1. Scope and our role
eReviewPro provides business-to-business software for customer review requests, private feedback, public review profiles, review widgets, reporting, imports, API integrations, and related account administration.
Business Customer Data. When a business uploads or sends us its customers' contact information, transaction references, or related records, that business generally determines why the information is used. For that data, eReviewPro acts as a service provider or processor on the business customer's behalf.
eReviewPro Account and Service Data. For account registration, billing administration, fraud prevention, security, product operations, support, and our own website, eReviewPro determines how and why information is processed.
If you received a review request from one of our business customers and have a question about the underlying customer relationship, purchase, or why that business contacted you, the business that sent the request is usually the appropriate first point of contact. We will assist our business customers with valid privacy requests as appropriate.
2. Information we collect and process
Account and business information
We may process information such as:
- name, email address, account role, and authentication information;
- business name, website, locations, branding, support details, and business settings;
- team invitations, permissions, login history, and account-security events;
- support requests and communications with us.
Billing and subscription information
We process subscription plan, billing status, Stripe customer and subscription identifiers, invoice/payment status, and limited payment-method metadata that Stripe makes available to us. Payment card fields are presented by Stripe. eReviewPro does not receive or store full payment card numbers or card security codes.
Customer contact and transaction context
A business customer may import or send information such as customer name, email address, phone number, external customer identifier, order/reference number, transaction date, location, transaction status, amount, currency, or similar business context used to determine who should receive a review request.
Review invitations, feedback, and reviews
We process review-request status, email subject and recipient, send/delivery events, reminders, star ratings, private feedback, public review text, display name, review date, business responses, moderation/publication status, and whether a review can be associated with an imported customer transaction.
Email engagement information
Review invitation emails may contain a small tracking image and unique redirect links that allow eReviewPro to record approximate opens and clicks. Email privacy features and image preloading can make open information approximate rather than definitive.
Review widget analytics
When an eReviewPro review widget is embedded on a website, we may record widget impressions, clicks to read reviews, clicks to write a review, referring page or referring host, widget layout/theme, browser user-agent information, and a cryptographic hash derived from the visitor's IP address. These analytics are used to provide the business customer with widget engagement reporting and to detect abuse. We do not use this data for targeted advertising.
Device, security, and operational information
We may process IP addresses or cryptographic hashes derived from IP addresses, browser and device information, session identifiers, request identifiers, authentication attempts, rate-limit events, audit logs, application errors, API usage, webhook activity, and similar technical information needed to operate and protect the Service.
3. Where information comes from
We may receive information:
- directly from account users, such as during signup, account administration, or support;
- from business customers, through CSV imports, API requests, manual entry, or other integrations;
- from review participants, when someone rates a business, submits private feedback, or writes a review;
- automatically, through account sessions, security logging, email tracking, public review widgets, and API/webhook activity;
- from service providers, such as Stripe for billing events and Mailjet for email delivery, bounce, complaint, and unsubscribe events.
4. How we use information
We use information as reasonably necessary to:
- create and administer accounts, workspaces, locations, users, and permissions;
- import and manage customer contact records and transaction context;
- send requested review invitations and reminders;
- collect private feedback and review responses;
- publish reviews when a business customer elects to publish them;
- provide public review profiles, review badges, widgets, and engagement reporting;
- process subscriptions, invoices, payment status, cancellations, and plan changes;
- honor unsubscribe and suppression requests and prevent additional sends where applicable;
- provide reporting, customer support, troubleshooting, and service communications;
- authenticate users, prevent fraud and abuse, rate-limit automated activity, and investigate security events;
- operate APIs, webhooks, scheduled jobs, backups, and other service infrastructure;
- comply with legal obligations, enforce our Terms, and protect rights, safety, and property;
- analyze aggregated or de-identified service information to improve reliability and product functionality.
6. Cookies and similar technologies
eReviewPro uses first-party cookies and similar storage primarily for authentication, session security, CSRF protection, and user preferences. Disabling essential cookies may prevent account features from working.
Customer review invitations may use a unique tracking link and a small image to record approximate open/click activity. Public review widgets may record aggregate engagement as described above. We do not currently use third-party advertising cookies on the eReviewPro Service.
7. Reviews, private feedback, and public visibility
eReviewPro supports both private feedback and public review content. A review submitted through eReviewPro is not necessarily published automatically. A business customer may review content before choosing whether it appears on its eReviewPro public profile or website widget.
When eReviewPro displays a curated subset of reviews, the product is designed to describe those reviews as selected, featured, or otherwise not necessarily representative of every submission. Businesses may not use eReviewPro to falsely claim that a selectively displayed set represents all reviews received or to unlawfully suppress reviews based solely on negative sentiment.
