The fine print, in plain English

Privacy Policy

effective September 25, 2026

WinBack Reviews ("we", "us") is a small business run by a real person. This page explains exactly what information we handle when you use our website and service at winbackreviews.com or aireviewresponce.com, and what we do with it. Short version: we collect the minimum needed to run the service, we never sell your information, and there are no ads or trackers here.

What we collect

• What you give at checkout: your email address, phone number and business name, so we can reach you and set up the service. You don't create an account or a password.
• Your subscription status: whether your plan is active, so we know to keep replying. Payments are handled entirely by Stripe, and we never see or store your card number.
• Your reply settings: your business name, type and voice notes, which replies you'd like to approve first, and whether you'd like an email when replies go out.
• Connected accounts: when we connect your Google Business Profile, we store the access Google gives us, encrypted, and use it only to read your new reviews and post replies to them. You can ask us to disconnect at any time, and you can also remove our access from your Google settings yourself.
• Reviews and replies: to answer reviews automatically, we read the reviews on the places we've connected for you, send each one to our AI provider to write the reply, and keep a record of recent replies (the review, what we posted, and when). If you rate a reply or rewrite one before it posts, we keep that too (your last few rewrites, and your notes), so replies can be matched to how you write.
• Reviews left through your website's review box: the reviewer's name, star rating, review text and the reply are stored so they can be shown on your site. We don't ask reviewers for an email address or set cookies on them.
• Chat on your website: what a visitor types is sent to our AI provider so it can answer from the facts you gave us. Conversations aren't stored. If a visitor leaves their details, their name, phone or email and message go to you by email (with the conversation) and into your list of leads (the latest 200).
• Your free WinBack website: a booking request's name, phone or email, what they need and when goes to you by email and into your list of leads. If the visitor gave an email address (here or in the chat), they get one short confirmation in your business's name. We count visits to the page, not who visited.
• The homepage demo: a review you paste there is sent to our AI provider to write the example reply. We don't store it.
• Messages you send us: if you use the contact form, we receive what you write, plus the name and contact details you include, by email.
• Cookies: none for customers. The only cookies are for our own sign-in to run the service. No advertising or tracking cookies.

Data from Google

When a business connects its Google Business Profile, we use Google's data only to read that business's reviews and overall rating, post the replies it has asked for, and, if the business switches it on, publish a short thank-you post on its profile twice a month. We don't use it for advertising, don't sell it, and don't let people read it except where needed for security, to comply with the law, or with the business's permission. WinBack Reviews' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove our access at any time from your Google account's security settings.

Approval links

If you choose to approve some replies first, we email you a private link for each one. Anyone with the link can approve, edit or skip that one reply, so please don't forward it. Each link works once and expires after 30 days.

Your private page link

Our emails to you include a link to your own WinBack page, where you can see your replies and change a few settings without signing in. Anyone with that link can do the same, so please keep it to yourself. Ask us any time and we'll replace it; the old one stops working.

Referral links

If you arrive through a customer's referral link, the site remembers which customer sent you in your own browser (local storage, not a tracking cookie) for 60 days, and passes it along if you join the waitlist, get in touch or subscribe. That's only used to thank the person who referred you.

Reviews we quote

With a business's permission, WinBack can quote its public 4 and 5-star Google reviews in a thank-you post on its Google profile, or show them in the review box on its website, always with first names only. It never does this for healthcare or legal practices, or for reviews that mention injuries, legal matters or similar. The same rules apply when WinBack suggests a business's recent 4 and 5-star reviews as social media posts: the business decides whether to share them, and WinBack posts nothing itself.

Emails about WinBack itself

If you join the waitlist, we email you once to confirm and once the day WinBack opens. If you also tick the box asking for a few emails about how it works, you get three short ones over two weeks and then no more. They stop early if you reply or use the stop link at the bottom of each one. We count clicks on the links in those three emails, so we know which ones are useful; nothing else is tracked.

Review request emails

If a business asks us to, we email its customers a short request for a review on its behalf. We use those email addresses only to send that request and at most one reminder, never for anything else, and we delete them after 180 days. Every email has an unsubscribe link, and once someone unsubscribes, that business can't ask them through us again. The business is responsible for having a relationship with the people it gives us.

The services that help us run this

Like nearly every online business, we rely on a few trusted providers, and only send each one what it needs to do its job:

• Groq: writes the replies. It receives review text and your business details, solely to produce replies.
• Google: to read your Google reviews and post the replies, once connected.
• Resend: sends our emails (reply summaries and approval requests).
• Stripe: processes payments and manages subscriptions. Your card details go directly to Stripe, never to us.
• Upstash: hosts our database (your details, reply settings, encrypted connections, recent replies).
• Render: hosts the service itself.

We do not sell or rent your personal information to anyone, ever.

How long we keep things

Your details are kept while you're a customer, and deleted on request after you cancel. We keep your 200 most recent replies, plus the reviews left through your website's review box for as long as you keep the box on your site. Disconnecting an account deletes our copy of its access.

Your choices & rights

• You can cancel your subscription anytime from Stripe's billing page, or by asking us.
• You can ask us to delete your information: email drew@winbackreviews.com and we'll take care of it promptly.
• You can ask what information we hold about you, and we'll tell you.

Security

Everything travels over encrypted connections (HTTPS), access to connected Google accounts is stored encrypted, and approval links are stored only in a scrambled (hashed) form.

Children

This service is for businesses and isn't directed at anyone under 16.

Changes

If we change this policy, we'll update this page and the date at the top.

Contact

Questions? Email drew@winbackreviews.com or call (401) 297-8170.