Privacy Policy

1. Information We Collect

1.1 Information You Provide to Us

We collect information that you voluntarily provide when using ReviewBuddy:

• Account Information: Email address, name (if provided via Google OAuth), and password (encrypted)
• Trustpilot URLs: Company URLs you submit for analysis
• Payment Information: Processed securely through Stripe (we do not store credit card details)
• Communications: Messages you send to our support team at info@ticketbuddy.ai

1.2 Automatically Collected Information

When you access our service, we automatically collect:

• Usage Data: Pages visited, features used, time spent, analysis requests
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies: Session cookies for authentication and functionality (see Section 5)
• Log Data: Server logs including timestamps, errors, and performance metrics

1.3 Third-Party Data

We collect publicly available review data from Trustpilot when you request an analysis:

• Public Reviews: Review text, ratings, dates, reviewer names (as publicly displayed on Trustpilot)
• Company Information: Company name, logo, Trustpilot rating (publicly available)

Note: We only collect data that is publicly accessible on Trustpilot. We do not access private or restricted information.

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Service Delivery

• Provide AI-powered sentiment analysis and insights from Trustpilot reviews
• Generate reports, charts, and visualizations
• Enable the Q&A feature to query your analyzed data
• Process and track your credit usage
• Save and retrieve your analysis history

2.2 Account Management

• Create and manage your user account
• Authenticate your identity and prevent unauthorized access
• Process payments and manage subscriptions
• Send account-related notifications (e.g., credit balance, analysis completion)

2.3 Service Improvement

• Analyze usage patterns to improve our AI models and features
• Monitor and improve application performance
• Debug errors and fix technical issues
• Develop new features based on user needs

2.4 Communication

• Respond to your support inquiries
• Send important service updates and security alerts
• Provide tips and best practices (with your consent)

2.5 Legal Compliance

• Comply with applicable laws and regulations
• Enforce our Terms of Service
• Protect against fraud, abuse, and security threats
• Respond to legal requests and prevent harm

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

3.1 Service Providers

We work with trusted third-party service providers who assist in operating our service:

• Azure (Microsoft): Cloud hosting and infrastructure
• MongoDB Atlas: Database storage
• Azure OpenAI: AI/LLM processing for sentiment analysis
• Stripe: Payment processing
• Google: OAuth authentication (if you choose to sign in with Google)
• Email Service Providers: Sending OTP codes and notifications

These providers are contractually obligated to protect your data and use it only for providing services to us.

3.2 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Government requests
• Protection of our rights, property, or safety
• Emergency situations involving danger of death or serious physical injury

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you before your information is transferred and becomes subject to a different privacy policy.

3.4 With Your Consent

We may share your information for other purposes with your explicit consent.

4. AI and Data Processing

4.1 AI Processing

ReviewBuddy uses artificial intelligence to analyze reviews:

• Azure OpenAI: Review text is sent to Azure OpenAI services for sentiment analysis, theme extraction, and natural language processing
• Purpose: Generate insights, identify trends, extract themes, and answer questions about your data
• Data Retention: Azure OpenAI does not retain your data for model training (per Microsoft's enterprise agreement)

4.2 Data Anonymization

When using AI services, we may anonymize data to protect privacy while maintaining analytical accuracy.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

5.1 Essential Cookies

• Authentication: Keep you logged in and secure your session
• Security: Prevent fraud and abuse

5.2 Analytics Cookies

• Google Analytics (GA4): Track website usage and visitor behavior
• Usage Analytics: Understand how users interact with our service
• Performance Monitoring: Identify and fix technical issues

5.3 Cookie Consent Management

We provide a GDPR-compliant cookie consent banner that allows you to:

• Accept All: Consent to all cookie categories
• Reject All: Only allow essential cookies required for basic functionality
• Customize: Choose which categories of cookies to allow
• Manage Preferences: Change your cookie preferences at any time

Cookie Control: You can control cookies through your browser settings or our cookie preference center. However, disabling essential cookies may affect service functionality. Your consent choices are stored for 365 days.

5.4 Managing Your Cookie Preferences

To update your cookie preferences at any time, you can:

• Click on the cookie settings link in the footer of any page
• Clear your browser cookies to reset all preferences
• Use your browser settings to block specific cookies

6. Data Security

We implement industry-standard security measures to protect your information:

6.1 Security Measures

• Encryption: HTTPS/TLS for data in transit, encrypted passwords with bcrypt
• Access Controls: Role-based access, multi-factor authentication for admin accounts
• Secure Infrastructure: Azure cloud with enterprise-grade security
• MongoDB Security: Encrypted connections, IP whitelisting, authentication
• Regular Updates: Security patches and vulnerability monitoring

6.2 Data Breach Protocol

In the event of a data breach, we will:

• Notify affected users within 72 hours
• Report to relevant authorities as required by law
• Take immediate steps to secure systems and prevent further breaches
• Provide guidance on protective measures users can take

7. Data Retention

We retain your information for as long as necessary to provide our services:

• Account Data: Retained while your account is active, deleted within 90 days of account closure
• Analysis Results: Retained for 12 months or until you delete them
• Payment Records: Retained for 7 years for tax and legal compliance
• Log Data: Retained for 90 days for security and debugging

8. Your Rights and Choices

You have the following rights regarding your personal information:

8.1 Access and Portability

• Request a copy of your personal data
• Export your analysis results in PDF or JSON format

8.2 Correction and Update

• Update your account information at any time
• Request correction of inaccurate data

8.3 Deletion

• Delete your account and associated data
• Delete specific analysis results
• Request deletion of personal information (subject to legal retention requirements)

8.4 Opt-Out

• Unsubscribe from marketing emails (if we send them)
• Disable non-essential cookies

To exercise your rights: Contact us at info@ticketbuddy.ai

9. Children's Privacy

ReviewBuddy is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we discover we have collected information from a child, we will delete it immediately. If you believe we have collected information from a child, please contact us at info@ticketbuddy.ai.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence:

• Azure Data Centers: Data may be stored in Microsoft Azure regions worldwide
• Data Protection: We ensure appropriate safeguards are in place for international transfers
• GDPR Compliance: For EU users, we comply with GDPR requirements including Standard Contractual Clauses

11. Third-Party Links

Our service may contain links to third-party websites (e.g., Trustpilot). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending an email notification for significant changes

Your continued use of ReviewBuddy after changes constitutes acceptance of the updated policy.

13. Your California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request details about personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell data)
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

14. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Legal Basis for Processing: We process data based on consent, contract performance, legitimate interests, and legal obligations
• Right to Object: Object to processing based on legitimate interests
• Right to Restriction: Request restriction of processing in certain circumstances
• Right to Lodge a Complaint: Contact your local data protection authority

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Consent

By using ReviewBuddy, you consent to this Privacy Policy and agree to its terms.