1. Introduction
ReviewHive ("we," "us," "our") provides a reputation-management platform that aggregates Google Reviews, generates AI-assisted response drafts, and delivers reputation insights to business owners. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.
By creating an account or using ReviewHive, you agree to the practices described here. If you do not agree, please do not use the service.
2. Who We Are
ReviewHive is operated by ReviewHive in the State of Florida, USA. You can reach us at:
3. Information We Collect
We collect information you give us directly, information we collect automatically, and information we receive from third-party services you connect.
3.1 Information You Provide
- Account information: Name, email address, business name, business address, phone number (optional), password (stored hashed by Firebase Authentication).
- Billing information: Payment is processed by Stripe. We do not store credit card numbers on our servers. Stripe provides us with a customer ID, subscription status, plan, and trial-end date.
- Business profile data: Google Business Profile place ID, location details, notification preferences, and any text you enter in the application (notes, edits to AI drafts, settings).
3.2 Information Collected Automatically
- Usage data: Pages visited, features used, timestamps, and approximate IP-derived information for rate limiting and security.
- Device data: Browser type, operating system, viewport size.
- Cookies / local storage: We use browser local storage to remember your dark-mode preference and to cache AI analysis results for 24 hours. We use Firebase Authentication cookies/tokens for sign-in.
3.3 Information from Third-Party Services
- Google Reviews data: Reviewer name, star rating, review text, and review timestamp — fetched via the Google Places API and (when connected) the Google Business Profile API.
- Stripe webhook events: Subscription lifecycle events (created, updated, payment succeeded, payment failed, canceled).
4. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the ReviewHive service.
- Generate AI-assisted response drafts using Anthropic's Claude API.
- Send transactional emails (welcome emails, review alerts, low-star alerts, weekly digests, billing notices) via Resend.
- Process payments and manage subscriptions via Stripe.
- Detect, prevent, and address technical issues, abuse, and fraud (rate limiting).
- Communicate with you about service changes, support requests, and updates.
- Comply with legal obligations.
5. AI-Generated Content
When you use the AI Insights or response-draft features:
- The text of your reviews and selected business context is sent to Anthropic's Claude API as part of the prompt.
- We do not use your data to train AI models.
- AI-generated drafts are suggestions only. You are responsible for reviewing and editing any draft before it is published to your Google Business Profile.
- Do not include sensitive personal information (e.g., medical, financial, or government identifiers) in any free-text fields.
6. Third-Party Services and Data Sharing
We share data only as necessary to provide the service. We do not sell your personal information.
| Service | Purpose | Data Shared |
|---|
| Firebase (Google) | Authentication, database (Firestore) | Account info, business profile, app data |
| Vercel | Hosting and serverless functions | Request data, IP for rate limiting |
| Stripe | Payment processing | Email, billing details (handled directly by Stripe) |
| Anthropic (Claude API) | AI response generation and analysis | Review text and business context per request |
| Resend | Transactional email delivery | Email address, message content |
| Google Places & Business Profile APIs | Fetching and (with OAuth) replying to reviews | Place ID, OAuth tokens (when authorized) |
We may also disclose information when required by law, to protect rights and safety, or in connection with a business transfer.
7. Google API Services
ReviewHive's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We use Google API data only to provide and improve user-facing features visible inside ReviewHive.
- We do not transfer Google API data to third parties except as necessary to provide the service or as required by law.
- We do not use Google API data for advertising purposes.
- We do not allow humans to read Google API data unless we have your specific consent, the data is necessary for security purposes, or it is required by law.
8. Data Retention
- Account data: Kept while your account is active and for up to 90 days after cancellation, unless deletion is requested sooner.
- Cached review data: Kept while your account is active.
- Billing records: Kept as required by tax and accounting laws (typically 7 years).
- Backups: Routine backups may retain data for an additional 30 days.
9. Your Rights and Choices
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you.
- Request correction or deletion of your data.
- Export your data in a portable format.
- Opt out of marketing communications (transactional emails are not optional while your account is active).
- Withdraw consent for OAuth-connected Google services from your Google Account permissions page.
To exercise any of these rights, email support@reviewhive.org. We respond within 30 days.
10. Security
We use industry-standard practices:
- Encrypted connections (HTTPS) for all data in transit.
- Firebase ID-token verification on user-facing endpoints.
- Server-side validation, rate limiting, and HTML sanitization on user-submitted content.
- Secrets stored in Vercel environment variables, never in client code.
No system is perfectly secure. If we discover a breach affecting your data, we will notify affected users in accordance with applicable law.
11. Children
ReviewHive is intended for business owners and is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact support@reviewhive.org and we will delete it.
12. International Users
ReviewHive operates from the United States. By using the service, you consent to the transfer and processing of your data in the United States. We rely on standard contractual clauses or equivalent safeguards where required.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent change. For material changes, we will email account holders at least 30 days before the change takes effect.
14. Contact Us
Questions, concerns, or requests:
This Privacy Policy is provided as a template suitable for early-stage SaaS deployment. Have it reviewed by a qualified attorney before scaling significantly or expanding to additional jurisdictions.