← Back to Trust Center

Privacy Policy

Effective date: January 1, 2026
Last updated: May 29, 2026

ReviewWheel LLC ("ReviewWheel," "we," "us," or "our") is a Georgia limited liability company. This Privacy Policy explains how we collect, use, disclose, and protect personal information in connection with the ReviewWheel website (reviewwheel.com), the signup flow (start.reviewwheel.com), and the ReviewWheel application (app.reviewwheel.com) (together, the "Services").

By using the Services, you agree to this Privacy Policy. If you do not agree, do not use the Services.

1. Who this policy covers, and our two roles

ReviewWheel serves home-service businesses ("Customers") who use the Services to request Google reviews from their own past and present customers ("Consumers"). Personal information flows through the Services in two distinct relationships, and our role differs in each:

  • When we handle a Customer's own account and business information, we act as a controller — we decide how and why that information is used. Sections 2–9 of this policy govern that information.
  • When we handle Consumer information that a Customer uploads or connects (e.g., a past-customer list) so that we can send review requests on the Customer's behalf, we act as a processor / service provider acting on the Customer's instructions. The Customer is the controller of that information. How we process Consumer information is governed by our agreement with the Customer (including the Data Processing Agreement) and summarized in Section 10.

If you are a Consumer who received a review request and have questions about how your information is used, the business that served you is the controller — contact them directly, or see Section 10.

2. Information we collect from Customers

2.1 Account and business information

When a Customer signs up, we collect: first and last name, email address, mobile phone number, business name, business website, business address, business type/trade, number of employees, and (optionally) an EIN if the Customer later elects a dedicated messaging number.

2.2 Payment information

We use Stripe to process subscription payments. Card details are collected and stored by Stripe; ReviewWheel does not store full card numbers. We receive limited billing metadata (e.g., card brand, last four digits, billing status) from Stripe. See Stripe's privacy policy for how Stripe handles payment data.

2.3 Google Business Profile information

With the Customer's authorization via Google OAuth, we access the Customer's Google Business Profile using the management scope (business.manage) to (a) retrieve the business's location identifier and public review link to route review requests, and (b) post replies to the Customer's Google reviews on the Customer's behalf, including AI-assisted replies. See Section 4 for details and our Google API Limited Use commitments.

2.4 Usage, device, and cookie information

We collect information about how the Services are used — log data, device and browser information, IP address, and similar analytics — and we use cookies and similar technologies as described in our Cookie Policy.

2.5 Communications

When you contact support, respond to our emails, or interact with our chat/support tools, we collect the contents of those communications.

3. How we use Customer information

We use Customer information to: provide, operate, and maintain the Services; create and manage accounts; process payments and administer trials, subscriptions, refunds, and the money-back guarantee; configure and run review-request campaigns; send account, transactional, security, and service communications (from auth.reviewwheel.com, display sender [email protected]); provide customer support; improve and develop the Services; detect, prevent, and address fraud, abuse, and security issues; and comply with legal obligations.

We do not sell Customer personal information.

4. Google API Services — access and Limited Use

ReviewWheel's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Access we request. With the Customer's authorization via Google OAuth, ReviewWheel requests the Google Business Profile management scope (https://www.googleapis.com/auth/business.manage). We use this access to:

  • retrieve the Customer's business location identifier and public Google review link, so review requests route to the correct review page; and
  • post replies to the Customer's Google reviews on the Customer's behalf, including AI-assisted draft replies generated according to the Customer's configuration (the "Auto AI review replies" feature).

We request management-level (business.manage) access because posting review replies is a write operation that read-only scopes do not permit. We do not otherwise modify the Customer's Google Business Profile listing.

Limited Use commitments.

  • We use Google user data solely to provide and improve the user-facing features described in this policy. We do not use it for advertising.
  • We do not sell Google user data and do not transfer it to third parties except as necessary to provide or improve these user-facing features, for security purposes, or to comply with applicable law. To generate AI-assisted review replies, review content is processed by our AI sub-processor (OpenAI) solely to produce the reply; that sub-processor does not use the content to train its models.
  • We do not allow humans to read Google user data unless: (a) we have the Customer's affirmative consent for specific data; (b) it is necessary for security purposes (e.g., investigating abuse); (c) it is required to comply with applicable law; or (d) the data is aggregated and anonymized and used for internal operations.

A Customer may revoke ReviewWheel's access to their Google Business Profile at any time via their Google account permissions or by contacting [email protected].

5. How we share information

We share information with sub-processors — third-party services that process information on our behalf to deliver the Services (for example, cloud hosting, messaging, email, payments, and AI-assisted messaging providers). Our current sub-processors are listed at /sub-processors.

We may also disclose information: to comply with law, legal process, or enforceable governmental requests; to enforce our terms and protect the rights, property, and safety of ReviewWheel, our Customers, Consumers, or others; and in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this policy or provide notice.

We do not sell personal information.

6. Review-request messaging (SMS and email)

Review requests are sent on behalf of the Customer to that Customer's own Consumers — people who have an existing business relationship with the Customer (the Customer uploads or connects a list of their own past and present customers). Requests may be delivered by SMS, by email, or both.

