Privacy Policy

From you: your name, business name, email address, phone number and the Google review link for your business.

From your customers: the name, phone number and language you add so we can send a review request, plus any private message they send you.

From the site: basic technical data such as the pages you visit and your browser type, used to keep the site working.

When a customer opens a review link, we record the time and basic device information to show you link taps and to prevent abuse. Choosing to share on Google takes them to Google, whose privacy policy applies.

For your account and billing details, we decide how the data is used. For your customers' details, you decide why they are used and we process them on your behalf, only to send your review requests.

To send your review requests by WhatsApp and SMS.

To show you requests sent, link taps and messages in your dashboard.

To answer your support questions.

To improve the service, and to meet our legal and accounting obligations.

You stay responsible for the customer details you add. Please make sure each customer agreed to be contacted.

We use those details only to send the review requests you ask us to send, and we never sell them.

Every message includes a simple way to opt out.

We use trusted service providers for hosting, WhatsApp and SMS delivery, email and payment processing. They only handle the data needed to provide their part of the service.

Some of these providers store data outside your country. We choose providers with strong security and data protection commitments.

We currently use: Supabase (database and login), Hostinger (hosting), Twilio (SMS and WhatsApp delivery), Resend (email), and Creem (payments). We update this list when it changes.

Payments are handled by Creem. We never see or store your full card number.

Customer contact details are kept while your account is active, so your reports stay complete.

When you delete a customer or close your account, we remove their contact details from active systems, and from backups within 30 days.

If a customer opts out, we keep their phone number on a do-not-contact list so we never message them again, even if the business deletes the customer. We keep invoices and payment records for as long as the law requires.

We protect data with encryption in transit and access controls. No system is perfectly secure, so please use a strong password.

We use only the cookies needed to keep the site working, plus Google Analytics 4 to understand how the site is used. You can accept or decline them from the notice on your first visit.

Ask us and we will delete your data, or a specific customer's data, within 30 days.

If you are a customer of a business that uses WellPraised, contact that business first. We act on their instructions and will help them answer you.

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. We answer these requests within 30 days.

Where the law requires a legal basis, we rely on our contract with you, our legitimate interests in running and securing the service, and our legal obligations. You can also complain to your local data protection authority.

WellPraised is for businesses and is not meant for children.

If we make a significant change, we will tell you by email or in the app before it takes effect.

Questions about privacy, or want your data deleted? Write to us and we will answer within 30 days.