Privacy Notice

1. Who we are

Review360 is operated by Hunter Vandeboe, operating as Review360 ("we", "us"). We are the data controller for the personal data described in this notice — meaning we decide how and why your data is processed. Contact: support@review360.io.

2. What we collect and why

• Account data — name and email address, used to create and manage your account (legal basis: contract performance).
• Login credentials — managed by our authentication provider; we never see your password (contract performance, security).
• Monitored sites and uploaded documents — URLs, scan results, and files you submit, used to provide the Service (contract performance).
• Support messages — when you contact us, to respond and improve the Service (legitimate interests).
• Usage and telemetry — pages visited, feature usage, device identifiers, and IP address, used for security, fraud prevention, and product improvement (legitimate interests).

Payment data (card numbers, billing details) is collected and processed by Paddle, our Merchant of Record — we never see or store your full card details.

3. Who we share data with

• Service providers / subprocessors — hosting, database, authentication, and email delivery providers that process data on our behalf under contract.
• Merchant of Record — Paddle, for the sale of our products, subscription management, payments, tax compliance, and invoicing.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where required by law.

4. Retention

We keep your account data while your account is active. Scan history and reports are retained while your subscription is active; when data is no longer needed, it is deleted or anonymised. You can request earlier deletion at any time.

5. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to restrict or object to processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, email support@review360.io and we will respond within one month. If you are in the EEA/UK, you also have the right to complain to your local data protection authority.

6. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, row-level access controls isolating each customer's data, and restricted access on a need-to-know basis.

7. International transfers

Some of our service providers process data outside your country. Where data leaves the UK/EEA, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

8. Cookies

We use essential cookies required for sign-in and security. We do not use advertising or marketing cookies. When you first visit, a banner lets you accept all cookies or limit us to essential ones; your choice is saved on your device and you can change it by clearing your browser's stored data for this site.