Privacy

Draft. To be reviewed by counsel before launch.

What we collect from reviewers

Your name, your email address, the review itself and the optional order facts you enter. We also store a hashed form of your IP address and your browser identifier to detect abuse. We never store the plain IP address.

What is shown publicly

Only what you choose: your full name, first name and initial, or nothing. Your email is never shown to anyone, including the vendor. Vendors see the review text and your chosen display name, nothing more.

What vendors give us

Vendors upload customer email addresses to send review invites. We use them only to send the invite, never for marketing, and we do not share them with anyone. Invites that go unused are deleted after 90 days.

Cookies

A session cookie for signed-in vendors and admins. No advertising or tracking cookies.

Your rights

You can ask us to change how your name is displayed, correct your review, or delete it and your data. Deletion requests are done within 30 days and confirmed by email.

Where data lives

Databases hosted by Supabase in the United States. Email sent through Amazon Web Services.