EFFECTIVE 2026-10-16 · VERSION 2026-10-16
Customer data-processing terms
Terms · Privacy · Data processing · Service help
Save or print this version for your records.
Scope and instructions
These terms form part of business subscription terms version 2026-10-16 where the customer acts as controller and ReviewGate acts as processor. Subject matter: hosting and recovering the customer's configured sign/page. Duration: the service and the return/deletion period below. Operations: receive, store, display, retrieve and delete supplied business settings and necessary technical records. Data: business representatives' names, public business contact email and technical request information where personal. People: customer representatives and page visitors. ReviewGate does not receive visitor feedback text or Google review submissions. The customer instructs this processing through its configuration and support requests; ReviewGate's own billing, security administration and outreach are separate controller activities.
Confidentiality and security
We process covered information only on documented instructions, including transfers, unless applicable law requires otherwise; we notify the customer of such a requirement unless prohibited. We inform the customer if an instruction appears to infringe data-protection law and may pause that instruction pending clarification. Authorized people are subject to confidentiality. Controls include encrypted transport, private operational storage, provider authentication for administration, scoped credentials, signed subscription-controlled links, conditional writes, bounded verified backups and sending paused on isolated restore. The customer secures its own devices, inbox and private recovery links. No security certification or absolute protection is promised.
Subprocessors and international processing
The customer generally authorizes Vercel for hosting/private recovery storage, Stripe for relevant subscription/configuration metadata, Google for operational mailbox and encrypted owner recovery storage, and Instantly for operational service email insofar as those providers process covered data on instructions. We maintain written provider obligations applicable to the service and remain responsible for subprocessor performance under these terms. We give at least 30 days' notice of intended additions or replacements by email, except urgent changes where prompt notice follows. Customers may object on reasonable data-protection grounds; we seek a workable alternative, otherwise either party may end the affected service with a proportionate unused-period refund. We use applicable Chapter V safeguards for restricted transfers and supply relevant information on request. Apify prospect collection and Checkly public-endpoint monitoring are our own business activities, not customer feedback processors.
Assistance and incidents
Taking account of the processing and available information, we assist with rights requests, security, breach assessment, impact assessments and authority consultation. We notify the customer without undue delay after becoming aware of a personal-data breach affecting covered information, provide known facts and further updates, and cooperate on containment. Customers contact kevin@reviewgatehq.com for requests or incidents; they retain responsibility for their own controller decisions and notifications. We provide information reasonably necessary to demonstrate these obligations and allow proportionate audits, including inspections by the customer or its mandated auditor, coordinated securely without compromising other customers' data. Ordinary compliance information is available without an audit fee; exceptional additional costs must be agreed in advance and cannot prevent legally required cooperation.
End of service and records
On ending the service, the customer may request return of its supplied configuration in a usable electronic form and deletion of processor copies. We verify the request, preserve minimal records subject to legal duties or justified unresolved holds, and document scope and completion. Active working configuration is normally removed within 30 days of an authorized deletion request; short-lived cloud backups age out within seven days after working deletion, and owner recovery copies within 30 days under the scoped deletion procedure. We isolate any retained legal records and restrict their use to that purpose. This does not delete reviews or messages held independently by the customer, Google or a visitor's email provider. Customer-controller instructions do not authorize deletion of the company's legally required billing records.