Privacy Policy
This policy explains what personal data Review Monitor collects, why we protect it, and how you can control it. Updated when our practices change.
- Controller
- Review Monitor (Qrinux Inc.)
- Operating region
- Bangladesh, serving customers globally
- Data sale
- Never — no ad-tracking either
- Contact
- privacy@reviewmonitor.co
Jump to a section13 sections
1. Who we are
Review Monitor ("Review Monitor", "we", "us") is an online service operated by Qrinux Inc. (www.qrinux.com), our parent company, from Bangladesh. Review Monitor helps businesses track public reviews about them on third-party platforms such as Google Maps, Yelp, TripAdvisor, OpenTable, TheFork, Zomato, and Uber Eats. For the personal data described in this policy, Qrinux Inc. acts as the data controller. You can reach us at support@reviewmonitor.co.
2. Scope of this policy
This policy applies to reviewmonitor.co, our web application and related monitoring infrastructure, our browser extension, and any emails or documents that link to this policy. Third-party review platforms we read from (Google, Yelp, TripAdvisor, OpenTable, TheFork, Zomato, Uber Eats, and others we may add in the future) have their own privacy policies that govern the data you have directly with them.
3. What we collect
We collect three kinds of information:
- Account data — the email address and name you use to sign in. We send a one-time code to your email to verify sign-ins. If you register a passkey for Face ID, fingerprint, or device unlock (WebAuthn), we store the public-key credential and a device label; the private key never leaves your device and we never see it.
- Product data — the review URLs you connect, the reviews we subsequently ingest from those public pages, the alerts you configure, and the managers and team members you invite. Reviews are already public on their source platforms; we do not collect private review data or bypass any authentication wall.
- Usage data — anonymised information about how you use the product (pages visited, features used, error events) so we can improve reliability. IP address and browser user-agent are logged short-term for security and abuse prevention.
We do not sell personal data. We do not run third-party advertising trackers.
4. Why we collect it
- To create and secure your account.
- To deliver the product you signed up for: checking connected public review sources, sending alerts, and generating AI drafts.
- To bill you, if you are on a paid plan.
- To respond to support requests.
- To detect abuse and keep the service reliable.
- To send occasional product update emails you can unsubscribe from at any time.
5. Legal basis (EEA / UK users)
We rely on contract to provide the service you signed up for, legitimate interests for security, abuse prevention, and product improvement, and consent for optional cookies and marketing emails. You can withdraw consent at any time.
7. How long we keep it
- Account data: for as long as your account is active.
- Product data (reviews, alerts, team settings): while your account is active, plus 30 days after deletion so you can restore if needed.
- Billing records: kept for as long as tax and accounting law requires.
- Security logs: 30–90 days.
You can request deletion of your account at any time from the dashboard settings, or by writing to us.
8. How we protect it
Data is transmitted over TLS. Passwords are hashed. Access to production data is limited to team members who need it and is logged. We enforce role-based access controls inside the product so that team members only see the sources and reviews they are authorised to see. This describes controls we operate today; it is not a certification.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to certain processing, and to lodge a complaint with your local data protection authority. To exercise any of these rights, email privacy@reviewmonitor.co. We respond within 30 days.
10. International transfers
Review Monitor operates globally. Your data may be processed in countries other than the one you live in. Where required, we rely on approved transfer mechanisms such as Standard Contractual Clauses.
11. Children
Review Monitor is a business product not directed at children under 16. We do not knowingly collect data from children.
12. Changes to this policy
We may update this policy from time to time. When we do, we update the "last updated" date at the top and, for material changes, notify you by email or an in-app notice at least 14 days in advance.
13. Contact
Privacy questions, subject-access requests, or DPA requests: privacy@reviewmonitor.co.