Your Privacy is Our Priority

1. Overview

This policy applies to:

• Our website and web application at revspout.com
• Our review management software and services
• All communications and data processed through our platform
• Any mobile applications we may offer in the future

By using RevSpout, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use our services.

2. Information We Collect

2.1 Account Information

When you create a RevSpout account, we collect:

• Personal Information: Name, email address, phone number, business name
• Business Details: Industry type, business address, Google Business Profile information
• Authentication Data: Password (encrypted), two-factor authentication settings
• Billing Information: Payment method details (processed securely by Stripe)

2.2 Customer Data

As part of our service, you provide us with your customer information:

• Contact Information: Customer names, email addresses, phone numbers
• Service Records: Service dates, service types, transaction amounts
• Communication Preferences: Preferred contact methods, opt-out status
• Interaction History: Message delivery status, review submission records

2.3 Usage and Analytics Data

• Platform Usage: Features used, time spent, click patterns
• Technical Data: IP address, browser type, device information, operating system
• Performance Metrics: Message delivery rates, review response rates, campaign performance
• Support Interactions: Help desk tickets, chat conversations, feedback

2.4 Review and Communication Content

• Outbound Messages: SMS and email content sent to your customers
• Review Data: Customer reviews, ratings, response text from Google Business
• Template Content: Custom message templates you create
• AI Enhancement Data: Testimonial improvements and suggestions

3. How We Use Information

3.1 Core Service Delivery

Automated Review Requests

• Send SMS messages through Twilio's A2P 10DLC compliant platform
• Send emails through SMTP providers (Mailgun, AWS SES, SendinBlue)
• Process message templates with personalized customer information
• Track delivery status, open rates, and click-through rates

Review Management

• Monitor Google Business Profile for new reviews
• Provide review response suggestions and management tools
• Aggregate review analytics and performance metrics
• Generate testimonials and marketing content from positive reviews

3.2 Platform Improvement

• Analytics: Analyze usage patterns to improve features and user experience
• AI Enhancement: Train our AI models to better improve testimonial content
• Performance Optimization: Monitor system performance and delivery rates
• Security: Detect and prevent fraud, abuse, and security threats

3.3 Communication

• Service Updates: Notify you about feature updates, maintenance, or service changes
• Support: Respond to your questions and provide technical assistance
• Billing: Process payments and send billing notifications
• Marketing: Send promotional content (with your consent, and you can opt-out)

3.4 Legal Compliance

• Comply with CAN-SPAM Act, TCPA, and A2P 10DLC regulations
• Maintain audit trails for compliance reporting
• Respond to legal requests and law enforcement inquiries
• Enforce our Terms of Service and prevent violations

4. Data Sharing and Disclosure

4.1 Service Providers

SMS Delivery - Twilio

• Customer phone numbers and message content for SMS delivery
• Delivery status and compliance reporting
• Covered by Twilio's privacy policy and data processing agreements

Email Delivery - SMTP Providers

• Customer email addresses and message content for email delivery
• Delivery tracking and bounce management
• May include Mailgun, AWS SES, SendinBlue, or other SMTP services

Google APIs

• Google Business Profile integration for review monitoring
• OAuth authentication data for Google services
• Review content and business information from Google My Business

Other Service Providers

• Stripe: Payment processing and billing management
• Clerk: Authentication and user management
• Cloud Providers: Data hosting and infrastructure services
• Analytics: Usage analytics and performance monitoring

4.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, subpoenas, or court orders
• Respond to government agency requests
• Protect our rights, property, or safety
• Investigate fraud or security incidents
• Enforce our Terms of Service

4.3 Business Transfers

If RevSpout is involved in a merger, acquisition, or sale of assets, your information may be transferred. We'll notify you before your personal information becomes subject to a different privacy policy.

5. Data Storage & Security

5.1 Data Storage

• Location: Data is stored on secure cloud infrastructure in the United States
• Encryption: All data is encrypted at rest using AES-256 encryption
• Transit Security: All communications use TLS 1.3 encryption
• Backup: Regular automated backups with point-in-time recovery

5.2 Security Measures

5.3 Data Retention

• Account Data: Retained while your account is active and for 90 days after cancellation
• Customer Data: Retained according to your business needs, with deletion available on request
• Communication Logs: SMS and email logs retained for 2 years for compliance purposes
• Analytics Data: Aggregated usage data may be retained indefinitely in anonymized form

6. Your Rights and Choices

6.1 Access and Control

• Access: Request copies of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your information

6.2 Communication Preferences

• Marketing: Opt-out of promotional emails using unsubscribe links
• Service Communications: Essential service notifications cannot be disabled
• SMS Opt-out: Reply "STOP" to any SMS to opt-out immediately

6.3 California Privacy Rights (CCPA)

California residents have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of personal information
• Opt-out of the sale of personal information (we don't sell personal information)
• Non-discrimination for exercising privacy rights

6.4 How to Exercise Your Rights

To exercise any of these rights, contact us at:

7. International Data Transfers

RevSpout is based in the United States. If you're accessing our services from outside the US, your information may be transferred to, stored, and processed in the United States.

We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for transfers to approved countries
• Data Processing Agreements with all service providers

8. Cookies and Tracking Technologies

8.1 Types of Cookies

• Essential Cookies: Required for basic site functionality and security
• Analytics Cookies: Help us understand how you use our platform
• Preference Cookies: Remember your settings and customizations
• Marketing Cookies: Track effectiveness of marketing campaigns (with consent)

8.2 Third-Party Tracking

We may use third-party analytics services (like Google Analytics) to understand platform usage. These services may use cookies and similar technologies. You can opt-out through your browser settings or the respective service's opt-out mechanisms.

9. Children's Privacy

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

• We'll update the "Last Updated" date at the top of this policy
• We'll notify you via email or platform notification for material changes
• The updated policy will be posted on our website
• Your continued use constitutes acceptance of the updated policy

11. Contact Information