Privacy Policy

What we collect

• Account information: your name and email address.
• Business information: business name, trade type, city and state, Google review link, and team member details.
• Job content: photos you upload of completed jobs and any notes you add.
• Customer phone numbers that you enter to send a review request. These are stored as a one-way SHA-256 hash and are never stored in plain text.
• Billing information: handled by Stripe; we do not store full card numbers.

How we use it

• To operate the service: generate captions, post to your connected social accounts, and run your account.
• To send automated SMS review requests to customers you have completed a job for, on your behalf.
• To send transactional account email (sign-up confirmation, billing receipts, security notices).

SMS and mobile opt-in

PostReview, operated by COBRA & SPEER LLC, sends SMS text messages on behalf of the local trade-service businesses that use our platform. The recipients are those businesses’ own customers, who provide their mobile number to the business and agree to be texted at the time of service. After a job is completed, the customer receives a short message asking them to leave a Google review for the business, with a direct review link, followed by at most one reminder.

We do not share, sell, or otherwise provide your mobile phone number or messaging consent information to any third parties or affiliates for marketing or promotional purposes.

Message frequency varies (typically one to two messages per completed job). Message and data rates may apply. Reply STOP to unsubscribe at any time. Reply HELP for help. Mobile opt-in data and consent are never shared with any third parties.

How we store and protect data

Account, business, and job data are stored securely in our Supabase (PostgreSQL) database with row-level security so each business can only access its own records. Social access tokens are encrypted at rest. Customer phone numbers are stored as one-way SHA-256 hashes. All connections use TLS in transit.

Third-party services

We use the following processors strictly to deliver the service:

• Supabase — database, authentication, and file storage.
• Vercel — hosting.
• Stripe — payment processing.
• Twilio — SMS delivery to customers you choose to message.
• Meta (Facebook / Instagram) and Google — only when you connect those accounts so we can post on your behalf.
• Anthropic — to generate post captions from your photos and notes.

Your choices

• You can disconnect any social account at any time from your settings.
• You can cancel your subscription at any time from your billing page.
• You can request deletion of your account and data by emailing us.
• SMS recipients can reply STOP at any time to opt out permanently.

Contact

Questions about this policy or about your data: info@postreviewai.com.

PostReview, operated by COBRA & SPEER LLC.