Legal
Privacy policy
Last updated: May 2026
1. Information we collect
When you create an account we collect your email address, full name and any information you provide in your brand voice profile. When you connect your Google Business Profile we access your business reviews, business name, address and review reply history through the Google Business Profile API. We also collect usage data such as pages visited, features used and timestamps of actions taken within the platform.
2. How we use your information
We use your information to provide and improve the Revly service, generate AI-powered review reply drafts, post approved replies to Google on your behalf, send you transactional emails such as weekly summaries and trial reminders, process payments through Lemon Squeezy and communicate with you about your account. We do not sell your personal information to third parties.
3. Data storage and security
Your data is stored securely on servers provided by Supabase and Vercel. All data is transmitted over encrypted HTTPS connections. OAuth tokens for Google Business Profile access are encrypted at rest using AES-256 encryption. We implement industry-standard security measures to protect your information from unauthorised access, alteration, disclosure or destruction.
4. Third party services
We use the following third party services to operate Revly: Google Business Profile API for review monitoring and reply posting, Lemon Squeezy for payment processing, Supabase for database and authentication, Resend for transactional emails, and AI providers including Groq, Anthropic and OpenAI for generating reply drafts. Each of these services has their own privacy policy governing their use of your data.
5. Google API disclosure
Revly's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only access Google Business Profile data that is necessary to provide the review management service, and we do not use this data for any other purpose.
6. Data retention
We retain your account data for as long as your account is active. If you delete your account we will remove your personal information, brand voice profiles and draft history within 30 days. Review data synced from Google may be retained in anonymised form for analytics purposes.
7. Your rights
You have the right to access, correct or delete your personal information at any time. You can export your data from your account settings or by contacting us directly. If you are based in the UK or EU, you have additional rights under GDPR including the right to data portability and the right to object to processing.
8. Cookies
We use essential cookies to maintain your authentication session and remember your preferences. We do not use tracking cookies or third party advertising cookies.
9. Changes to this policy
We may update this privacy policy from time to time. We will notify you of any material changes by email or by posting a notice on the platform.
10. Contact
If you have any questions about this privacy policy, please contact us at hello@revly.ai