Privacy Policy
Revista Insights ("Revista", "we", "us") provides review analytics for businesses. This policy explains what information we handle, why, and the choices you have. Questions: hello@revistainsights.com.
Information we handle
- Account information. The name and email address of each person who signs up or is invited, a hashed (unreadable) password, and when they sign in.
- Business information. Your business name, a short description, and settings you choose, such as categories.
- Google reviews. When you add our account as a Manager on your Google Business Profile, we read your locations' reviews through Google's official API: reviewer display names, review text, star ratings, dates, and your replies. These reviews are already public on Google.
- Staff lists. If you upload one, the names, positions, locations and dates you provide, used only to match names that appear in your reviews.
- Notes and replies. Follow-up notes your team writes, and review replies you post through Revista.
- Technical information. Server logs (IP address, time, the page requested) used to run and secure the service, and a single sign-in cookie. We do not use advertising or tracking cookies.
How we use it
- To provide the service: pull your reviews, analyze them, and show you the results.
- To post review replies, only when someone on your team writes and confirms one.
- To send account emails: confirmations, invitations, password resets and service notices.
- To keep the service secure and working, and to answer your questions.
We do not sell your information, use it for advertising, or share one customer's data with another customer.
AI analysis
Review text is analyzed by an AI model provided by Anthropic through its API, together with your category list and staff names, to identify topics, sentiment and the people mentioned. Anthropic processes this data to return results to us and, under its commercial terms, does not use it to train its models.
Service providers
We use these providers to run Revista. Each processes data only to provide its service to us:
- Google: the Business Profile API (your reviews) and our business email.
- Anthropic: AI analysis of review text.
- DigitalOcean: the servers that host the application and its data, in the United States.
- Cloudflare: our website, domain name system and network protection.
- Resend: delivery of account emails.
- Backup storage: encrypted backups, kept with a storage provider in the United States.
How long we keep it
We keep your information while your account is active. If you close your account or remove our Google access and ask us to delete your data, we delete it from the live system within 30 days; encrypted backups expire on their normal schedule, within a further 30 days.
Your choices
- Remove our access at any time in your Google Business Profile ("People and access").
- Ask us for a copy of your data, or to correct or delete it, at hello@revistainsights.com.
- Admins can remove team members' access in Settings.
Health and other sensitive information
Revista is built for public reviews. Please don't put patient records or other sensitive personal information into notes, staff lists or replies. Healthcare customers should never confirm in a public reply that a reviewer is a patient.
Security
Data is encrypted in transit (HTTPS), each customer's data is stored in its own database, access is limited to people you invite, and backups are encrypted. No system is perfectly secure; we will notify affected customers promptly if we learn of a breach affecting their data.
Children
Revista is a business service and is not directed to anyone under 18.
Changes
If we change this policy in a meaningful way, we will email account admins before the change takes effect.