PRIVACY POLICY

Publicly available business data. To generate reputation reports, we collect publicly available information about businesses, including business name, address, phone number, website, and public Google reviews (review text, star ratings, review dates, and whether the business responded). This is information any member of the public can view. Account information. When you create an account, we collect your name, email address, mobile number (for alerts, if you enable them), business details, and response preferences you configure during setup. Google Business Profile connection. If you connect your Google Business Profile, we access it solely to (a) read your business's reviews and (b) post owner responses on your behalf, according to the settings you configure. We do not access other Google account data. You may disconnect at any time from your account settings or your Google account permissions page. Payment information. Payments are processed by Stripe. We never store your full card number. Stripe's privacy policy governs payment data: stripe.com/privacy Usage data. Standard technical data such as IP address, browser type, and pages visited, used for security and product improvement.

• To generate reputation reports and scores • To provide the subscription service: drafting and posting review responses per your settings, sending alerts you've enabled, and producing your monthly reports • To send service communications (receipts, alerts, account notices) • To send prospecting emails to businesses using publicly available information, in compliance with the CAN-SPAM Act (see Section 5) • To improve our service We do not sell personal information.

Review responses are drafted using artificial intelligence according to the tone, sign-off, restrictions, and posting rules you configure. Responses are posted under your authority and settings. Certain review categories (e.g., legal threats, safety claims) are always held for human review and never posted automatically.

We share information only with service providers necessary to operate ReviewClock (payment processing, email delivery, cloud hosting, data providers), when required by law, or in a business transfer. Service providers are bound to use data only to provide services to us.

Prospecting emails include our physical mailing address and a working unsubscribe link. Unsubscribe requests are honored promptly and permanently: opted-out addresses are added to a suppression list checked before every future send. To opt out or request removal, use the unsubscribe link in any email or contact us below.

Account data is retained while your account is active and deleted or anonymized upon request following account closure, except as required for legal or accounting purposes. Publicly available business data may be refreshed or removed upon verified request from the business. To request deletion, email hello@reviewclocks.com.

We use industry-standard measures including encryption in transit, access controls, and secured credentials. No system is perfectly secure; we cannot guarantee absolute security.

ReviewClock is a business service not directed at anyone under 18. We do not knowingly collect information from minors.

Depending on your state (including under laws such as the CCPA for California residents), you may have rights to access, correct, or delete personal information, and to opt out of certain processing. Contact us to exercise these rights; we will respond as required by applicable law.

We will post updates to this policy here with a revised effective date. Material changes will be communicated to account holders by email.

ReviewClock hello@reviewclocks.com Google is a trademark of Google LLC. ReviewClock is not affiliated with or endorsed by Google.