Privacy & data security

Customers tap through reviews on a technician's own phone. Here is exactly how we keep that safe. This page is placeholder wording pending legal review.

Kiosk session isolation

When a technician hands their phone to a customer, the app switches into a locked kiosk view that behaves as a temporary terminal. Customer details entered on that screen are sent straight to our secure servers over an encrypted connection.

We do not keep customer names, phone numbers, email addresses, or review drafts stored on the technician's personal phone. When the session ends or times out, the screen is cleared and nothing remains behind for the next person who picks up the device.

AI processing transparency

The review builder helps customers put their own experience into words. It uses only the tags the customer taps, the business name, the service performed, the technician's first name, and the general city or neighborhood.

Customer phone numbers, email addresses, home addresses, and payment details are never sent to the AI. Drafts are generated in the moment, are always editable by the customer, and are never used to train outside AI models.

PIN security and lockouts

Technician PINs identify who earned each review. They are checked on our servers and stored in scrambled form, never in plain text and never on the device.

Repeated incorrect PIN attempts temporarily lock that technician's profile, and an owner can reset it at any time from the dashboard. Kiosk sessions expire automatically after 12 hours so a forgotten or lost phone cannot keep access open.

Data security

All traffic between devices and our servers is encrypted. Business data is separated per account, so one business can never see another business's customers, technicians, or reviews.

Owners can export or request deletion of their customer contact list at any time.

Google API compliance

Reviews are always written and posted by the customer, in their own Google account, on Google's own page. ReviewShield never posts on a customer's behalf and never filters customers by how happy they are before inviting them.

Rewards are offered for leaving feedback, not for leaving a positive rating, and customers are free to write whatever they wish.

Terms of service

Placeholder terms: accounts are sold per team seat, billed monthly, and can be cancelled at any time. Businesses are responsible for the accuracy of the rewards they advertise and for honoring them with their own customers.