Who operates ReviewsRelay
ReviewsRelay is owned and operated by Swift Pixel LLC. In this policy, "ReviewsRelay," "we," "us," and "our" refer to Swift Pixel LLC doing business through the ReviewsRelay product.
Data we collect from accounts
When a business owner creates a ReviewsRelay account we collect an email address, a display name, and a password hash. If the owner signs in with Google, we receive their Google account email, name, and profile identifier.
- Account email and display name
- Authentication identifiers (Google sub, scrypt password hash)
- Workspace settings, plan tier, and product preferences
- Audit metadata such as IP address and user agent for sign-in attempts
Data we collect from Google Business Profile
When an owner connects a Google Business Profile, ReviewsRelay receives information needed to read reviews and publish replies and posts on the owner's behalf. This includes the location identifier, business name, address, the text and rating of public reviews, and posts the owner approves us to publish.
OAuth access and refresh tokens used to talk to Google APIs are encrypted at rest using AES-256-GCM with a server-side key. Tokens are only decrypted in memory when ReviewsRelay needs to call Google on the owner's behalf.
Customer contact and feedback data
A business may add or import customer names, email addresses, phone numbers, service or visit details, consent records, opt-out status, and first-party feedback so ReviewsRelay can send and track review requests. ReviewsRelay processes this information only on the business's instructions to provide the configured workflow.
The business is responsible for having a lawful basis to collect and use this data, for obtaining any consent required for email or SMS messages, and for keeping source-system consent records accurate. ReviewsRelay enforces saved suppression and unsubscribe choices in addition to those responsibilities.
How we use the data
We use account and workspace data to operate the product, route automation, and send transactional emails such as login links, password resets, and weekly owner summaries.
We use Google Business Profile data to draft reply suggestions, draft Google Posts, generate branded review graphics from approved reviews, and produce the weekly owner summary. We do not sell Google Business Profile data, and we do not use it to train third-party models.
Service providers and subprocessors
We disclose limited data to service providers only as needed to operate the feature the business uses. Current provider roles include DigitalOcean for application hosting and managed database infrastructure; OpenAI for generating requested drafts from supplied business and review context; Resend for transactional and review-request email; Twilio for SMS delivery when SMS is configured; Stripe for subscription billing; Google for account authentication and Business Profile access; and Slack for operational notifications when that channel is configured.
We do not sell personal data. ReviewsRelay does not use customer or Google Business Profile data to train generalized third-party models, and we do not intentionally include customer recipient lists or review text in advertising analytics events.
Website analytics and cookies
Google Analytics, Google Tag Manager, and Google Ads measurement are on by default for new visitors so we can understand acquisition and improve the site. A visitor may disable or re-enable them at any time using the inline analytics preference at the end of this page. When enabled, these services may receive page paths, referral and campaign information, browser or device information, cookie identifiers, and conversion events. Essential account and security cookies remain available because they are required to sign in and protect the service.
Retention and deletion
Workspace data is retained for as long as the account is active. Owners can export or delete their account and workspace data from authenticated Settings, or request help by emailing the support address listed in the product. We delete or irreversibly anonymize workspace data within 30 days of a verified deletion request, except where a longer retention is required by law.
Stripe invoices, payment records, and provider-side logs may be retained by those providers according to their own legal, tax, fraud-prevention, and security obligations.
Owner controls
Owners can disconnect Google access at any time from inside the workspace, change their automation mode, pause weekly posts, export account data, delete the account, or revoke any pending automation from the review queue. Disconnecting Google removes the encrypted tokens we hold for that integration.
Contact
For privacy questions or to exercise data rights, contact Swift Pixel LLC at [email protected].