Privacy Policy

Last updated: October 2026

This policy explains how Ionel Ilie trading as ReviewsAnswered ("we", "us"), the operator of ReviewsAnswered, collects and uses personal data. We are the data controller for account data. Contact: hello@reviewsanswered.co.uk.

1. What we collect

• Account data: your business name, email address and password (stored only as a secure hash).
• Google Business Profile data: when you connect Google, we receive an access token and read your business location name and your customers' reviews (reviewer display name, star rating, review text and date). We post replies only when you publish them or turn on Autopilot.
• Settings and usage: reply tone, signature, alert email, and when you last used the service.
• Billing: payments are handled by Stripe. We do not see or store your full card details.
• Business contact data (prospects): we may collect publicly available business contact details (business name, address, phone, website, business email) from public sources such as Google Maps and business websites, to offer our service to businesses.

2. Why we use it (legal basis, UK GDPR)

• To provide the service you signed up for – contract.
• To send service emails (bad-review alerts, password reset, trial reminders) – contract and legitimate interests.
• To contact businesses about our service – legitimate interests. Every message includes an unsubscribe link and we stop immediately if you opt out.
• To meet tax and accounting obligations – legal obligation.

3. Google user data

ReviewsAnswered's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google data only to show your reviews, draft replies and publish replies you approve. We do not sell it, use it for advertising, or let humans read it except with your permission, for security, or where required by law.

4. Who we share it with

Only service providers that help us run ReviewsAnswered: hosting (Render), AI reply generation (Anthropic – review text is sent to generate a reply), payments (Stripe), email delivery, and Google (to read and post replies). Some providers may process data outside the UK; where they do, appropriate safeguards (such as UK International Data Transfer Agreements or adequacy regulations) apply. We never sell personal data.

5. How long we keep it

When you create an account we record the date, the version of these terms you accepted and your IP address, as proof of consent. You can download all your data at any time (Settings → Download my data).

Account and review data are kept while your account is open. When you delete your account (Settings → Delete my account), we delete your account, stored reviews and Google token immediately. Billing records are kept for up to 6 years for tax purposes. Business contact data used to offer our service is deleted automatically after 6 months if we never contacted the business, after 2 years otherwise, and immediately on request. If a business unsubscribes or asks to be erased, we keep only an irreversible code (hash) of the email address so that we never contact it again.

6. Your rights

You can ask to access, correct, delete or export your data, object to processing or ask us to restrict it. Email hello@reviewsanswered.co.uk. You can disconnect Google at any time in Settings or at myaccount.google.com/permissions. If you are unhappy, you can complain to the Information Commissioner's Office (ico.org.uk).

7. Cookies

We use only essential cookies to keep you logged in and protect forms. We do not use advertising or tracking cookies.

8. Security

Passwords are hashed, connections use HTTPS, and access to data is restricted. No system is 100% secure, but we take reasonable steps to protect your data.

9. Changes

We may update this policy and will show the new date at the top. Significant changes will be emailed to account holders.