Privacy Policy
Last updated 20 August 2026
ReviewDesk is operated by APURI STUDIO INC (“we”, “us”). This policy explains what we collect when you use the service, why we collect it, and who else sees it.
We do not sell your data, and we do not use your customers’ reviews to train anyone’s models.
What we collect
From you
- Your email address and a hashed password
- Your restaurant’s name, address and menu details
- A mobile number and email address for alerts, if you provide them
- Billing details are handled entirely by Stripe. We never see or store your card number.
From your Google Business Profile
- Your reviews: the reviewer’s public display name, star rating, review text and date
- Your business listing name, address and location
- An access credential that lets us read reviews and post replies on your behalf
We never receive your Google password. Access is granted through Google’s own authorisation screen and is limited to your Business Profile. You can revoke it at any time from your Google account settings, and we will stop immediately.
About nearby businesses
For competitor benchmarking we record the public rating and review count of nearby restaurants at points in time. We keep our own measurements and the place identifiers, not copies of their review content.
How your Google credential is stored
The credential that lets us act on your listing is encrypted before it is written to our database, using a key held separately from the data. Someone who obtained a copy of our database would not be able to use it.
Who else processes your data
We use these companies to run the service. Each sees only what it needs to.
| Company | What it handles |
|---|---|
| Zernio | Connects to Google to read reviews and post replies |
| OpenAI | Generates draft replies and analyses review themes |
| Neon | Hosts our database |
| Railway, Vercel | Run the application |
| Stripe | Payments and card details |
| Twilio | Sends alert text messages |
| Postmark | Sends alert and report emails |
| Google Places | Public data about nearby restaurants |
Review text is sent to OpenAI to draft a reply and to categorise what customers mentioned. Under OpenAI’s API terms this content is not used to train their models.
What we publish
When you approve a reply — or when you have switched on automatic replies for positive reviews — we post that text publicly on Google under your business’s name. We keep a permanent record of every reply that went out, who approved it and when, so you can always see what was published on your behalf.
How long we keep it
- Reviews and reports: for as long as your account is open
- Uploaded menu files: not retained. We extract the text and discard the file.
- Competitor measurements: kept as our own historical record, not as copies of Google’s content
- After you close your account: deleted within 30 days, except records we are required to keep for tax and accounting
Your rights
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Email privacy@reviewdesk.ca and we will respond within 30 days.
You can disconnect Google at any time from your settings, or revoke our access directly in your Google account. Neither requires talking to us.
Changes
If we change this policy in a way that materially affects you, we will email you before it takes effect.
Contact
APURI STUDIO INC
privacy@reviewdesk.ca