Privacy Policy

How RevuKit handles your data

This Privacy Policy explains how RevuKit collects, uses, and shares information when you use our website, widgets, and related services.

Information you provide

  1. Account details such as email address, premium ID, and subscription plan.
  2. Business information you connect, including Google Business place IDs and business names.
  3. Support or feedback messages you send through RevuKit.

Information collected automatically

  1. Usage data such as pages viewed, widget interactions, and feature usage (with your consent).
  2. Technical data like IP address, device information, and browser type for security and rate limiting.
  3. Domain information to validate widget access and enforce subscription limits.

Third-party review data

RevuKit processes limited publicly available personal data (such as reviewer names and profile images) solely for the purpose of displaying review widgets requested by our customers. This data is sourced from third-party platforms and may be cached temporarily to improve performance. We do not enrich, profile, or resell this data. Review data is retained only for as long as necessary to provide the service and is periodically refreshed.

Cookies and local storage

We use browser local storage and similar technologies to ensure our widgets load quickly and function correctly. These technologies store cached review data temporarily on your device and do not track users across websites. They are strictly necessary for service functionality and performance.

We also use Google reCAPTCHA to protect forms and prevent abuse. Optional analytics cookies (Google Analytics via Firebase) are only used with your explicit consent.

How we use information

We use information to provide and improve RevuKit, deliver widgets, process payments, and support customers. We also use it to secure the service, prevent fraud, and enforce usage limits. Our legal bases include performance of contract and legitimate interest.

How we share information

We share information with trusted service providers as needed to deliver RevuKit:

  1. Stripe for payments and subscription management (we do not store raw payment card data).
  2. Firebase (Google) for authentication, database, and analytics.
  3. Google Places API for review data retrieval.
  4. Vercel and cloud hosting providers for caching, rate limiting, and infrastructure.
  5. Email service providers for account notifications.

We do not sell personal data to third parties.

Data retention and security

We retain customer data as long as necessary to provide the service, comply with legal obligations, and enforce our agreements. Cached review data is stored temporarily (24 hours for paid accounts, 30 days for free accounts) and refreshed periodically. We use reasonable security measures to protect data, but no system is 100% secure.

Your choices

You can manage analytics consent using the cookie banner. You can clear cached widget data at any time via your browser settings. You may contact us to request access, correction, or deletion of your account data.

International data transfers

RevuKit uses cloud infrastructure providers that may store and process data in various regions. By using RevuKit, you consent to the transfer of your information to these locations.