SMS. Review-request SMS is sent through ReviewWheel's shared messaging infrastructure using ReviewWheel's carrier-registered messaging program, on the Customer's behalf. These messages are one-way and transactional in nature (they contain a link to the business's Google review page). Replying STOP to any message opts the recipient out immediately; opt-outs are honored and synced back to the originating Customer's account so the Consumer is not messaged again. Message and data rates may apply. A Customer may, in the future, optionally adopt their own dedicated messaging number, in which case messaging runs under that Customer's own carrier registration.

Email. Review-request email is sent on the Customer's behalf from a ReviewWheel-operated sending domain (mail.reviewwheel.com), with the Customer's business name shown in the From line so the Consumer recognizes the sender. We process the Consumer's email address to deliver the request and to track whether the review link was clicked. Every review-request email includes an opt-out/unsubscribe mechanism, which we honor.

Account-related SMS and email to Customers (e.g., security or service notices) are sent only with the Customer's opt-in at signup, from auth.reviewwheel.com (display sender [email protected]).

Because the Services operate in the United States only, messaging compliance is governed by a single set of US regimes — A2P 10DLC carrier requirements and the Telephone Consumer Protection Act (TCPA) for SMS, and CAN-SPAM for email.

7. Data retention

We retain personal information for as long as needed to provide the Services and for legitimate business or legal purposes (e.g., accounting, dispute resolution, fraud prevention, and legal compliance). When information is no longer needed, we delete or de-identify it.

Specifically: we retain Customer account and business data for up to 12 months after account cancellation (to support reactivation/win-back and for legal and accounting purposes), after which we delete or de-identify it. We retain Consumer contact lists only while the Customer's account is active; after cancellation we hold them for a grace period of 30 days to allow reactivation, then delete them. Consumer information processed on a Customer's behalf is otherwise retained and deleted in accordance with our agreement with that Customer (the Data Processing Agreement) and Section 10.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption of sensitive credentials (such as Google OAuth tokens) at rest. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your privacy rights (United States)

ReviewWheel operates in the United States only. Several US states have comprehensive privacy laws granting residents rights over their personal information. We extend the rights below to all US users, and we honor the specific requirements of the state laws we recognize.

Your rights. Subject to identity verification and legal exceptions, you may:

  • Access / know — request the categories and specific pieces of personal information we hold about you, and how we use and disclose it;
  • Correct — request correction of inaccurate personal information;
  • Delete — request deletion of your personal information;
  • Portability — request a portable copy of your personal information;
  • Opt out — opt out of the "sale" or "sharing" of personal information and of targeted advertising and certain profiling (note: we do not sell personal information, "share" it for cross-context behavioral advertising, or use it for targeted advertising); and
  • Non-discrimination — not receive discriminatory treatment for exercising these rights.

State frameworks we recognize: California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and Utah (UCPA). We will extend recognition as additional state comprehensive privacy laws take effect.

California residents. In addition to the rights above, California residents have the right under the CCPA/CPRA to know the categories of personal information collected, the sources, the business/commercial purposes for collection, and the categories of third parties to whom information is disclosed; to opt out of the sale or sharing of personal information (we do not sell or share as those terms are defined); to limit the use of sensitive personal information; and, under California's "Shine the Light" law, to request information about disclosures to third parties for their own direct-marketing purposes (we do not make such disclosures). California residents may use an authorized agent to submit requests.

How to exercise your rights. Contact [email protected]. We will verify your request as required by law before acting on it. If you are a Consumer (rather than a Customer), see Section 10 — requests about Consumer data are generally directed to the business that served you, as the controller.

10. Consumer information and the business-customer relationship

When a Customer uploads or connects a Consumer list (by CSV or CRM integration), ReviewWheel processes that Consumer information solely to send review requests on the Customer's behalf and to operate related features (e.g., follow-ups, opt-out handling, click tracking). In this context:

  • The Customer (the business) is the controller of the Consumer information; ReviewWheel is the processor / service provider acting on the Customer's documented instructions.
  • We do not use Consumer information for our own marketing, do not sell it, and do not share it except with sub-processors needed to deliver the messages (Section 5).
  • Consumers can opt out of messages at any time (Section 6).
  • Requests by a Consumer to access or delete their information are generally directed to the Customer (the controller). If a Consumer contacts us directly, we will refer the request to the relevant Customer and assist as required by law and our agreement with the Customer.

Our processing of Consumer information is further described in our Data Processing Agreement.

11. Where we operate and data location

The Services are intended only for businesses located in the United States and are not directed to users outside the United States. Signup is restricted to US-based businesses — the registration flow does not accept non-US phone numbers or addresses — so the Services are not available to, and should not be used by, users outside the United States.

Personal information is processed and stored in the United States.

12. Children's privacy

The Services are business-to-business tools and are not directed to children. We do not knowingly collect personal information from children under 13, consistent with the U.S. Children's Online Privacy Protection Act (COPPA). If we learn we have collected personal information from a child under 13, we will delete it.

13. Third-party links and services

The Services may link to third-party websites and services (e.g., Google, Stripe). Their privacy practices are governed by their own policies, not this one.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, where required, provide additional notice. Continued use of the Services after an update constitutes acceptance.

15. Contact us

Questions about this Privacy Policy or our privacy practices:

ReviewWheel LLC (a Georgia limited liability company)
6500 Halcyon Way APT 581, Alpharetta, GA 30005
Privacy inquiries: [email protected] · General support: [email protected]