Privacy Policy

1. Who we are

ReviewGrowth is a review and feedback platform operated by Quantlix ("we", "us"). This policy covers two groups of people: business users who create accounts and run rating funnels, and patrons who rate a visit or leave feedback through a funnel.

2. What we collect from business users

• Account data — name, email address, and a password we store only as a strong one-way hash (Argon2id). We never see or store your plain password.
• Business data — organisation name, locations, branding, and the Google review link you configure.
• Billing data — handled by our payment providers (such as Stripe). We receive subscription status and invoice metadata, never your full card number.
• Usage logs — standard technical logs (with personal identifiers redacted) used for security and reliability.

3. What we collect from patrons in a funnel

• Rating & feedback — the star rating chosen and, if the patron writes one, their private feedback message. This goes to the business owner, not to the public internet.
• Contact details are strictly opt-in.A patron's name, email, or phone number is stored only if they provide it and tick the explicit consent box allowing the business to follow up. Without that consent, contact details are never saved.
• Funnel analytics — anonymous events (page viewed, QR scanned, rating chosen) tied to a short-lived random session id. IP addresses are stored only as salted one-way hashes for abuse prevention; we do not store raw patron IPs with ratings.

4. How we use data

• To provide the Service: routing reviews, delivering feedback, and alerts.
• To bill subscriptions and prevent fraud or abuse.
• To show businesses aggregate analytics about their own funnels.
• To improve the Service using aggregated, de-identified usage data.

We do not sell personal data, and we do not use patron feedback for advertising.

5. Sharing & processors

We share data only with the service providers needed to run ReviewGrowth — hosting, payment processing (e.g. Stripe), and transactional email delivery — under contracts that limit them to processing on our instructions. We may disclose data if required by law, or as part of a merger or acquisition with notice to you.

6. Retention & deletion

• Account and business data is kept while your account is active and deleted or anonymised within 90 days of account deletion, except where the law requires longer (e.g. invoices).
• Deleting a location permanently removes its feedback, ratings, and analytics.
• Patrons can ask the business they reviewed, or us directly, to delete their feedback and contact details.

7. Security

All traffic is encrypted in transit (TLS). Passwords are hashed with Argon2id; sessions use short-lived tokens with rotating, httpOnly refresh cookies; access to production data is restricted and audited. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you without undue delay.

8. Your rights

Depending on where you live (e.g. GDPR or CCPA regions), you may have the right to access, correct, export, delete, or restrict the processing of your personal data, and to object to certain processing. To exercise any of these rights, email privacy@reviewgrowth.app. You can also complain to your local data-protection authority.

9. Cookies

We use strictly necessary cookies only: an authentication cookie for logged-in dashboard sessions and a theme preference. The patron funnel sets no tracking cookies; it uses a random in-browser session id that identifies a visit, not a person.

10. Children

The Service is for businesses and is not directed at children under 16. We do not knowingly collect children's personal data.

11. Changes

We may update this policy as the Service evolves. For material changes we will notify business users by email or in-app before the change takes effect. See also our Terms of Service.

12. Contact

Privacy questions or requests: privacy@reviewgrowth.app.