we delete it, including stored Google tokens and synced data, within 30 days, except limited records we must keep for legal, tax or security reasons. When you disconnect your Google account in Settings, we revoke our access and delete the stored tokens right away. Backups are purged on a rolling basis.

10. Your rights and choices

Access, correction and deletion: email info@reviewhub.biz and we'll respond within 30 days. You can also edit your account details in the app.
Revoke Google access: disconnect in Settings → General, or at any time at myaccount.google.com/permissions. ReviewHub stops syncing as soon as access is revoked.
Emails: turn alerts, the daily digest and dispute emails on or off in Settings. Customers who receive review-request emails can unsubscribe with the link in each email.
Depending on where you live (for example, the EU, the UK or California), you may have additional rights. Contact us to exercise them.

11. Children

ReviewHub is a business tool and is not directed to children under 13 (or under 16 where that applies). We do not knowingly collect their information.

12. Changes to this policy

We may update this policy. We'll change the “Last updated” date and, for significant changes, notify you by email or in the app.

13. Contact

Privacy questions or requests: info@reviewhub.biz