GetRevues.ai – Privacy Policy

Last Updated: 26th January 2025

1. Introduction

Welcome to GetRevues.ai ("we", "us", "our", or "Service"). This Privacy Policy describes how we collect, use, and protect personal data when you use our website, web application, and any associated services (together, the "Platform").

By accessing or using our Platform, you confirm that you have read and understood this Privacy Policy. If you do not agree with any part of it, you should refrain from using our services.

2. Who We Are

Business Name: GetRevues.ai is a trading style of Think Menai Ltd
Legal Status: Registered Company in England & Wales: 16363058
Address: Capel Bethel Vestry, Stryd Fawr, Caernarfon, Gwynedd, LL54 6PL
Contact Email: support@getrevues.ai

For the purposes of the UK General Data Protection Regulation (UK GDPR) and any equivalent data protection legislation, we act as the "Data Controller" for personal data we obtain directly from you or that we generate in the course of providing our services. However, in situations where we process data (including personal information) on your behalf (e.g. reviews from your connected accounts), we may act as a "Data Processor". This means you (the customer) may be the "Data Controller" in relation to such data, and we process it solely under your instructions.

Think Menai is registered with the UK Information Commissioner's Office (ICO) and our registration number is ZB897888.

3. Scope of This Policy

This Privacy Policy applies to:

  • Visitors to our website (www.getrevues.ai)
  • Users who register an account for our sentiment review and AI response services
  • Individuals who interact with us through email, support channels, or other means related to our Platform

4. What Data We Collect

We may collect and process the following types of personal data:

Account Information:

Contact details (name, email address, business name, and similar)
Login credentials (hashed password, unique user ID)

Payment Data:

If you subscribe to our Pro or Premium plans, we use third-party payment processors (e.g. PayPal, Stripe) to handle payments. We do not store your full payment card details. We may receive a transaction ID or partial card information (e.g. last 4 digits) from these processors to confirm successful payments.

Platform Usage Data:

Connection logs: IP address, browser type, operating system, device information, and page views.
Interaction data: Actions taken on our Platform, such as connecting a review site account, generating AI responses, or responding to reviews.

Third-Party Review Data:

If you connect your Google My Business, TripAdvisor, Facebook, or other review platforms, we may process the reviews and associated metadata (review content, date/time, reviewer name or username, rating).
Depending on the platform, personal data (e.g. part of a user's public profile) may be included within the review text. When we process this data, we act as a Data Processor on your behalf.

Communications:

Email exchanges: If you contact us via email or chat, we may retain correspondence and related contact details.

Cookies and Tracking Technologies:

We use cookies or similar technologies to collect information about your interactions with our website. See Section 8 for more details.

5. How We Use Your Data

We use the personal data we collect for the following purposes:

Service Provision

To authenticate your account, provide our review aggregation and sentiment analysis, and generate AI-based response suggestions.

Payment and Subscription Management

To process subscription fees, issue invoices, and manage billing cycles.

Platform Improvement

To analyse usage patterns, improve user experience, and develop new features.

User Support

To respond to your queries, troubleshoot issues, and provide general customer service.

Legal and Compliance

To comply with applicable laws, regulations, or court orders.
To investigate potential misuse, unauthorised access, or fraudulent activity.

Marketing and Communications

With your explicit consent, we may send promotional emails or updates about new features, services, or special offers. You can opt out at any time.

6. Legal Bases for Processing

Under the UK GDPR, we rely on various legal bases for processing personal data:

  • Contractual Necessity: To provide the services you signed up for (e.g. account creation, subscription billing, review analysis).
  • Legitimate Interests: For operational reasons, such as improving our Platform, preventing fraud, or ensuring network security.
  • Consent: For optional marketing communications and certain types of cookies (non-essential or analytical cookies).
  • Legal Obligation: To comply with legal requirements or valid requests from public authorities.

