Privacy is part of
the case standard.

1. Who is responsible for your data?

Reviewell BV, a Belgian private limited company (BV), is the data controller for personal data processed through this website and the free eligibility check. Its registered office is Louizalaan 65, 1050 Brussels, Belgium, registered under KBO/BTW number BE 1012.058.705.

For privacy questions or requests, email info@reviewell.com. Please do not send passwords, payment details or unrelated sensitive material by email.

2. Data we process

We process only data that is relevant to the requested interaction. Depending on how you use Reviewell, this may include:

• Contact and account data: your name, email address, company or represented profile owner.
• Case data: public URLs, descriptions, screenshots or other materials you choose to share for an eligibility assessment or scoped case.
• Correspondence: messages, agreed scope, status updates and outcome records.
• Technical and security data: limited information needed to protect the site and prevent misuse of forms, such as server logs and rate-limit signals.
• Preference data: the cookie preference stored in your browser when you interact with the cookie notice.

Do not submit special-category data, identity documents, private correspondence or third-party information unless it is specifically requested and necessary for an agreed route.

2a. Google Business Profile data

Where a client connects a Google Business Profile (currently planned, not yet live on any account), Reviewell would access only the data needed to deliver the connected service, via Google's official Business Profile API and OAuth consent screen — never a Google account password.

• Data accessed: the connected Business Profile's public listing details (name, address, category, hours), and the reviews and ratings visible on that profile.
• Purpose: to display reviews inside your Reviewell workspace, support the review-removal casework described above, and — for clients who add the optional profile-care, monitoring or AI-reply services — to help manage responses and profile accuracy.
• Staff access: limited to the case team member(s) actively assigned to your workspace, on a least-privilege basis. We do not grant broader internal access to connected Google data than to any other case material.
• Recipients: Google Business Profile data is not sold or shared with third parties beyond the infrastructure providers described in section 4, and — where you have opted into an AI-assisted assessment — the AI processor described in section 3a below.
• Retention: API-sourced profile and review data is kept for a maximum of 30 calendar days, stored securely and never manipulated or aggregated beyond that use. This is a hard limit, not a default that opening a case overrides: if you choose to authorise a removal case based on a connected review, the case record preserves the case reference, your authorisation and the human specialist's assessment — not an indefinite copy of the raw Google-sourced review content itself, which is deleted on the same 30-day schedule regardless of whether a case exists.
• Disconnecting (planned): once this connection is live, you will be able to end it at any time from your workspace. Disconnecting will stop any further sync, revoke the associated access token, and remove any cached (non-case) Google data. Google requires this control-handback to be available within seven working days of a request; the disconnect control will ship as part of the connection itself, not added afterward.

Reviewell's use of Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements.

3. Why we use this data

We process personal data only where there is a valid basis under applicable data-protection law:

• to take steps you request before entering a contract, including an eligibility assessment;
• to perform an agreed service or manage a client relationship;
• to meet legal, accounting or compliance obligations;
• for Reviewell’s legitimate interests in security, fraud prevention, quality control and defending legal claims, balanced against your rights; and
• where required, with your consent — for example, for future optional cookies or marketing communications.

A free eligibility check is an assessment, not an automatic report to a platform. We do not submit case material externally until a route and scope have been agreed.

3a. AI-assisted assessment

When you submit a review for assessment, the review text, your star rating and any factual context you add are sent to a third-party AI model provider to generate a draft policy-route suggestion and evidence checklist. This applies to manually submitted reviews today; if reviews sourced via a connected Google Business Profile are ever routed through the same assessment, that use will be reviewed against Google's API terms first and this notice updated before it happens.

• What is sent: the review text, star rating and any context you type. We do not send your name, email or account details to the AI provider as part of this request.
• What comes back: a draft score, a suggested policy category and a short evidence checklist — always labelled as a draft, never treated as a decision. A human specialist reviews every case before any external action.
• Provider and retention: processed via an AI gateway that routes to commercial model providers (currently OpenAI); we do not control that provider's own retention period for API request data and rely on their standard API data-handling terms, which do not include using API inputs to train their models by default.

4. Who may receive data?

We do not sell personal data. We may use carefully selected providers for hosting, security, email delivery, payment processing, AI-assisted review analysis (see section 3a) and professional support. They receive only the data necessary to provide their service and must handle it under appropriate contractual and security safeguards.

For a scoped removal case, relevant information may be shared with the relevant platform, publisher, host, registrar, search engine, legal adviser or authority where that is necessary for the agreed route. We will not share unrelated evidence merely because it is available.

Some suppliers may process data outside the European Economic Area. Where that happens, Reviewell will use a lawful transfer mechanism and appropriate safeguards as required by applicable law.

5. How long we keep data

We keep data no longer than needed for the purpose for which it was collected. As a working standard, an unengaged eligibility check is retained for up to 12 months; scoped case records are retained for the life of the matter and then only for the period needed for legal, accounting or claim-management purposes. Invoices and mandatory business records may need to be retained longer under Belgian law. Data accessed via a connected Google Business Profile follows the shorter, purpose-specific limits described in section 2a.

We may delete or anonymise data sooner where it is no longer necessary. Retention can be extended only where there is a clear legal obligation, ongoing dispute or legitimate need to preserve a record.

6. Your rights and choices

Subject to the conditions in applicable law, you may request access, correction, deletion, restriction, objection or portability of your personal data. You may withdraw consent at any time where consent is the basis for processing. To help us protect your information, we may ask for proportionate proof of identity before acting on a request.

Contact info@reviewell.com with “Privacy request” in the subject line. You also have the right to lodge a complaint with the Belgian Data Protection Authority at gegevensbeschermingsautoriteit.be.

7. Security and updates

We use organisational and technical measures designed to limit access to case information and protect it against accidental loss, misuse or unauthorised disclosure. No internet transmission is completely risk-free; please share only the minimum information needed for the initial assessment.

We may update this notice when our services, suppliers or legal obligations change. Material changes will be published on this page with a revised date.