Privacy Policy

Last updated: September 30, 2026

ReviewLoop is operated by Agent Creative, a studio based in Connecticut, United States (“we”, “us”). This policy explains what the service stores, why, who it is shared with, and what you can ask us to do with it. It is written to be read.

Who this policy is for

Two groups of people use ReviewLoop, and this policy covers both:

Business owners who open an account to set up a review page and send review requests.
Their customers, who receive a request, open a review page, or send a private message to a business.

What we store about business owners

Your account: your name, email address and a password. The password is stored only as a salted hash; we cannot read it.
Your business details: business name, logo, color, the review links you add (Google, Yelp, Facebook), your wording for the page, emails, texts and prints, your follow-up contact and sign-off, and the address private messages are sent to.
Your plan and usage: which plan you are on, how many requests and reply suggestions you have used this month, and, if you pay, a reference to your subscription with our payment processor.
Reviews you paste into the reply assistant: the text is used to write the suggested replies. See “Reply assistant” below.
Messages you send us through the contact form: your name, email address and message.

What we store about your customers

When a business adds a customer and sends a review request, ReviewLoop stores, on behalf of that business:

the customer’s name, and the email address or phone number the business entered;
when the request was sent and by which route (email or text), and whether a reminder was sent;
whether the review page was opened from the customer’s personal link, and which review site button was pressed. ReviewLoop does not use tracking pixels in email, and it does not know whether a review was written or what it says;
whether the customer asked to stop receiving emails from that business.

When anyone opens a review page, ReviewLoop adds one to that business’s daily count of page visits and notes whether the visit came from the QR code. These counts are totals; they are not tied to a person unless the visit came through a personal link.

When a customer uses “Tell us privately instead”, the message, and the name and contact details if the customer chooses to give them, are stored in the business’s private inbox and emailed to the business. They are not published.

The business is responsible for having a proper reason to contact the customers it adds. We act on the business’s instructions and do not use customer lists for anything else. We do not sell them, share them with other businesses, or send our own marketing to them.

Stopping emails

Every review request email includes a link to stop further emails from that business. When it is used, the address is added to that business’s do-not-contact list and later requests to it are refused. We keep the address on that list for as long as the business has an account, because that is how the request is honored.

Cookies and browser storage

A sign-in cookie keeps you signed in after you log in. It is essential to the service.
Browser storage holds an unsaved draft of your review page so you can try the tool before making an account.

This site does not use advertising cookies or third-party analytics. Fonts, scripts and images are served from this site, not from outside networks.

If you are using a preview build of ReviewLoop (it says “Preview build” in the corner of the screen), everything you enter is kept in your own browser’s storage and nothing is sent to us.

We use a small number of outside services to run ReviewLoop. Each receives only what it needs:

Stripe processes card payments for paid plans. Card details go straight to Stripe; we never see or store them. Stripe tells us whether a payment succeeded and which plan it was for.
Our web host and email delivery service store the data described above and deliver the emails the service sends: review requests, reminders, private message notices and account emails.
Twilio, only if text sending through ReviewLoop is switched on for this site. In that case the customer’s phone number and the message are passed to Twilio for delivery. When it is not switched on, text messages are sent from the business’s own phone and do not pass through us.
An AI model provider, through OpenRouter, only if AI-written replies are switched on for this site. In that case the review you paste, its star rating and your business name are sent to the provider to write the suggestions. When it is not switched on, replies are written by ReviewLoop’s built-in engine and the review text is not sent to any outside service.

Google, Yelp and Facebook receive nothing from us. Review buttons are ordinary links: when a customer presses one, ReviewLoop records the press and forwards them to that site, where that site’s own privacy policy applies.

We may disclose information if the law requires it, or to protect the service and the people who use it from fraud or abuse.

Security and abuse prevention

Connections to the service are encrypted in transit. Accounts are separated so one business cannot see another’s customers, requests or messages. To limit abuse of sign-up and public forms we briefly record the internet address a request came from. No system is perfectly secure, and we cannot promise that information will never be accessed unlawfully.

How long we keep things

Account and business information: for as long as the account is open.
Customers, requests and private messages: until the business deletes them, deletes the location they belong to, or closes its account. Deleting a location deletes its customers, requests, private messages and visit counts.
Contact form messages: for as long as needed to answer and keep a record of the conversation.

Your choices

Business owners can change their business details in the tool at any time, delete customers and locations, and ask us to close the account and delete everything in it.

If you are a customer of a business that uses ReviewLoop, you can use the stop link in any request email, and you can ask the business, or us, to delete your details. If you contact us we will pass the request to the business concerned and help carry it out.

Depending on where you live, you may have legal rights to see, correct, delete or receive a copy of the information held about you. To use any of them, send us a message through the Contact page. We will not treat you differently for asking.

Children

ReviewLoop is a tool for businesses. It is not intended for children under 13, and we do not knowingly collect information from them.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the date at the top. If the change is significant, we will tell account holders by email before it takes effect.

Contact

Questions and requests about privacy go through the Contact page. They reach Agent Creative, the operator of ReviewLoop.