7. Data Sharing and Disclosure

We do not sell or rent your personal data. However, we may share data under these circumstances:

Service Providers:

We use trusted third-party vendors (e.g. cloud hosting, payment processors) to support our operations. They only process your data on our behalf in accordance with our instructions.

Review Platform Integrations:

If you choose to connect third-party platforms (e.g. Google My Business, TripAdvisor, Facebook), data is exchanged according to the relevant APIs and the permissions you grant. We are not responsible for the privacy practices of these external platforms.

Business Transfers:

If we are involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction. We will notify you if this occurs and outline your choices.

Legal Requirements:

We may disclose information if required to do so by law, or if we believe in good faith that disclosure is necessary to comply with legal obligations or protect our rights, property, or safety.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to provide and improve our services. This can include:

  • Essential Cookies: Required for the operation of our website (e.g. user login).
  • Analytics Cookies: To collect anonymised statistics on user interactions, helping us enhance functionality. We may use third-party analytics (e.g. Google Analytics) that set their own cookies.
  • Functional Cookies: To remember user preferences or customise your experience.

Cookie Consent

Where required by law, we will ask for your consent before setting any non-essential cookies. You can manage your cookie preferences at any time, typically via a cookie banner or browser settings. Disabling certain cookies may limit some features of our Platform.

For more information, please see our Cookie Policy.

9. International Data Transfers

Your personal data may be transferred and stored outside the UK or European Economic Area (EEA), especially if our servers or service providers are located in other countries. In such cases, we will ensure that adequate safeguards are in place (e.g. standard contractual clauses or equivalent mechanisms) to protect your data in line with UK GDPR.

10. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this Policy (e.g. to provide services, maintain accurate records, comply with legal obligations). Retention periods may vary depending on the type of data:

  • Account Data: Stored until you deactivate your account or otherwise request deletion.
  • Transaction Data: Maintained as legally required for tax/accounting purposes.
  • Review Data: Retained for as long as the connected platform integration is active, or as directed by you, the Data Controller (if you request we remove it).
  • Logs and Analytics: Usually retained for a shorter period to identify trends and usage patterns, then anonymised or deleted.

11. Your Data Protection Rights

Under the UK GDPR, you may have the right to:

  • Access: Request a copy of personal data we hold about you.
  • Rectification: Ask us to correct inaccuracies in your personal data.
  • Erasure: Request deletion of your personal data (where we have no lawful basis to continue processing it).
  • Restriction: Restrict certain types of processing in specific circumstances.
  • Objection: Object to processing based on legitimate interests or direct marketing.
  • Data Portability: Receive personal data in a structured, commonly used format (applicable to data processed by automated means).
  • Withdraw Consent: Where processing is based on consent, you can withdraw it at any time. This will not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at support@getrevues.ai. We may need to verify your identity before fulfilling certain requests.

12. Children's Privacy

Our Platform is not intended for use by children under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us so we can delete it.

13. Security Measures

We take reasonable technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. However, no security measure can guarantee absolute protection. You are responsible for keeping your login credentials confidential.

14. Third-Party Links

Our Platform may contain links to third-party websites or services that we do not control. We are not responsible for the privacy practices of these external platforms. We encourage you to review their privacy policies separately.

15. Changes to This Policy

We may update or modify this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will post the revised version on our website and update the "Last Updated" date at the top. If we make significant changes, we may notify you by email or via our Platform. By continuing to use our services after such updates, you agree to the revised policy.

16. Contact Us

If you have any questions or concerns about this Privacy Policy, or if you wish to exercise your data protection rights, please contact us at:

Email: support@getrevues.ai
Address: GetRevues.ai, Capel Bethel Vestry, High Street, Penygroes, Gwynedd, LL54 6PL
Website: www.getrevues.ai

We will endeavour to respond to all valid requests within one month or the timeframe required by law. If you feel your concerns are not resolved, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK or another relevant supervisory authority in your jurisdiction.