Privacy Policy

This is a courtesy translation. The binding version of this policy is the Hebrew version; if the two diverge, the Hebrew version prevails.

1. Who operates RevYou

RevYou is operated by the RevYou company.

For privacy inquiries, contact us at: info@revyou.site

This policy applies to the RevYou website, the business pages, the feedback forms and the service's management interface.

2. Who is responsible for the information

Responsibility for information depends on its type and on how it was collected.

With respect to private feedback sent to a business through RevYou, the business is the data controller, and RevYou holds and processes the information on its behalf for the purpose of operating the service.

With respect to information provided directly to RevYou - including inquiries through the site, business-owner details, contact details, user accounts and information required to operate and secure the service - RevYou is the data controller.

3. Information collected when using a business's page

There is no need to download an app, open an account or provide personal details in order to open a business's RevYou page or continue from it to the business's Google page.

To operate the service and produce usage data and reports, the following may be stored, among other things:

• the scan point from which the page was opened;
• the time of the scan;
• actions performed on the page;
• the experience or satisfaction choice;
• the service, branch or topic selected;
• whether the user continued to the Google page;
• whether private feedback was sent;
• whether the user stopped the process before completing it;
• basic technical data required to operate and secure the service.

To produce usage data and reports, the system may create a random visit identifier that links actions taken during the same visit, for example a scan, an experience choice and continuing the process. It does not require a name, phone number or email address. It is generated at random, kept in the browser only for the session, separate for each business, and is not derived from the IP address, the device or a browser fingerprint.

4. Private feedback

If a user chooses to send private feedback to a business, the content of the feedback is stored.

The user may also choose to provide contact details, such as:

• name;
• phone number;
• email address.

Providing contact details is not mandatory.

Feedback can be sent without contact details, but in that case the business may not be able to get back to the person who sent it.

The feedback and any contact details provided with it will be available to the business it was sent to.

The content of the feedback may be processed automatically, including by an artificial intelligence service provider, to classify it, summarise it, identify topics and suggest a way to handle it or a reply to the business. Only the feedback content is sent to the provider for this, not the contact details given in the separate fields. The results are shown to the business as a suggestion; the decision how to handle or reply remains the business's.

5. Google reviews

A review published on Google is written and published by the user with Google, through the user's own account.

RevYou does not publish reviews on the user's behalf.

RevYou does not receive from Google, by virtue of the use of the service, the content of the final review published, the star rating given, or the identity of the Google account from which it was published.

A figure shown in the system as a "transition to Google" indicates that the user clicked the link and continued to the relevant Google page. It does not confirm that a review was actually published.

Writing a review by recording it

On some business pages you can choose to record your review instead of typing it. Recording starts only after you tap the record button and allow microphone access in the browser. The audio is sent to an external AI-based transcription provider (OpenAI) to turn it into text, and the transcript may be tidied and phrased. The text is shown to you for editing before anything is posted. RevYou does not keep the audio file.

6. Information from business owners

When a business owner contacts RevYou, joins the service or uses it, we may store, among other things:

• the business name;
• business details;
• the contact person's name;
• phone;
• email address;
• the business website;
• the business's Google page;
• branches;
• the service plan;
• scan points and equipment;
• engagement and billing details;
• information provided in the course of the engagement;
• the email address authorized to sign in to the interface;
• usage and operational data of the business account.

7. Purposes of use

We may use the information to:

• operate the service;
• display the business pages;
• deliver private feedback to the business;
• display feedback to the business;
• display reports and usage data;
• manage accounts and permissions;
• provide service and support;
• handle inquiries;
• manage engagements with businesses;
• handle malfunctions;
• secure the system;
• detect and prevent abuse;
• improve and develop the service;
• analyze performance;
• transcribe recordings the user started;
• tidy and phrase text;
• classify and analyze feedback;
• identify topics and patterns in feedback;
• generate reply suggestions for the business owner;
• comply with legal obligations.

RevYou will not sell personal information to advertisers.

Contact details provided within private feedback will not be used by RevYou for its own marketing.

8. Is there an obligation to provide information

There is no legal obligation to provide RevYou with personal information through a contact form or a feedback form, unless stated otherwise in a specific case.

Information is provided voluntarily.

On the private feedback form the only required field is the feedback itself. Name, phone and email are optional.

You can use a business's page and continue to Google without providing a name, phone number or email address.

If details required to open a business account or operate the service for it are not provided, we may be unable to provide the service.

9. Who the information may be disclosed to

Information may be disclosed to the following parties, to the extent required:

The business

Private feedback and contact details provided with it will be transferred to the business for which the feedback was given.

Service and infrastructure providers

RevYou uses providers to operate the service, including storage, hosting, database, security and communication services.

As of the date of this policy, the services used include, among others:

• Supabase;
• Vercel;
• Google (Google Analytics on the marketing pages, and Gmail / Google Workspace for operational email);
• OpenAI.

These providers may access information to the extent required for the service they provide. The current list is on the sub-processors page.

