Privacy Policy

What we collect

• Account information: your name and email address.
• Business information: business name, trade type, city and state, Google review link, and team member details.
• Job content: photos you upload of completed jobs and any notes you add.
• Customer phone numbers that you enter to send a review request. These are stored as a one-way SHA-256 hash and are never stored in plain text.
• Billing information: handled by Stripe; we do not store full card numbers.

How we use it

• To operate the service: generate captions, post to your connected Facebook Page and Instagram account, and run your account.
• To send automated SMS review requests to customers you have completed a job for, on your behalf.
• To send transactional account email (sign-up confirmation, billing receipts, security notices).

Facebook and Instagram data

When you connect your Facebook Page, you sign in with Facebook and choose which Page PostReview may use. From Meta we receive and keep only:

• The name and ID of the Facebook Page you selected.
• An access token for that Page, which lets us publish posts to it.
• The ID and username of the Instagram business account linked to that Page, if there is one.

We use this only to publish the job posts you create and approve in PostReview, and to show you where each post went. We do not read your Page’s messages, comments, followers, or insights, we do not post anything you haven’t created in the app, and we never sell or share this data. Page access tokens are encrypted at rest. When you disconnect Facebook in PostReview, we delete the stored token and account details immediately. Posts already published stay on Facebook and Instagram until you remove them there.

SMS and mobile opt-in

PostReview, operated by COBRA & SPEER LLC, sends SMS text messages on behalf of the local trade-service businesses that use our platform. The recipients are those businesses’ own customers, who provide their mobile number to the business and agree to be texted at the time of service. After a job is completed, the customer receives a short message asking them to leave a Google review for the business, with a direct review link, followed by at most one reminder.

We do not share, sell, or otherwise provide your mobile phone number or messaging consent information to any third parties or affiliates for marketing or promotional purposes.

Message frequency varies (typically one to two messages per completed job). Message and data rates may apply. Reply STOP to unsubscribe at any time. Reply HELP for help. Mobile opt-in data and consent are never shared with any third parties.

How we store and protect data

Account, business, and job data are stored securely in our Supabase (PostgreSQL) database with row-level security so each business can only access its own records. Social access tokens are encrypted at rest. Customer phone numbers are stored as one-way SHA-256 hashes. All connections use TLS in transit.

Third-party services

We use the following processors strictly to deliver the service:

• Supabase: database, authentication, and file storage.
• Vercel: hosting.
• Stripe: payment processing.
• Twilio: SMS delivery to customers you choose to message.
• Meta (Facebook / Instagram): only when you connect your accounts, so we can post on your behalf.
• Anthropic: to generate post captions from your photos and notes.

How long we keep data

We keep your account, business, and job data for as long as your account is open. Social access tokens are kept only while that account is connected. When you ask us to delete your account, we delete your account, business, job, and photo data within 30 days of your request. We keep only the minimum records needed to keep honoring SMS opt-outs and to meet legal or billing obligations. See how to delete your data.

Your choices

• You can disconnect any social account at any time from your settings.
• You can cancel your subscription at any time from your billing page.
• You can request deletion of your account and data by emailing us. We complete it within 30 days. Data deletion instructions.
• SMS recipients can reply STOP at any time to opt out permanently.

Contact

Questions about this policy or about your data: info@postreviewai.com.

PostReview, operated by COBRA & SPEER LLC.