Privacy Policy

1. Information We Collect

Personal Information

When you create an account, book a demo, or use our services, we may collect personal information that you voluntarily provide, including:

Full name
Email address
Phone number
Business name and industry
Billing and payment information (processed securely through Stripe)

Customer Data

Our clients upload customer contact information (such as names, phone numbers, and email addresses) to use our reactivation campaign features. We process this data on behalf of our clients and treat it as confidential.

Usage Data

We automatically collect certain information when you access our services, including your IP address, browser type, operating system, referring URLs, pages viewed, and the dates and times of your visits. This data helps us understand how our services are used and how we can improve them.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver relevant content. You can control cookie preferences through your browser settings. Essential cookies required for the operation of our services cannot be disabled.

2. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery

Creating and managing your account
Monitoring your Google Business Profile reviews
Delivering reactivation campaigns via SMS and email on your behalf
Providing dashboards, analytics, and reporting
Processing payments and managing subscriptions

AI-Powered Features

Our platform uses artificial intelligence to provide key features, including:

Review Response Drafting: We send review text and business context to our AI provider to generate professional, personalized draft responses. You always review and approve responses before they are published.
Campaign Message Generation: We use AI to create personalized win-back messages for reactivation campaigns based on your business type, customer history, and campaign parameters. You review and approve all messages before they are sent.

Communications

We may use your email address to send you service-related notices, updates about your account, weekly performance reports, and information about new features or changes to our services. You can opt out of non-essential communications at any time.

3. Third-Party Services

We rely on trusted third-party service providers to operate our platform. Each provider receives only the minimum data necessary to perform its function:

Google Places API

Used for review monitoring. We access your Google Business Profile to detect new reviews and retrieve review content, ratings, and reviewer names so we can generate AI-powered response drafts. Subject to Google's Privacy Policy.

Google API Services User Data Policy: ReviveLocal's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google API data for the purposes described in this Privacy Policy (monitoring and displaying reviews, generating AI response drafts). We do not use Google API data for advertising, and we do not sell Google API data to third parties.

OpenAI

Used for AI text generation. Review content and business context are sent to OpenAI to draft review responses and campaign messages. We do not send personally identifiable customer information to OpenAI unless required for message personalization (e.g., first names in campaign messages). Subject to OpenAI's Privacy Policy.

Twilio

Used for SMS delivery. Phone numbers and message content are transmitted to Twilio to deliver text messages for reactivation campaigns. Subject to Twilio's Privacy Policy.

Resend

Used for email delivery. Email addresses and message content are transmitted to Resend to deliver emails for reactivation campaigns and transactional notifications. Subject to Resend's Privacy Policy.

Stripe

Used for payment processing. Your billing information (name, payment method, and billing address) is transmitted to Stripe to process subscription payments. We do not store your full credit card number on our servers. Subject to Stripe's Privacy Policy.

Supabase

Used for authentication and database services. Your account credentials, profile information, and application data are stored in Supabase's secure cloud infrastructure. Subject to Supabase's Privacy Policy.

4. Data Sharing

We do not sell, rent, or trade your personal information or your customers' data to third parties for their marketing purposes.

We share data only with the third-party service providers listed in Section 3 above, and only to the extent necessary to operate our platform and deliver our services to you. Each provider is contractually obligated to protect the data they process on our behalf.

We may also disclose information if required to do so by law, in response to a valid legal process (such as a subpoena or court order), to protect the rights, property, or safety of ReviveLocal, our users, or the public, or in connection with a merger, acquisition, or sale of all or a portion of our assets.

5. SMS/Email Marketing

Our platform enables our clients (local business owners) to send reactivation messages to their past customers via SMS and email. The following applies to these communications:

Message Recipients

Messages are sent to the past customers of our clients, not to arbitrary third parties. Our clients represent that they have an existing business relationship with these recipients and have obtained any consent required under applicable law.

Opt-Out Mechanisms

Every SMS message includes a clear opt-out instruction (e.g., "Reply STOP to unsubscribe"). Every email includes an unsubscribe link. When a recipient opts out, we immediately honor the request and suppress their contact information from all future campaigns. Opt-out requests are processed without delay.

TCPA Compliance

We are committed to compliance with the Telephone Consumer Protection Act (TCPA). Our platform sends messages only to recipients with whom our clients have an existing business relationship. All messages are sent from registered A2P 10DLC phone numbers, and we maintain records of opt-out requests.

CAN-SPAM Compliance

All commercial emails sent through our platform comply with the CAN-SPAM Act. Emails include accurate sender identification, a clear subject line, a valid physical mailing address, and a conspicuous unsubscribe mechanism. Unsubscribe requests are honored within 10 business days.

6. Data Retention

We retain your personal information and account data for as long as your account is active or as needed to provide you with our services. Specifically:

Account data: Retained for the duration of your active subscription and for up to 12 months after account closure, in case you choose to reactivate.
Customer contact data: Retained for as long as your account is active. Upon account closure or deletion request, customer data is permanently deleted within 30 days.
Campaign and analytics data: Retained for up to 24 months to provide historical reporting and performance insights.
Opt-out records: Retained indefinitely to ensure we continue to honor unsubscribe requests.
Billing records: Retained as required by applicable tax and accounting regulations (typically 7 years).

When data is no longer needed for the purposes described above, we securely delete or anonymize it.

7. Security

We take the security of your data seriously and implement appropriate technical and organizational measures to protect it, including:

Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (Transport Layer Security).
Encryption at rest: Sensitive data stored in our database is encrypted at rest.
Secure infrastructure: Our application is hosted on secure, enterprise-grade cloud infrastructure with regular security updates and monitoring.
Access controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions.
Secure authentication: User authentication is managed through Supabase with support for strong password policies and session management.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining industry-standard protections.

8. Your Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

Right to Access: You may request a copy of the personal information we hold about you.
Right to Correction: You may request that we correct any inaccurate or incomplete personal information.
Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions (such as data we are required to retain for legal or compliance purposes).
Right to Data Portability: You may request a machine-readable copy of your data.
Right to Opt Out: You may opt out of non-essential communications at any time.

To exercise any of these rights, please contact us at christopher@revive-local.com. We will respond to your request within 30 days.

If you are an end customer who received a message through our platform and wish to access, correct, or delete your information, please contact the business that sent you the message directly, or reach out to us at the email address above and we will assist in directing your request.

9. Children's Privacy

Our services are not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as promptly as possible. If you believe that we may have collected information from a child under 13, please contact us at christopher@revive-local.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on this page with a revised "Last updated" date and, where appropriate, by sending you a notification via email or through our application. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.