How ReviewDesk handles your data

Who we are

ReviewDesk is a review management tool operated by Noyah Consulting. It helps business owners read, analyse, and reply to reviews for locations they own or manage on third-party platforms, starting with Google Business Profile.

Contact: [email protected].

Information we collect

When you create an account we store your email address, a hashed password, and your subscription status. When you connect Google Business Profile, we additionally store:

• OAuth access and refresh tokens issued by Google (encrypted at rest).
• The Google account identifier (email) and the list of locations you grant us access to.
• Reviews, review replies, ratings, and basic location metadata for the locations you connect.

How we use Google user data

We use Google Business Profile data only to provide ReviewDesk's features to you: displaying your reviews, generating AI-assisted reply suggestions for reviews you explicitly select, sending email digests and negative-review alerts that you opt into, and posting replies that you explicitly approve.

Limited Use.ReviewDesk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, we do not use it for advertising, and we do not allow humans to read it except (i) with your explicit consent, (ii) for security purposes such as investigating abuse, (iii) to comply with applicable law, or (iv) where the data has been aggregated and anonymised and is used for internal operations.

We do not share Google user data with third parties except with sub-processors strictly necessary to operate the service (our hosting provider and our transactional email relay), and only to the extent needed to deliver the features you use.

AI processing

When you request an AI reply suggestion or an analysis, the review text and a short context prompt are sent to an AI provider solely to generate the suggestion. ReviewDesk itself does not use your data to train any model.

We currently use Google Gemini 2.5 Flash-Lite via the paid Gemini API. Under Google's paid Gemini API terms, Google does not use prompts or responses to improve its products (see Gemini API Additional Terms). If we add alternative providers in the future, we will update this policy and describe each provider's data-handling posture before you can opt in.

Storage & security

Data is stored on servers located in the European Union. OAuth tokens are encrypted at rest. Access to production systems is restricted to authorised personnel, logged, and reviewed.

Revoking access & deleting your data

You can revoke ReviewDesk's access to your Google account at any time via your Google account permissions page. You can also disconnect the integration inside ReviewDesk, which immediately deletes the stored OAuth tokens.

To delete your ReviewDesk account and all associated Google user data, email [email protected] from the address on your account. We will action the request within 30 days.

Changes

If we make material changes to this policy we will update the “last updated” date above and, where appropriate, notify you by email.