EFFECTIVE 2026-10-16 · VERSION 2026-10-16
Privacy notice
Terms · Privacy · Data processing · Service help
Save or print this version for your records.
Who we are
К енд И Риъл Естейт ООД (K and I Real Estate LTD), UIC 204404871, Lazur Blv. 107, Floor 4, 8000 Burgas, Bulgaria operates ReviewGate. Contact kevin@reviewgatehq.com about information or rights. Effective version 2026-10-16. We act as controller for sales, billing administration, support, security and our outreach. A customer business controls the reviews or private messages it receives. For the limited personal data it instructs us to display or host, our data-processing terms apply.
Information, purpose and basis
Purchasers supply business configuration, business-use declarations and billing/contact details to provide and recover the sign. We use contract necessity when contracting with an individual and legitimate interests in providing an organization's service when dealing with its representatives. Stripe supplies payment identifiers and subscription status for access, payment administration, fraud prevention and legally required accounting. We handle support messages and limited delivery audits to answer questions, investigate and prevent duplicate sends, relying on relevant contract duties and legitimate interests in reliable support. Applicable legal obligations govern records we must retain. We do not use an organization's contract as a blanket basis for processing every employee's information.
Public business contacts and objections
Our small outreach pilot uses business websites/listings, source URLs and public business contact details collected through Apify and verified through Instantly. The purpose is relevant business introductions, assessed under legitimate interests and applicable electronic-marketing rules. Publication of an address is not consent. We send at most one initial prospect message and one follow-up, stop on reply and honor objections. Reply no thanks or request an opt-out; purchasing never requires agreeing to marketing. Minimal suppression information is retained to prevent renewed contact. We can provide the recorded source and information about the assessment on request.
Visitors, storage and choices
Ratings and private feedback text stay in the visitor's browser until the visitor chooses Google or an email app. We do not receive or store that feedback text. Google, the email provider and the receiving business then handle what the visitor submits. Avoid sensitive information in feedback. Public pages display the business's supplied settings; demo URLs contain those settings. Private purchase recovery credentials are not included in the paid public QR. Session storage supports checkout recovery. Hosting still receives ordinary technical requests. We use local fonts, with no advertising pixel, scan analytics or external language model answering support questions. The same configured feedback choices are available at every rating.
Providers and transfers
Vercel hosts the site and private operational records. Stripe handles payments and has independent financial-compliance purposes. Google Workspace and Instantly handle our dedicated mailbox and operational messages; Apify collects pilot business data. Checkly checks only public website/health/configuration responses and sends owner alerts. Encrypted recovery copies are sent to a separate owner-controlled Gmail inbox. Data may be processed outside the EEA. Applicable provider DPAs, relevant standard contractual clauses or adequacy arrangements govern covered transfers; locations depend on each provider and service. We do not promise EU-only storage. Ask us for the applicable provider/entity and safeguard information or copies, subject to necessary redactions. Our data-processing terms list the customer-hosting subprocessors.
Retention and deletion
Detailed completed support audits are retained for 30 days; unresolved or uncertain cases remain until resolved and then enter the cleanup period. Minimal setup-delivery and opt-out hashes prevent duplicate or unwanted messages. Verification evidence is usable for seven days and then cleaned; cloud operational backups retain seven days. Abandoned purchase settings are eligible for cleanup after 30 days only after individual checkout sessions have expired and replacement checkout has superseded reusable payment links. Active sign settings remain for service/recovery; inactive sign data is reviewed for deletion after 90 days, subject to replacement-sign links, unresolved issues and justified holds. Contract acceptance evidence is retained for the relationship and up to five years after it ends for claims, subject to justified holds. Accounting records are retained for applicable legal periods; the company's accountant determines those requirements. Mailbox and prospect datasets are reviewed on the monthly deletion schedule: routine closed correspondence after 12 months, unused prospect source datasets after 90 days, with unresolved claims and minimum suppression records preserved. Deletions across provider systems require recorded execution and verification. Working-data deletion does not immediately remove all provider backups. Encrypted off-provider recovery emails retain up to 30 days under the owner's scoped deletion procedure; no automatic deletion of that separate Gmail inbox is claimed.
Rights and requests
Where applicable, you may request access, correction, deletion, restriction or portability, or object to processing. You may object to direct marketing at any time. Contact kevin@reviewgatehq.com; we may seek proportionate identity verification before disclosing records. We normally respond within one month and explain any lawful extension, refusal or retention requirement. You may complain to your competent authority, including Bulgaria's Commission for Personal Data Protection at https://cpdp.bg/en/. Required business/billing information is needed to provide the subscription; the feedback email is optional. We do not make solely automated decisions with legal or similarly significant effects about individuals. Updates show a version/date, with advance notice of material changes where required.