1. Information We Collect

We collect the following types of information when you use ReviewMob:

Account Information: Your name and email address from Google OAuth sign-in.
API Credentials: Google Play, App Store Connect, and OpenAI API keys you provide. These are encrypted at rest using AES-256-CBC encryption.
App Review Data: Reviews synced from Google Play and App Store for the apps you register.
Usage Data: Information about how you use the Service, including feature usage counts and sync history.
Payment Information: Processed securely by Stripe. We do not store credit card details.

2. How We Use Your Information

We use your information to:

Provide and maintain the Service
Sync and display app reviews from connected platforms
Generate AI-powered reply suggestions using OpenAI
Process payments and manage subscriptions
Send important service notifications
Improve the Service based on usage patterns

3. Data Security

We take security seriously. All API credentials are encrypted using AES-256-CBC encryption before storage. Data is transmitted using HTTPS/TLS. Our database uses Row Level Security (RLS) to ensure complete data isolation between organizations. We regularly review our security practices.

4. Data Isolation

ReviewMob is a multi-tenant platform. Each organization's data is completely isolated from other organizations through database-level Row Level Security policies. Users in one organization cannot access reviews, credentials, or settings belonging to another organization.

5. Third-Party Services

We use the following third-party services:

Supabase: Database hosting and authentication
Vercel: Application hosting
Stripe: Payment processing
OpenAI: AI reply generation (review content is sent to OpenAI for processing)
Google Cloud Translation: Review translation
Google Play API: Review synchronization
App Store Connect API: Review synchronization

Each third-party service has its own privacy policy. We encourage you to review their policies.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal or regulatory purposes. Sync history and usage logs may be retained in anonymized form for analytics.

7. Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Delete your account and associated data
Export your data
Object to processing of your data
Withdraw consent at any time

To exercise any of these rights, contact us at support@reviewmob.com.

8. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party analytics cookies.

9. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at support@reviewmob.com.