Privacy Policy

1. Who we are

This policy explains how ReviewJet ("ReviewJet", "we", "us") collects, uses and protects personal data when you visit reviewjet.com or create a ReviewJet account. ReviewJet operates the website and the ReviewJet service. For any privacy question or request, contact us at app@reviewjet.com.

This policy covers our own website and signup flow. Where customers use ReviewJet to process their end users' data (for example, sending review requests to their customer lists), we act as a processor under the customer's instructions; a Data Processing Agreement is available on request.

2. Data we collect

When you sign up for ReviewJet, we collect:

• Email address (required), used to create and confirm your account.
• Company name (optional), if you choose to provide it.
• Signup context: which button or page you signed up from, and UTM parameters (utm_source, utm_medium, utm_campaign) if present in the URL, so we understand which of our pages work.
• Technical data: your IP address and browser user agent string, recorded at the moment of signup for security and abuse prevention.

When you browse the site without signing up, we collect only the analytics and cookie data described in sections 4 and 5. We do not collect payment card data through this website.

3. How we use your data

• To create your account and send you a six-digit confirmation code by email, verifying that the address belongs to you.
• To send you service emails about your account and workspace. These are transactional, not marketing.
• To attribute signups to pages and campaigns (via the source and UTM fields), so we can improve the site.
• To detect and prevent abuse, such as automated or fraudulent signups (via IP and user agent).
• To respond when you email us.

We do not sell personal data, and we do not share it with third parties for their own advertising.

4. Analytics

We use Microsoft Clarity to understand how visitors use the site: which pages are read, where people click and how far they scroll. Clarity may record session replays and use cookies or similar identifiers as described in Microsoft's privacy documentation. We configure Clarity to mask text input content. Analytics data is used in aggregate to improve the site, not to identify individual visitors.

5. Cookies

We use a small number of cookies:

• Essential cookies: a session cookie and a CSRF token that make the signup flow work securely. These cannot be switched off.
• Analytics cookies: set by Microsoft Clarity as described above.

You can block or delete cookies in your browser settings; essential features may stop working if you block the essential ones.

6. Legal bases

Where the GDPR or similar laws apply, we process your data on these bases: performance of a contract (creating and confirming your account), legitimate interests (site analytics, attribution and abuse prevention, balanced against your rights), and consent where required for non-essential cookies. You may withdraw consent at any time.

7. Who we share data with

We share personal data only with the service providers that run ReviewJet:

• Amazon Web Services: hosting and databases (us-east-1 and eu-central-1).
• Postmark: delivery of transactional email, including confirmation codes.
• Cloudflare: content delivery network and DDoS protection.
• Microsoft Clarity: website analytics.

We may also disclose data if required by law, or as part of a merger or acquisition, in which case this policy continues to apply to the transferred data. More detail lives on our security page.

8. International transfers

ReviewJet is operated from the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, your data may be transferred to the US. Where required, transfers are protected by the EU Standard Contractual Clauses or an equivalent safeguard.

9. Retention

We keep signup data for as long as your account exists. If you ask us to delete your data, we remove it from production systems within 30 days and from encrypted backups within 90 days. Aggregated analytics that cannot identify you may be kept longer.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, email app@reviewjet.com from the address on your account; we respond within 30 days. If you are in the EEA or UK, you also have the right to lodge a complaint with your data protection authority.

11. Children

ReviewJet is a business tool and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The effective date at the top always reflects the current version, and material changes will be announced by email to account holders before they take effect.

13. Contact

Questions about this policy or your data: app@reviewjet.com.