Legal
Privacy Policy
How Review Shark collects, uses, stores, discloses, and retains account, payment, usage, and review-management data.
Last updated: August 25, 2026
Overview
Review Shark provides Google Business Profile review monitoring, response workflow tools, automated draft assistance, account administration, billing support, and related analytics for businesses and their authorized team members. This Privacy Policy explains how we process personal data, business account data, and third-party review data when you use review-shark.com, app.review-shark.com, and related web or mobile experiences.
This policy is intended to describe our practices in plain language. It does not limit any privacy rights that cannot be waived under applicable law.
Data We Collect
- Account information: name, email address, login identifiers, organization membership, roles, support messages, account settings, and authentication events.
- Google Business Profile and review data: connected location information, public review text, review ratings, reviewer display names or profile metadata supplied by Google, review timestamps, reply status, and response drafts or approvals.
- Payment and billing records: subscription status, plan, invoices, payment logs, payment processor identifiers, cancellation history, tax and compliance records, and limited transaction metadata. We do not store complete card numbers.
- Usage metrics: dashboard activity, feature usage, audit logs, device/browser metadata, IP address, approximate location inferred from IP, performance data, error logs, and communication preferences.
- Support and communications: messages you send to us, accessibility barrier reports, opt-out requests, deletion requests, and related correspondence.
How We Use Data
- To deliver, secure, troubleshoot, and improve the Review Shark service.
- To connect authorized business accounts to Google Business Profile features, monitor reviews, prepare response drafts, support approval workflows, and maintain account history.
- To support automated responses or draft suggestions when enabled by an authorized account user.
- To process subscriptions, renewals, cancellations, refunds where applicable, invoices, and account administration.
- To provide analytics, product measurement, fraud prevention, security monitoring, legal compliance, and customer support.
- To send service notices, transactional emails, policy updates, and support replies.
Third-Party Disclosures and Sub-Processors
We disclose data only as needed to provide, secure, support, measure, or comply with the service. Categories of recipients may include:
- Hosting and infrastructure providers, including cloud application hosting, server hosting, databases, queues, caching, observability, logging, and storage providers such as Vercel or comparable infrastructure providers.
- Authentication and account providers used to sign users in and manage organizations, sessions, and permissions.
- Payment processors that process subscriptions, invoices, payment logs, tax information, disputes, refunds, and related billing events.
- AI sub-processors used to generate, evaluate, or assist with review response drafts and workflow automation. Review Shark may send review text, business context, prompt instructions, and limited account metadata necessary to provide the requested AI feature.
- Google services when you authorize Google Business Profile integrations and related review-management workflows.
- Analytics, performance, and security providers that help us understand usage, detect errors, maintain service quality, and prevent abuse.
- Professional advisors, regulators, or legal authorities where disclosure is required by law or reasonably necessary to protect rights, safety, or security.
We do not sell personal information for money. Some analytics or advertising technologies may be considered a “sale” or “sharing” under certain U.S. state privacy laws. You may use our Do Not Sell or Share My Personal Information form to opt out.
Data Storage, Security, and Retention
We use administrative, technical, and organizational safeguards designed to protect data against unauthorized access, loss, misuse, or alteration. No internet service can guarantee absolute security.
We retain account and service data for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, maintain security, and support legitimate business operations. Payment, tax, security, and audit records may be retained longer where required or permitted by law.
When an authenticated user submits an account deletion request, Review Shark is designed to queue deletion of the user’s account and associated personal data for processing 30 days from the date and time of the request. During that 30-day period, the account may be restricted or scheduled for removal. After processing, some information may remain in backups, security logs, payment records, or legally required archives for a limited period, generally up to 90 days for backups and logs unless a longer period is required by law.
Account and Data Deletion
Users must be able to request deletion of their entire account and associated personal data, not merely deactivate the account. The authenticated Review Shark application should make this available from the user’s Account Settings dashboard. Deletion requests are scheduled for completion 30 days after submission so that fraud prevention, billing, legal hold, and accidental-deletion safeguards can be honored.
If you cannot access your account, contact support@review-shark.com from the email address associated with your account.
Your Rights and Choices
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also have the right to withdraw consent, opt out of certain processing, or appeal a denied request.
To exercise privacy rights, email support@review-shark.com or use the relevant in-product control when available. We may need to verify your identity and authority before processing a request.
California Privacy Notice
This section applies to California residents and supplements the rest of this Privacy Policy. In the past 12 months, Review Shark may have collected the categories below:
| Category | Examples | Purpose |
|---|---|---|
| Identifiers | Name, email address, account IDs, IP address, payment processor IDs | Account access, support, billing, security |
| Commercial information | Subscription plan, invoices, payment logs, cancellation records | Billing, tax, accounting, service administration |
| Internet or network activity | Usage metrics, log data, device/browser metadata, feature activity | Analytics, security, troubleshooting, service improvement |
| Professional or business information | Business name, location details, Google Business Profile connection details | Service delivery and review workflow management |
| Audio, electronic, or similar information | Support messages, form submissions, review response content | Support, service delivery, compliance |
| Inferences | Product usage trends, account health signals, workflow recommendations | Analytics, customer success, product improvement |
We do not knowingly sell personal information for money. We may use third-party analytics or similar technologies that could be considered “sharing” or a “sale” under California law. You can opt out through the Do Not Sell or Share My Personal Information form.
California residents may request to know, access, delete, correct, and opt out of sale or sharing of personal information. We will not discriminate against you for exercising these rights.
Children and Minors
Review Shark is a business-to-business service intended only for authorized business users who are at least 18 years old, or the age of majority where they live if that age is higher. Review Shark is not directed to children or minors, and children or minors may not create accounts, join a business workspace, submit waitlist or support forms, connect third-party accounts, or otherwise use the service.
We do not knowingly collect, use, sell, share, or retain personal information from anyone under the applicable legal age threshold. For U.S. child privacy purposes, we do not knowingly collect personal information from children under 13. For jurisdictions with higher consent or majority thresholds, we apply the higher threshold by requiring Review Shark users to be adults who can act for a business.
Review Shark may process public Google Business Profile review data at the direction of an authorized business customer. Google review data does not provide Review Shark with a reliable age field for reviewers. If we learn that personal information in the service relates to a person under the applicable legal age threshold, we will delete or de-identify that information unless retention is required by law, security, fraud prevention, dispute resolution, or another lawful obligation.
If you believe Review Shark has collected or retained personal information from a child or minor, contact support@review-shark.com and include enough detail for us to locate and remove the information.
Contact
For privacy requests, deletion requests, accessibility reports, or questions, contact support@review-shark.com.