Artificial intelligence services

Some features of the service use AI providers to transcribe recordings, process text, classify feedback, produce summaries and suggest wording. Information is sent to a provider only as needed to run the relevant feature, including: audio the user chose to record, transcripts, feedback and review content, and the automated analysis of it. Contact details given in separate fields are not sent to the provider, unless they appear inside the text the user wrote or said.

Advisers and service providers

Information may be disclosed to accountants, lawyers, professionals, support providers or other service providers where required for RevYou's operations, subject to appropriate obligations.

Authorities

Information may be disclosed to a competent authority where there is a legal obligation, a court order or a lawful demand to do so.

Transfer as part of a business transaction

In the event of a merger, a restructuring, a sale of the company, a sale of the business or a sale of assets, information held by RevYou may pass to the entity continuing the business, to the extent required for the transaction and for the continuation of the service, and subject to the law.

Where RevYou processes personal data on behalf of a business, the transfer of that data to an entity replacing RevYou as the processing party will be carried out in accordance with the Data Processing Addendum applicable to the engagement and with the obligations applicable to that entity by law.

10. Processing outside Israel

The service's main database is currently configured in Supabase's Frankfurt region.

Infrastructure providers and subprocessors may process technical information, or information required to operate the service, in other countries as well.

Where information is transferred or processed outside Israel, we will act in accordance with the law applicable to transfers of data outside Israel.

11. Cookies and technical information

The service may use browser storage or other technical means required for:

• sign-in;
• permissions;
• security;
• preserving user state;
• proper operation of the system.

Infrastructure providers may log technical information such as:

• IP address;
• browser type;
• device type;
• operating system;
• request times;
• security data.

The site's marketing and information pages (and not the business review pages) use Google Analytics, a statistical measurement service by Google, to understand and improve how the site is used. The service may use cookies and record technical, aggregated information such as pages viewed, referral source and general usage data. More information is available in Google's privacy policy. This service is not loaded on the businesses' review and feedback pages.

As of the date of this policy, RevYou's public pages make no intentional use of cookies for targeted advertising.

If advertising or additional tracking tools are added in the future, this policy will be updated and consent will be obtained where required.

12. Statistical and anonymous information

RevYou may create and use aggregated, statistical or anonymous information that does not identify a specific person or business.

Such information may be used for:

• analyzing service performance;
• examining usage and conversion rates;
• comparing types of scan points;
• research;
• developing and improving the service;
• publishing general data.

13. Retention period

Information is retained for as long as it is needed for the purpose for which it was collected, for operating the service, for security, for managing the engagement, or to comply with a legal obligation.

Feedback and business data may be retained for the duration of the subscription.

After the engagement ends, the business may request, within 30 days, a reasonable copy of the feedback collected for it.

After that period RevYou may delete the information or anonymize it, except information that must be retained by law, for security purposes, or within backups deleted in the ordinary backup cycles.

14. Data security

RevYou takes reasonable measures to protect information, appropriate to the nature of the service and the information processed.

These measures may include, among others:

• traffic encryption;
• access controls;
• permission restrictions;
• separation between different businesses' data;
• secure sign-in mechanisms;
• limiting access to information to those who need it for the service.

Access to a business's interface is via an authorized email address and a secure sign-in mechanism.

However, no system is entirely immune to intrusion, malfunction or unauthorized access.

In the event of a security incident, we will act in accordance with our obligations under the law.

15. Sensitive information

RevYou is not intended to serve as a medical record, a payment processing system or a system for managing sensitive information.

Businesses are asked not to use the service for the deliberate collection of:

• medical information;
• credit card details;
• passwords;
• identification numbers;
• sensitive financial information;
• other sensitive information not required for the feedback.

Users too are asked to avoid entering sensitive information that is not necessary.

If a user nevertheless chooses to include such information in free text, it may be stored as part of the feedback sent to the business.

16. The business's use of information

A business that receives feedback or contact details through RevYou is responsible for the use it makes of them.

Providing contact details within feedback does not, in itself, constitute consent to receive advertising.

The business may use the details to handle the feedback and the customer's inquiry; any other use must comply with the law.

17. Rights regarding information

Under the law, a person may request to review personal information held about them and to correct information that is inaccurate, incomplete, unclear or outdated.

You may also request deletion of information or cessation of its use. The request will be examined and handled in accordance with the law, the nature of the information and the identity of its controller.

Where a request concerns private feedback sent to a business, we may forward the request to the business or handle it together with the business.

Inquiries: info@revyou.site

18. Mailing and marketing

Contacting RevYou does not, in itself, constitute consent to receive advertising material.

We will not send promotional messages through channels requiring prior consent without obtaining the required consent.

Anyone who asked to receive updates may ask to stop receiving them at any time.

19. Minors

The service is not intended for the deliberate collection of personal information from minors.

If a parent or guardian believes a minor has provided personal information that should not be retained, they may contact us and we will examine the request.

20. Changes to this policy

RevYou may update this policy following changes in the service, providers, technology or the law.

The update date at the top of this document indicates the current version.

If a material change occurs in the way information is used, we will present an appropriate notice to the extent required by law.

In case of a conflict between the Hebrew version and a translation, the Hebrew version prevails.

21. Contact

For questions, requests or complaints regarding privacy: info@revyou.site