Company
Security and data protection
We analyse other people's reviews, which are personal data belonging to their authors. That obliges more than storing a customer's own data.
What exactly we store
The text of publicly available reviews together with the display name the platform shows, the date and the rating — exactly what any visitor to the profile sees. Plus classification results and generated reports. We do not pull photos, we do not link review authors across platforms, and we do not build profiles of people.
A retention window
Reviews older than the configured period are deleted during housekeeping. They no longer affect any trend and every query has to pass them — keeping them would be a cost with no benefit.
Organisations kept apart
Each organisation's data is separated at query level, not only in the interface. An API token establishes identity and organisation at once, so another organisation's data cannot be reached even through a typo in the URL.
Two-factor sign-in
Available on every account regardless of plan. Sign-in attempts are also throttled — separately per account and per originating address.
Step by step
What happens to data at each stage
-
1
Fetching
Only the public profile address goes to the fetching provider. None of your data or your customers' data is passed there.
-
2
Classification
Review text reaches the language model provider. That is the only transfer of content outside our infrastructure and it is described in the privacy policy with its legal basis.
-
3
Storage
Reviews, classification results and reports sit on servers in the European Union. Reviews older than the configured window are deleted during housekeeping.
-
4
Delivery
The report is assembled by us, with no external conversion service. Webhooks go only to public addresses — private networks are refused on save and on every delivery.
In practice
A processing agreement at no extra charge
With review analysis we process personal data on your behalf, so a data processing agreement is necessary rather than optional. We send it on request, in standard wording, without negotiation and without an extra fee. Plus a full data export and account deletion from the panel, available from day one.
14 days
of grace on account deletion — in case of a mistake or someone else's action. After that the data is gone irreversibly.
Why it works this way
Where data goes out, and why
Three directions, each with a reason. Review text goes to the language model provider for classification — without it there is no product, and the transfer basis is set out in the privacy policy. The profile address, not customer data, goes to the review fetching provider. Webhooks go to an address you supply, but never to a private network address — we check on save and on every delivery.
Common questions
Are report PDFs produced by an external provider?
No. The report is assembled in the same process that serves the application. Sending other people's reviews to a conversion service would mean entrusting personal data to another party for no reason.
Can I delete my account with all its data?
Yes, from the panel. Deletion has a fourteen-day grace period — in case of a mistake or someone else's action — after which the data is gone irreversibly.
Can I get a data processing agreement?
Yes, on request and at no extra charge. With review analysis it is necessary, because we process personal data on your behalf.
Be first in when we launch
Join the waitlist. We'll write once, on launch day, with a link to create your account.