Privacy Policy

AgentTree (“AgentTree,” “we,” “us,” or “our”) operates ReviewForeman, a review management platform for home-services businesses, available at reviewforeman.com and app.reviewforeman.com (the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By creating an account or otherwise using the Service, you agree to the collection and use of information as described in this policy.

We collect the following categories of information:

• Account information — your name, email address, password (handled and hashed by our authentication provider), and business name.
• Billing information — your subscription plan, status, and billing identifiers. Payment is processed by Stripe; we never receive or store your full card number.
• Google Business Profile data — when you connect a Google account, we access your business location details (name, address, phone number, category) and your reviews (reviewer name and photo as shown by Google, star rating, review text, review date, and any replies) via the Google Business Profile API. OAuth credentials are encrypted at rest using AES-256-GCM.
• Customer contact information — names and email addresses of your customers that you upload or import in order to send review-request campaigns.
• Usage data — pages visited, actions taken in the dashboard, IP address, browser and device information, and standard application logs.
• Email engagement data — opens, clicks, bounces, complaints, and unsubscribes for emails sent through the Service.

• Provide and operate the Service, including syncing and displaying your reviews, letting you reply to reviews via Google, sending review-request campaigns, generating QR codes and review links, and sending low-rating alerts.
• Process payments and manage your subscription.
• Send transactional emails, such as account, billing, and trial-ending notices.
• Maintain suppression lists so we honor unsubscribes and bounces and comply with anti-spam laws.
• Monitor, secure, and improve the Service.
• Respond to support requests.
• Comply with legal obligations.

ReviewForeman’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We request only the business.manage scope, which is required to read your Business Profile reviews and post replies on your behalf.
• We do not use Google user data for advertising or to build profiles for advertising purposes.
• We do not sell Google user data, and we do not allow employees or third parties to read it except (a) with your consent, (b) for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) where the data has been aggregated and anonymized.
• You can revoke ReviewForeman’s access to your Google account at any time at myaccount.google.com/permissions, or by disconnecting the location inside the Service. Disconnecting immediately deletes the stored credentials for that connection.

We do not sell your personal information. We share information only with:

• Service providers who help us operate the Service under contracts that limit their use of your data to providing that service: Supabase (database and authentication), Stripe (payments), Resend (email delivery), Google (Business Profile API for the locations you connect), Vercel (application hosting), and Cloudflare (DNS and security).
• As required by law, or to protect the rights, property, or safety of AgentTree, our users, or others.
• In connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy continuing to apply to your information.

• OAuth credentials are encrypted at rest using AES-256-GCM.
• Database access is controlled by row-level security so each account can only access its own data.
• Passwords are hashed and managed by our authentication provider; we never store plaintext passwords.
• All data in transit is protected with industry-standard TLS encryption.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

• We retain your account and business data for as long as your account is active.
• If you cancel your account, we retain your data for 30 days to allow reactivation, after which it is deleted, except where retention is required for legal, tax, or accounting purposes.
• Disconnecting a Google location immediately deletes the associated OAuth credentials. Cached review data remains part of your account history unless you request deletion.
• You can request deletion of your account and associated data at any time by contacting support@reviewforeman.com.

• You can access, correct, or delete most account information directly from your dashboard, or by contacting us.
• California residents: under the CCPA/CPRA, you have the right to know what personal information we collect, request its deletion, and opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under California law.
• Every campaign email includes an unsubscribe link. Once a recipient unsubscribes, they are added to a suppression list and will not receive further campaign emails from that business through ReviewForeman.
• If you are located in the EEA or UK, you may have additional rights under the GDPR, including access, rectification, erasure, and portability. Contact us to exercise these rights.

To exercise any of these rights, contact support@reviewforeman.com.

We use essential cookies for authentication and session management. We do not use third-party advertising cookies or trackers on the Service.

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

Our infrastructure providers may process information in the United States and other countries. By using the Service, you consent to this transfer and processing.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through an in-app notice. Continued use of the Service after a change takes effect constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or how we handle your information, contact us at support@reviewforeman.com.

See also our Terms of Service.