Privacy Policy

ReviewNudge is operated by Adapt Progress Evolve Limited, a company registered in England and Wales. This page summarises the policy; the full text is rendered at reviewnudge.app/privacy.

Controller and processor

We are the data controller for business-owner account data — your login details, billing information and dashboard preferences. Where a business owner uses ReviewNudge to text their own customers, that business owner is the controller for the end-customer data and we act as their processor.

Data we collect

From business owners: name, email, optional profile photo, phone number for complaint alerts, business name and type, logo and brand colour, Google Place ID and review URL, message templates and scheduling preferences, and billing information processed by Stripe (we never store card details). From end customers: first name, optional last name, phone number, star rating, any complaint feedback, referral codes and opt-out status. Automatically: IP addresses for rate limiting only, SMS delivery status from Twilio, and email delivery logs.

Lawful basis

Performance of a contract for account data (Article 6(1)(b)); legitimate interests for sending review requests on a business owner's behalf (Article 6(1)(f)); consent for end customers receiving SMS, withdrawable at any time by replying STOP (Article 6(1)(a)); and legal obligation where retention is required (Article 6(1)(c)).

How we use it, and what we never do

To send review requests, route 4–5 star feedback to Google and 1–3 star feedback privately to the business owner, alert owners to complaints, generate and track referral links, process Stripe subscriptions, send optional weekly digests, monitor delivery and enforce rate limits. We do not sell, rent or trade personal data, and we do not use end-customer data for marketing, advertising or profiling.

SMS consent, sub-processors and transfers

Business owners confirm at onboarding that they hold appropriate customer consent, in line with PECR and TCPA. Sub-processors are Supabase, Twilio, Vonage, Stripe, Resend and Google Place lookup, each used only as needed to run the service; US transfers rely on UK adequacy, Standard Contractual Clauses or an IDTA.

Retention, rights and complaints

Data is kept for the subscription term plus 12 months, then deleted; rate-limiting IP records are purged on a rolling basis. You have the UK GDPR rights of access, rectification, erasure, restriction, portability and objection — ask through support. Complaints can be raised with us first and then with the ICO. See also the data protection policy and terms of service.

ReviewNudge · Pricing · Free trial · ROI calculator · Blog · Support · Stop SMS · Privacy · Terms

ReviewNudge is an operating name of Adapt Progress Evolve Limited, registered in England and Wales. Built by Jack Stovell.