Privacy Policy

Real Reviews by Real People ("we," "us," or "our") operates the realreviewsbyrealpeople.com website and the associated reputation management platform (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used here have the same meanings as in our Terms and Conditions.

We collect several types of information in connection with the operation of our Service:

Personal Data You Provide

While using our Service, we may ask you to provide certain personally identifiable information that can be used to identify or contact you, including:

• Name and contact details (email address, phone number)
• Business name, address, and industry
• Account login credentials (username and encrypted password)
• Payment and billing information (processed securely by our payment providers)
• Communications you send us via contact forms, email, or support tickets

Data Collected Automatically

When you access the Service, we automatically collect certain information, including:

• Log data (IP address, browser type, pages visited, time and date, referring URL)
• Device information (hardware model, operating system, unique device identifiers)
• Usage data (features used, actions taken, session duration)
• Cookie and tracking technology data (see the Cookies section below)

Customer Review Data

As part of the review management service, we may process data about your customers, including:

• Customer contact information used to send review requests (name, email, phone)
• Review content, ratings, and responses
• Timestamps and metadata associated with reviews

You are responsible for ensuring you have appropriate consent from your customers before submitting their data to our platform.

We use the collected data for the following purposes:

• Service Delivery: To provide, operate, and maintain the Service you've subscribed to
• Account Management: To create and manage your account, authenticate your identity, and process payments
• Customer Support: To respond to your inquiries, resolve disputes, and troubleshoot issues
• Service Improvement: To analyze usage patterns, conduct research, and improve our platform's features and performance
• Communications: To send transactional emails, service updates, security alerts, and (with your consent) marketing communications
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Fraud Prevention: To detect, prevent, and investigate potentially prohibited or illegal activities
• AI Enhancements: To power XMS Ai features such as review response suggestions and sentiment analysis, using anonymized or aggregated data

We will not use your personal data for purposes other than those described in this Policy without first obtaining your consent or as otherwise permitted by law.

We do not sell, rent, or trade your personal data to third parties. We may share your information only in the following limited circumstances:

• Service Providers: We share data with trusted third-party vendors who assist in operating our Service (e.g., payment processors, cloud hosting, email delivery, analytics). These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.
• Platform Integrations: When you connect third-party platforms (Google, Yelp, Facebook, etc.), we share data necessary to enable that integration as directed by you.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data is subject to a different privacy policy.
• Legal Requirements: We may disclose your information if required to do so by law, court order, or in response to a valid request by governmental authorities.
• Protection of Rights: We may disclose your information when we believe it is necessary to prevent fraud, protect the rights or safety of our company, users, or the public.

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are small data files placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

We use the following types of cookies:

• Essential Cookies: Required for the Service to function properly. These cannot be disabled (e.g., authentication session cookies).
• Preference Cookies: Remember your settings and preferences such as language or display theme.
• Analytics Cookies: Help us understand how visitors interact with the Service, allowing us to improve user experience (e.g., Google Analytics).
• Marketing Cookies: Track your visits across websites to display relevant advertising. You may opt out of these through your browser settings or industry opt-out tools.

By continuing to use our Service, you consent to our use of cookies as described in this Policy. You may update your cookie preferences at any time through your browser settings.

The security of your data is a top priority. We employ a variety of technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse, including:

• SSL/TLS encryption for all data in transit
• Encryption of sensitive data at rest
• Role-based access controls limiting employee access to personal data
• Regular security audits and vulnerability assessments
• Secure, PCI-DSS compliant payment processing via third-party providers
• Intrusion detection and monitoring systems

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.

In the event of a data breach that affects your personal information, we will notify you in accordance with applicable law.

We retain your personal data for as long as necessary to provide the Service, fulfill the purposes described in this Policy, and comply with our legal obligations.

• Account Data: Retained for the duration of your account plus a reasonable grace period after cancellation (typically 90 days), during which you may reactivate your account.
• Review Data: Retained for the duration of your subscription. Upon termination, data may be exported by you or will be deleted within 90 days.
• Payment Records: Retained for up to 7 years for accounting and legal compliance purposes.
• Log Data: Retained for up to 12 months for security and analytics purposes.

You may request deletion of your personal data at any time (subject to legal retention requirements) by contacting us through our website.

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten"), subject to certain exceptions.
• Right to Restrict Processing: Request that we limit how we process your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to the processing of your personal data for direct marketing or based on our legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, please contact us. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

Our Service is not directed to individuals under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18.

If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us immediately. If we become aware that we have collected personal data from children without parental consent verification, we will take steps to remove that information from our servers.

Our Service may contain links to other websites or enable integrations with third-party platforms that are not operated by us. If you click a third-party link, you will be directed to that third party's site.

We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Third-party platforms integrated with our Service (such as Google Business Profile, Yelp, Facebook, TripAdvisor, and others) are governed by their own privacy policies and terms of service.

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights regarding your personal information:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, and the purposes for which it was used.
• Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell personal information. However, you have the right to opt out should this ever change.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To make a CCPA request, please contact us with "CCPA Request" in the subject line. We will verify your identity and respond within the timeframes required by law.

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

For significant changes affecting how we use your personal data, we may also provide notice via email or a prominent notice within the Service prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after the posting of changes constitutes your acceptance of such changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

We aim to respond to all privacy-related inquiries within 30 business days.