Privacy Notice

Who We Are

Review Reach LLC ("we", "us"), owned by Kasen Hannah and trading as Review Reach, is the data controller for the information you provide when using our service.

What We Collect

• Account information: name, email address, business name.
• Customer data: names, emails, and phone numbers you upload to send review requests.
• Usage data: how you interact with the dashboard and features.
• Technical data: IP address, browser type, device identifiers.

How We Use It

We use your data to provide and improve the service, process payments, send account notifications, prevent fraud, and respond to support requests.

Who We Share It With

• Paddle — our Merchant of Record, for payments, subscription management, tax compliance, and invoicing.
• Service providers — hosting, authentication, analytics, and support tooling.
• Authorities — when required by law.

Legal Basis for Processing

• Performance of a contract — creating and running your account, sending review requests on your behalf, and providing support.
• Legitimate interests — securing the service, preventing fraud and abuse, and improving how the product works.
• Legal obligation — keeping records we are required to keep, and responding to lawful requests.
• Consent — where we ask for it, such as optional marketing email. You can withdraw consent at any time.

How Long We Keep Data

We keep account and business data for as long as your account is active. If you close your account, we delete or anonymise your account data and your customer contact list within 90 days, except where we must keep records longer to meet legal, tax, or accounting obligations. Review feedback and ratings are retained in aggregate form. Server and security logs are kept for up to 12 months.

Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), encryption at rest, row-level database access rules so each account can only reach its own records, hashed credentials, and restricted administrative access. No system is perfectly secure, but we review these controls regularly.

International Transfers

Our service providers may process data outside your country, including in the United States. Where data leaves the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Cookies

We use essential cookies and local browser storage to keep you signed in and to keep the checkout secure. We do not use advertising cookies. You can clear or block cookies in your browser settings, though doing so will sign you out.

Your Rights

You can access, update, or delete your account data by contacting us. If you are in the UK or EEA, you also have rights under GDPR including access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. We respond to requests within one month. You also have the right to complain to your local data protection supervisory authority.

Contact

For privacy questions, email reviewreach.app@gmail.com.