Privacy Policy

1. Introduction

Welcome to Review Video ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and SaaS platform (the "Service").

If you have any questions or concerns about this policy, please contact us at [email protected].

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Your name and email address (via our authentication provider)
• Profile information you choose to provide
• Authentication tokens and session data

2.2 Subscription and Payment Information

When you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your full credit card number, CVC, or other sensitive payment details on our servers. We may receive and store:

• Stripe customer ID and subscription ID
• Last four digits of your payment card
• Billing address and card expiry date
• Transaction history and invoice records

2.3 Video and Review Data

When you use our Service to create videos, we collect and process:

• Business search queries you perform
• Reviews you select from public sources (Google, Trustpilot, Yelp, Facebook, Tripadvisor)
• Avatar selections and video generation preferences
• Generated video files and associated metadata
• Saved reviews in your library

2.4 Information Collected Automatically

When you visit our website, we may automatically collect:

• Browser type and version
• Operating system and device characteristics
• IP address and approximate location
• Pages visited, time spent, and navigation patterns
• Referring website addresses

3. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our site, maintain sessions, and understand usage. For full details, please see our Cookie Policy.

For users in the UK and EEA, certain cookies require consent under applicable ePrivacy rules. You can manage cookie preferences via your browser settings.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your video generation requests
• Manage your account and subscription
• Process payments and send billing-related communications
• Improve, personalise, and expand the Service
• Understand and analyse how you use our platform
• Respond to enquiries and provide customer support
• Enforce our terms, prevent fraud, and ensure security
• Send service-related notifications (e.g. video completion, usage alerts)

5. Information Sharing and Disclosure

We do not sell your personal information. We may share limited information with third parties in these situations:

• Service Providers: Hosting, analytics, email delivery, and payment processing providers (e.g. Stripe) who process information on our behalf
• Authentication Provider: Our identity provider (Firebase Authentication by Google) processes your sign-in credentials
• AI and Video Services: Third-party AI services used to generate avatar videos (review text and avatar selections are shared for processing)
• Review Sources: Search queries are sent to public review platforms (Google, Trustpilot, etc.) to retrieve business reviews
• Legal and Safety: Where required by law, to respond to lawful requests, or to protect rights and safety

6. Legal Basis for Processing (UK GDPR)

Where UK data protection law applies (including the UK GDPR and the Data Protection Act 2018), we process personal information on one or more of the following legal bases:

• Contract: Processing necessary to provide the Service you have subscribed to
• Consent: Where required for certain cookies or marketing communications
• Legitimate Interests: Running and improving the Service, preventing fraud, measuring performance
• Legal Obligation: Where we must comply with applicable laws

7. International Data Transfers

If you are located in the UK or EEA, your information may be processed in countries outside the UK/EEA (for example, where our service providers and AI processing infrastructure operate). Where required, we use appropriate safeguards such as Standard Contractual Clauses for such transfers.

8. Data Security

We implement reasonable technical and organisational measures designed to protect your personal information, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure session management with HTTP-only cookies
• Password-less authentication via a trusted identity provider
• Security headers (CSRF protection, Content-Type restrictions, framing prevention)

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Data Retention

We retain personal information only for as long as necessary for the purposes described in this policy:

• Account data: Retained while your account is active, deleted upon account deletion request
• Generated videos: Retained while your account is active. You may delete individual videos at any time
• Payment records: Retained as required by applicable tax and accounting laws
• Usage logs: Retained for up to 90 days for security and analytics purposes

10. Your Rights (UK and EEA)

Depending on your location, you may have the following rights over your personal information:

• Access: Request a copy of the data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (see our Account Deletion page)
• Restriction: Request restriction of processing
• Portability: Request a machine-readable copy of your data
• Objection: Object to processing based on legitimate interests

You also have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO). Learn more at ico.org.uk.

11. US Privacy Rights

Depending on where you live in the United States, you may have additional privacy rights under state laws, including the right to know what personal information we collect, request deletion, and opt out of certain data practices.

Review Video does not sell personal information. To exercise your privacy rights, contact us at [email protected].

12. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last Updated" date. For material changes, we may notify you via email or an in-app notification.

14. Contact Us

If you have any questions about this Privacy Policy or want to exercise your privacy rights, please contact us at:

[email protected]