Digital Reviews is a product of TeoPix Creative Ltd, a company registered in the United Kingdom. TeoPix Creative Ltd is the data controller for the personal data described in this policy.

Registered address: [COMPANY_ADDRESS]

For privacy questions, data access requests or deletion requests, contact support@digitalreviews.uk.

We collect account information provided by business users, customer feedback submitted through the platform, usage information needed to operate the service, and connected review source data accessed with explicit user authorisation, starting with Google Business Profile data.

Private feedback submitted through the platform is sent directly to the business and is separate from public reviews. Every customer is offered both options, private feedback and a public Google review, whatever rating they give. The platform does not block, filter, suppress or discourage negative reviews.

This section explains how Digital Reviews accesses, uses, stores, shares and deletes data received from Google when a business user connects a Google Business Profile account.

When a business user connects Google Business Profile and gives permission, we access:

• Google Business Profile account information and the list of business locations the user manages
• Location details for the locations the user chooses to connect, such as business name and address
• Reviews for those locations: star rating, review text, the reviewer's public display name and the review date
• The business's existing replies to those reviews

We request one Google OAuth scope: https://www.googleapis.com/auth/business.manage. Reviews are not imported until the user selects the locations they want to connect.

We use Google data only to provide features the business user can see and use in Digital Reviews:

• Showing reviews for connected locations in the dashboard
• Sending replies to reviews, only after the user has reviewed and approved each reply
• Producing reputation reports, trends and analytics for the user's own locations

We do not use Google data for advertising, to build user profiles for other purposes, or to determine creditworthiness or for lending.

To produce reports and reply suggestions, review text and related review details are sent to our AI provider, [AI_PROVIDER], which processes them on our behalf to return the result to the user.

Google user data is not used to develop, improve or train general or generalised AI or machine learning models, either by us or by our AI provider. AI output is a suggestion only. Nothing is published to Google without the user's approval.

We do not sell Google data and we do not use or share it for advertising. We share Google data only:

• With service providers that help us run Digital Reviews, such as hosting, database and AI processing, and only as needed to provide the service
• When required by law, regulation or valid legal process
• As part of a merger, acquisition or sale of assets, in which case the data remains subject to this policy and the user will be informed

Our staff do not read Google user data, except:

• When the user gives us explicit permission, for example to help with a support request
• When needed for security purposes, such as investigating abuse or a security incident
• When required by law

Google data and OAuth tokens are stored in secured systems with restricted access. OAuth access and refresh tokens are used only to access the connected account on the user's behalf.

When a user disconnects Google Business Profile or deletes their Digital Reviews account, we stop accessing Google immediately and delete the Google data and OAuth tokens we hold for that connection within [RETENTION_DAYS] days.

Users can also remove Digital Reviews' access at any time from their Google Account settings at https://myaccount.google.com/permissions. See Data deletion for step-by-step instructions.

Digital Reviews' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use trusted service providers to operate the platform, including hosting, database, authentication, email and AI infrastructure providers. These providers process data only as needed to provide the service and may not use it for their own purposes, including advertising.

We keep business account data and private feedback for as long as the account is active, or as needed to comply with legal obligations, resolve disputes and maintain security. Google data follows the retention rules in section 3.6.

Users can disconnect Google Business Profile at any time and can ask us to delete their account data, private feedback and connected review data. Our Data deletion page explains how to disconnect, how to send a deletion request and how long it takes.

Under UK data protection law (UK GDPR), you can ask to access, correct, delete or receive a copy of your personal data, and you can object to or ask us to restrict certain processing. To make a request, email support@digitalreviews.uk. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

For privacy questions, deletion requests or questions about connected data, contact support@digitalreviews.uk.