Last updated August 13, 2026 (version 2026-08-13)
ReviewMate is a review management service for local businesses. This policy explains what we collect, why we collect it, who else sees it, and how to have it removed. It covers portal.goreviewmate.com and the ReviewMate service.
ReviewMate is operated by ReviewMate (goreviewmate.com). For any privacy question, or to make a request under the rights described below, contact privacy@goreviewmate.com.
We collect three kinds of information.
Account information. Your name, business name, email address, phone number, password (stored only as a bcrypt hash, never in readable form), and the Google business listing you select at signup.
Business data. Reviews, ratings, replies, posts, photos, listing details, search rankings and competitor information for the business you connect. Most of this is already public on Google, Yelp, Facebook, Trustpilot, the BBB and similar platforms. Some of it, such as review data from your connected Google Business Profile, reaches us only because you authorized that connection.
Usage data. Sign-in times, IP address, pages viewed, and error diagnostics. We use these to keep the service running, to enforce rate limits, and to investigate problems.
If you enable SMS review requests, we also process the customer contact details you supply for that purpose. Those contacts belong to you. We do not use them for our own marketing and we do not sell them.
This is worth stating plainly rather than burying. ReviewMate uses automated systems, including large language models, to read your reviews and generate content. Specifically:
Review text is sent to AI providers to draft suggested replies, to write business posts, to classify sentiment, and to summarize trends for your reports. Draft replies are generated by software, not written by a person, and you remain responsible for anything you choose to publish under your business name.
The AI providers we use for this are named in the list below. We do not permit them to use your data to train their models. We do not use AI to make automated decisions that produce legal or similarly significant effects about any individual.
We do not sell personal information and we do not share it for cross-context behavioral advertising. We share data with the service providers below, each only for the stated purpose, and each bound to handle it on our instructions.
| Provider | Purpose |
|---|---|
| Vercel | Application hosting and delivery |
| Upstash | Database and cache for dashboard data |
| Google (Business Profile, Places, Maps) | Review, listing and location data for the business you connect |
| DataForSEO | Search ranking and public review collection |
| Local ranking data provider | Local ranking heatmap scans |
| Cerebras | AI generation of draft review replies and posts |
| OpenRouter | AI model routing for generation and analysis |
| Resend | Transactional email (verification, alerts, reports) |
| Twilio | SMS review requests, where enabled |
| GoHighLevel | Customer records and billing workflow |
| Stripe | Subscription payment processing |
| Sentry | Error monitoring and diagnostics |
We also publish content on your behalf to the platforms you connect, such as your Google Business Profile. That is the service working as intended, and you control what gets published. Beyond this, we disclose information only when the law requires it, or to protect the service against fraud or abuse.
When you connect a Google Business Profile, we request access to your business listings, reviews and posts so the service can read reviews, publish replies you approve, and create posts you schedule. We use that data only to provide these features. We do not transfer it to others except as described above, we do not use it for advertising, and no human reads it except where needed for support you request or for security. You can disconnect at any time from Settings, or by revoking access in your Google account, which stops further access immediately.
Account and business data is retained while your account is active. When you close your account, we delete or anonymize personal information within 90 days, except where we must keep records longer for tax, accounting or legal reasons. Diagnostic logs are kept for a shorter period. Public review content that we collected may persist in aggregate reporting that no longer identifies any individual.
If you ask us to delete something, we delete it from our live systems and from backups on the ordinary backup rotation. We do not keep a private copy of material we told you was deleted.
Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to receive a portable copy, and to opt out of certain uses. Residents of California, Colorado, Connecticut, Virginia and other US states with comprehensive privacy laws have these rights by statute, as do individuals in the UK and EEA.
Email privacy@goreviewmate.com to make a request. We will verify who you are before acting, and we will respond within the time your local law allows. Exercising these rights never costs you anything and we will not degrade your service for asking.
Passwords are stored only as bcrypt hashes. Sessions are signed and expire. Access to production data is limited to people who need it. No system is perfectly secure, and we do not claim otherwise, but we will notify affected users and any required regulator if a breach puts personal information at real risk.
ReviewMate is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16.
If we change this policy in a way that affects how we handle your information, we will update the version at the top of this page and notify account holders by email before the change takes effect. The version you agreed to at signup is recorded with your account.