Privacy policy

Last updated: 11 April 2026

This Privacy Policy explains how ReviewStrike (“we”, “us”, “our”) collects, uses, and protects your information when you use our service at reviewstrike.co.

1. Information we collect

Account information: email address, password (hashed), full name.
Business information: business name, website, country, Google Business Profile URL (if provided).
Case information: the review URL, review text, your description of the situation, and any evidence files you upload.
Payment information: processed by Stripe. We never see or store your full credit card details. We store a Stripe customer ID and the last four digits for reference.
Gmail data: if you explicitly connect Gmail OAuth for monitoring, we read only messages from Google’s business review response channel. We do not read any other email. OAuth tokens are encrypted at rest and you can disconnect at any time.
Usage data: IP address, browser user-agent, pages visited, actions taken. Used for security and product improvement.

2. How we use your information

To provide the review-removal service (drafting submissions, lodging them with Google, tracking responses)
To process payments and send receipts
To send case status updates and product announcements
To detect and prevent fraud or abuse
To comply with legal obligations

3. Who we share with

We do not sell your information. We share data only with:

Google: the submission we file on your behalf contains the review URL and any evidence you upload that we deem relevant. This is the core purpose of the service.
Stripe: to process payments.
Anthropic (AI provider): review text and business context are sent to our AI model for classification and drafting. Anthropic does not train on API data and does not retain inputs for marketing or any other purpose beyond processing the request.
Our hosting provider (SiteGround): data is stored on SiteGround servers located in Australia.
Legal authorities: if required by law, subpoena, or court order.

4. Evidence file security

Uploaded evidence files are stored outside our public web root and are not accessible via any public URL. They are readable only by authorised ReviewStrike staff working on your case and by the systems that prepare and file your submission.

5. Data retention

We retain your account data and case history while your account is active and for up to 24 months after you close your account, for legal and accounting purposes. Evidence files are deleted 90 days after a case is fully resolved, unless you opt to keep them longer. Stripe retains payment records for the period required by Australian tax law.

6. Your rights

You have the right to: access the personal information we hold about you; correct inaccurate information; request deletion of your account and data; export your case history; object to certain processing; and withdraw Gmail OAuth consent at any time.

To exercise these rights, email privacy@reviewstrike.co.

7. Cookies

We use essential cookies for login sessions and security. We use privacy-respecting analytics (Plausible or similar) that do not use tracking cookies and do not collect personal data. We do not use advertising cookies.

8. International transfers

Our servers are in Australia. Some third-party services we use (Stripe, Anthropic) may process data in the United States or other jurisdictions. By using our service you consent to these transfers.

9. Children

Our service is not directed at individuals under 18. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email or dashboard notification.

11. Contact

Privacy questions: privacy@reviewstrike.co