Legal
Privacy Policy
Last updated: August 3, 2026
This Privacy Policy explains how Review Garden ("we," "us," or "our") collects, uses, and shares information when you use our website, admin tools, and customer-facing landing pages (the "Service").
By using the Service, you acknowledge this Policy. Related terms of use are in our Terms of Agreement.
1. Who this Policy covers
We process information about:
- Business users — people who create accounts and manage businesses in Review Garden
- End customers — people who open a business landing page, leave a Google review via our flow, or submit private feedback
- Website visitors — people who browse marketing pages or contact us
2. Information we collect
Account information. When you sign up, we collect email address and authentication details (including if you sign in with Google). We may also store your name if provided by your identity provider.
Business configuration. Company name, slug/URL, Google review link, notification email, logos, background images, and related settings you enter in admin.
Private feedback. Messages customers submit through the "Not what I expected" flow, plus optional name, contact details, reply preference, and uploaded photos.
Usage signals. Counts of Google review redirects and similar operational metrics needed to run admin activity views.
Contact form data. Name, email, optional business name, and message when you use our contact page.
Technical data. Standard server logs such as IP address, browser type, and request timestamps may be processed by our hosting and infrastructure providers.
3. How we use information
- Provide, maintain, and secure the Service
- Authenticate users and manage sessions
- Deliver private feedback to the business notification email you configure
- Show admin activity (review clicks and feedback history)
- Respond to contact requests and support questions
- Improve the product and prevent abuse
- Comply with legal obligations
4. How we share information
We share information only as needed to operate the Service:
- Service providers — such as Firebase (authentication, database, storage), hosting providers, and email delivery (for example Resend) when configured
- Business customers — private feedback and related details are delivered to the business that owns the landing page
- Legal requirements — if required by law, regulation, or valid legal process
We do not sell personal information. When a customer continues to Google to leave a review, Google's own privacy policy applies to that experience.
5. Roles for customer feedback
For private feedback submitted to a business landing page, Review Garden acts as a service provider / processor on behalf of that business. The business is responsible for how it uses customer messages and for providing any notices required by law to its own customers.
6. Cookies and sessions
We use an httpOnly session cookie after sign-in so you can access admin securely. We do not use advertising cookies on marketing pages as part of the core Service. Your browser may send standard technical information to our hosts.
7. Data retention
We retain account and business configuration data while your account is active. Private feedback is retained until deleted by the business in admin, or longer if needed for security, dispute, or legal reasons. Contact messages are retained as needed to respond and operate the Service.
8. Security
We use industry-standard measures appropriate to our size and the nature of the Service, including authenticated admin access and infrastructure providers with security controls. No method of transmission or storage is completely secure.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us and we will take appropriate steps.
10. Your choices and rights
Business users can update account and business settings in admin, and delete feedback records they control. Depending on where you live, you may have rights to access, correct, delete, or restrict certain personal information. To make a request, contact us using the details below. We may need to verify your identity before responding.
11. International users
We may process information in the United States and other countries where our providers operate. If you access the Service from outside the U.S., you understand that information may be transferred to and processed in those locations.
12. Changes to this Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the Service after an update means you acknowledge the revised Policy.
13. Contact
For privacy questions or requests, email hello@reviewgarden.app or use our contact page.
This Policy is a general template for the Review Garden product and is not legal advice. Have counsel review it before relying on it in production.
Questions? Contact us.