Who operates ReviewsRelay
ReviewsRelay is owned and operated by Swift Pixel LLC. In this policy, "ReviewsRelay," "we," "us," and "our" refer to Swift Pixel LLC doing business through the ReviewsRelay product.
Data we collect from accounts
When a business owner creates a ReviewsRelay account we collect an email address, a display name, and a password hash. If the owner signs in with Google, we receive their Google account email, name, and profile identifier.
- Account email and display name
- Authentication identifiers (Google sub, scrypt password hash)
- Workspace settings, plan tier, and product preferences
- Audit metadata such as IP address and user agent for sign-in attempts
Data we collect from Google Business Profile
When an owner connects a Google Business Profile, ReviewsRelay receives information needed to read reviews and publish replies and posts on the owner's behalf. This includes the location identifier, business name, address, the text and rating of public reviews, and posts the owner approves us to publish.
OAuth access and refresh tokens used to talk to Google APIs are encrypted at rest using AES-256-GCM with a server-side key. Tokens are only decrypted in memory when ReviewsRelay needs to call Google on the owner's behalf.
How we use the data
We use account and workspace data to operate the product, route automation, and send transactional emails such as login links, password resets, and weekly owner summaries.
We use Google Business Profile data to draft reply suggestions, draft Google Posts, generate branded review graphics from approved reviews, and produce the weekly owner summary. We do not sell Google Business Profile data, and we do not use it to train third-party models.
Sharing with third parties
We share limited data with the service providers needed to run ReviewsRelay: our hosting provider, our database provider, our transactional email provider, and our payments provider when billing is enabled. Each provider receives only the data needed to perform its function.
Retention and deletion
Workspace data is retained for as long as the account is active. Owners can export or delete their account and workspace data from authenticated Settings, or request help by emailing the support address listed in the product. We delete or irreversibly anonymize workspace data within 30 days of a verified deletion request, except where a longer retention is required by law.
Stripe invoices, payment records, and provider-side logs may be retained by those providers according to their own legal, tax, fraud-prevention, and security obligations.
Owner controls
Owners can disconnect Google access at any time from inside the workspace, change their automation mode, pause weekly posts, export account data, delete the account, or revoke any pending automation from the review queue. Disconnecting Google removes the encrypted tokens we hold for that integration.
Contact
For privacy questions or to exercise data rights, contact Swift Pixel LLC at [email protected].