1. Who We Are
ReviewZap is a SaaS service that automatically replies to Google Business Profile reviews using AI. The service is operated by an individual based in Belgium ("we", "us", "our"). Contact: [email protected].
2. What Data We Collect
Account Data
- Your Google account email address and display name (collected when you connect with Google OAuth)
- Your Google Business Profile location names and addresses
Review Data
- Text content of Google reviews left on your Business Profile
- Reviewer display names (as provided by Google)
- Star ratings
- AI-generated reply text that we post on your behalf
Authentication Tokens
- Google OAuth access and refresh tokens (encrypted at rest) — used solely to read reviews and post replies on your behalf
Technical Data
- Session identifiers (stored in Redis, expire after 30 days)
- Basic server logs (IP address, request timestamps) for security purposes
What We Do NOT Collect
- Payment card details (handled entirely by Stripe)
- Passwords (we use Google OAuth — no password is ever created)
- Any data from your Google account beyond Business Profile reviews
3. How We Use Your Data
- To provide the service — reading reviews from Google and posting AI-generated replies on your behalf
- To maintain your account — associating your locations and preferences with your account
- To improve reply quality — review text is sent to OpenAI's API to generate replies (see section 5)
- To communicate with you — service notifications, billing receipts
4. Legal Basis (GDPR)
We process your data under the following legal bases:
- Contract performance — processing necessary to deliver the service you signed up for
- Legitimate interest — server logs for security and abuse prevention
- Consent — Google OAuth permissions you explicitly grant
5. Third-Party Services
- Google — OAuth login and Google My Business API. Subject to Google's Privacy Policy.
- OpenAI — Review text is sent to OpenAI to generate replies. OpenAI does not use API inputs to train models by default. See OpenAI API data policy.
- Stripe — Payment processing. We never see or store your card details. See Stripe's Privacy Policy.
- Railway — Cloud hosting provider where your data is stored. Servers located in the EU.
6. Data Retention
- Account data is retained while your account is active
- Review and reply data is retained for 12 months then automatically deleted
- On account deletion, all your data is permanently removed within 30 days
- Server logs are retained for 90 days
7. Your Rights (GDPR)
As an EU resident or user, you have the right to:
- Access — request a copy of all data we hold about you
- Rectification — correct inaccurate data
- Erasure — delete your account and all associated data at any time (via dashboard Settings or by emailing us)
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest
- Lodge a complaint — with the Belgian Data Protection Authority (dataprotectionauthority.be)
To exercise any right, email [email protected]. We respond within 30 days.
8. Cookies
We use a single session cookie to keep you logged in. It expires after 30 days. We do not use tracking, advertising, or analytics cookies.
9. Security
Google OAuth tokens are encrypted at rest. All data is transmitted over HTTPS. Access to your data is restricted to authenticated sessions only.
10. Changes to This Policy
We may update this policy. If changes are significant, we will notify you by email. Continued use of the service after changes constitutes acceptance.
11. Contact
For any privacy questions or data requests: [email protected]
1. Acceptance
By creating an account and using ReviewZap ("the Service"), you agree to these Terms of Service. If you do not agree, do not use the Service.
2. Description of Service
ReviewZap is a SaaS tool that connects to your Google Business Profile, monitors incoming reviews, and automatically posts AI-generated replies on your behalf. The service requires an active subscription after any applicable trial period.
3. Account Eligibility
- You must be 18 or older to use the Service
- You must have legitimate access to the Google Business Profile you connect
- One account per business unless on a multi-location plan
- You are responsible for keeping your login credentials secure
4. Subscriptions & Payment
Trial Period
New accounts receive a 14-day free trial. No credit card is required during the trial. At the end of the trial, auto-reply is paused until a paid plan is activated.
Billing
- Subscriptions are billed monthly in advance via Stripe
- Prices are shown in EUR and include applicable taxes
- Failed payments result in a 7-day grace period before the service is paused
Cancellation
- You may cancel at any time from your account settings
- Cancellation takes effect at the end of the current billing period
- No refunds for partial months
Refunds
We offer a full refund within 7 days of your first payment if you are unsatisfied. After 7 days, no refunds are issued. Contact [email protected] to request a refund.
5. Acceptable Use
You agree not to:
- Use the service to post false, misleading, or defamatory replies
- Attempt to manipulate or game Google's review system
- Resell or sublicense the service without written permission
- Reverse-engineer or attempt to extract the underlying AI prompts or system
- Use the service for any unlawful purpose
6. AI-Generated Content
Replies are generated by AI (OpenAI GPT-4). You acknowledge that:
- AI replies may occasionally be imperfect, inaccurate, or not match your intended tone
- You are responsible for the content posted to your Google Business Profile
- We recommend periodically reviewing posted replies via your dashboard
- You can pause auto-reply at any time from your dashboard
7. Google Platform Compliance
You are responsible for ensuring your use of ReviewZap complies with Google's Terms of Service for Google Business Profile. We are not affiliated with or endorsed by Google.
8. Service Availability
We aim for high availability but do not guarantee 100% uptime. Planned maintenance will be communicated in advance where possible. We are not liable for losses resulting from service downtime.
9. Limitation of Liability
To the maximum extent permitted by Belgian law, ReviewZap shall not be liable for:
- Any indirect, incidental, or consequential damages
- Loss of business, revenue, or reputation resulting from AI-generated replies
- Any issues arising from Google API changes or downtime
Our total liability in any case is limited to the amount you paid in the 3 months preceding the claim.
10. Intellectual Property
The Service, its design, and underlying code are owned by ReviewZap. Your business data and review content remain yours. AI-generated replies posted to your Google profile are considered your content once published.
11. Termination
We may suspend or terminate your account if you violate these Terms. You may delete your account at any time from your dashboard. On termination, your data is deleted per the Privacy Policy.
12. Governing Law
These Terms are governed by Belgian law. Any disputes shall be subject to the exclusive jurisdiction of the courts of Belgium.
13. Changes to Terms
We may update these Terms. We will notify you by email at least 14 days before significant changes take effect. Continued use after the effective date constitutes acceptance.
14. Contact
Questions about these Terms: [email protected]