A “verified customer” or similar indicator is intended to mean that eReviewPro could associate the review with customer or transaction information supplied to the Service. It does not mean that eReviewPro independently investigated every factual statement in a review.
8. Data retention
We retain information for as long as reasonably necessary to provide the Service, maintain account and billing records, honor unsubscribe/suppression requests, resolve disputes, prevent abuse, meet legal or accounting requirements, and enforce agreements.
Business Customer Data is generally retained while the applicable workspace is active or for a reasonable period afterward unless the customer requests deletion, subject to legal, security, backup, fraud-prevention, or suppression-list requirements. Deleted data may remain for a limited period in backups or logs until those systems are rotated.
Suppression information may be retained after other records are deleted when necessary to remember that an email address should not receive additional review invitations.
9. Security
We use administrative, technical, and organizational safeguards appropriate to the nature of the Service, including encrypted web connections, password hashing, role-based access controls, tenant separation, session controls, rate limiting, security headers, audit logging, provider webhook authentication, and monitoring for operational errors and suspicious activity.
No internet service can guarantee absolute security. Customers are responsible for maintaining secure credentials, limiting user access appropriately, protecting API keys, and promptly notifying us of suspected unauthorized account access.
10. Your privacy choices and rights
Account users
Business account users can update certain profile and business information directly in eReviewPro. Account administrators can manage team access and other workspace information.
Review invitation recipients
Review invitation emails provide an unsubscribe mechanism. When an unsubscribe is processed, eReviewPro maintains suppression information so the recipient is not repeatedly invited by the applicable sender as configured by the Service.
Business Customer Data
If a business customer supplied your information to eReviewPro, your request may need to be handled by that business because it controls the underlying customer relationship and determines why the data was provided to us. You may contact us and we will direct or assist with the request as appropriate.
U.S. state privacy rights
Depending on where you live and whether a particular state privacy law applies to our processing, you may have rights to request access to personal information, correction, deletion, a portable copy, information about disclosures, or an appeal of a privacy-request decision. Where applicable, you may also have rights relating to sale, targeted advertising, or certain sensitive information.
Because eReviewPro does not currently sell personal information or use it for cross-context behavioral advertising, we do not currently provide a separate “Do Not Sell or Share” advertising opt-out control.
11. California and similar U.S. state disclosures
The following summary is provided for transparency and applies to the extent a state privacy law requires these disclosures. The categories reflect the current eReviewPro Service.
| Category | Examples in eReviewPro | Primary purposes | Typical recipients |
|---|---|---|---|
| Identifiers | Name, email, phone, account IDs, customer IDs, IP or hashed-IP information | Accounts, review requests, security, support, abuse prevention | Business customer, infrastructure providers, Mailjet where needed for email |
| Commercial information | Order/reference number, transaction date/status, amount, location, subscription information | Review-request eligibility, reporting, subscription administration | Business customer; Stripe for eReviewPro billing where applicable |
| Internet/network activity | Session activity, browser/user agent, referral information, email opens/clicks, widget impressions/clicks | Security, delivery reporting, widget analytics, troubleshooting | Business customer in reports; infrastructure/service providers as needed |
| Account credentials | Password hashes, session identifiers, API-key hashes | Authentication and account security | Generally maintained within eReviewPro systems; not disclosed for advertising |
| Communications and content | Private feedback, review text, ratings, support messages, business responses | Review management, support, public display when authorized | Business customer; public when a review is published |
| Professional/business information | Business name, role, location, team membership | Workspace administration and support | Authorized workspace users and service providers as needed |
We do not currently sell these categories of personal information or share them for cross-context behavioral advertising. We do not knowingly sell or share personal information of individuals under 16 for such purposes.
We will not discriminate against an eligible individual for exercising privacy rights provided by applicable law.
12. Children's privacy
eReviewPro business accounts are intended for adults acting for businesses and organizations. The Service is not directed to children under 13, and we do not knowingly create business accounts for children. Business customers should not intentionally upload children's personal information unless they have determined that doing so is lawful and appropriate for their use of the Service.
13. United States processing
eReviewPro is operated from the United States. Information may be processed and stored in the United States and in other locations where our service providers operate. If you access the Service from another country, those locations may have privacy laws that differ from those in your jurisdiction.
14. Changes to this Privacy Policy
We may update this Privacy Policy when the Service, our providers, or legal requirements change. We will post the revised policy on this page and update the effective or last-updated date. If a change materially affects how we use information, we may provide additional notice where appropriate.
15. Contact us
Questions, privacy requests, or concerns about this policy can be directed to: