The Review Doctor
Privacy Policy

Your information, handled with care.

Last updated: June 3, 2026

The Review Doctor ("we", "us", "our") provides review-response services for local businesses. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

What we collect

  • Account info — business name, owner name, email, phone number, and website.
  • Connected platforms — public review data from Google Business Profile, Yelp, Facebook, and similar services we help you manage.
  • Brand voice inputs — tone preferences, words to use or avoid, and approval rules you share during onboarding.
  • Usage data — pages visited, actions taken in our dashboard, and basic device information.

How we use it

  • To draft and send review responses on your behalf.
  • To send approval requests, reports, and service updates.
  • To improve response quality across our service.
  • To meet our legal and security obligations.

We do not sell your data. We do not use your reviews to train third-party models. We do not post anything without your permission unless we're explicitly running in autopilot mode for you.

How we store and protect it

Your data is encrypted in transit (TLS) and at rest by our underlying providers. Access to client accounts is limited to authorized team members and revoked immediately when a member leaves. Specific retention windows:

  • Account & intake data — kept while your subscription is active and for 30 days after cancellation, then deleted unless you request handover.
  • Review content & drafted responses — kept for the life of your subscription so we can maintain your voice calibration. Deleted on request.
  • Payment metadata — billing records retained per tax and accounting rules (typically 7 years). Card numbers are never stored by us; see "Third parties" below.
  • Analytics & usage logs — aggregated and retained for up to 13 months.

Third parties we use

  • Stripe — payment processing. Card details are collected and stored by Stripe under their PCI-DSS-compliant infrastructure and never touch our servers. See Stripe's privacy policy.
  • Vercel — website hosting and edge delivery.
  • Google Workspace — email delivery and operational storage.
  • Make.com — automation routing between platforms you've connected.
  • Anthropic — AI used to draft replies. Inputs are not used to train third-party models.
  • Review platforms (Google, Yelp, Facebook) — accessed only with your explicit authorization.

Your rights

  • Request a copy of the data we hold about your business.
  • Request correction or deletion at any time.
  • Revoke platform access from us with one email.
  • Opt out of any non-essential communications.

To exercise any of these, email thereviewdoctor.sd@gmail.com. We respond within 30 days.

California residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the CPRA:

  • Right to know what categories of personal information we have collected about you in the past 12 months.
  • Right to delete personal information we have collected, subject to legal exceptions.
  • Right to correct inaccurate personal information.
  • Right to opt out of "sale" or "sharing" of personal information. We do not sell or share your personal information for cross-context behavioral advertising.
  • Right to non-discrimination for exercising any of these rights.

To exercise these rights, email thereviewdoctor.sd@gmail.com with "California Privacy Request" in the subject line. We will verify your identity before responding and reply within 45 days.

Cookies & tracking

We use a small number of cookies for sign-in, session security, and aggregate analytics. You can disable non-essential cookies in your browser without affecting core functionality.

Do Not Track: some browsers send a "Do Not Track" (DNT) signal. Because there is no consistent industry standard for how to respond to DNT signals, we do not currently take action on them. You can still control tracking via your browser's privacy settings.

Children

Our service is intended for business owners and is not directed at anyone under 16. We do not knowingly collect data from minors.

Changes to this policy

We may update this policy as our service evolves. Material changes will be announced at least 14 days before they take effect, by email and in your dashboard.

Contact

Questions? Email thereviewdoctor.sd@gmail.com. Responses are typically sent the same day; please allow 1–2 business days for a reply.

Have a legal or privacy question?

We answer within one business day.

Contact Us