How we protect your data.
How we collect, use, and protect your information. Last updated March 24, 2026.
Your Privacy Matters
5S Reviews ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. We comply with GDPR, CCPA, and other applicable privacy regulations.
GDPR Compliant
We comply with the EU General Data Protection Regulation (GDPR) for all European users.
CCPA Compliant
We comply with the California Consumer Privacy Act (CCPA) for all California residents.
Table of Contents
1. Information We Collect
1.1 Information You Provide Directly
We collect information that you provide to us directly when you:
- Create an Account: Name, email address, password, phone number, business name, business address
- Use the Services: Business information, Google Business Profile data, review content, response templates, brand voice preferences
- Make Payments: Billing information (processed securely by Stripe; we do not store full credit card numbers)
- Contact Us: Support inquiries, feedback, correspondence
- Review Collection Features: Customer contact information (names, phone numbers, email addresses) that you upload or enter for the purpose of sending review requests. This data is provided by you and you are responsible for having proper consent to contact these individuals.
- SMS and WhatsApp Notifications: Phone numbers provided for SMS and WhatsApp review request notifications
- Physical Product Orders: Shipping addresses provided for physical product orders (NFC review cards)
- FTC Compliance Tool: Message text submitted for compliance checking is processed in real-time and not stored separately. The tool provides automated guidance only and is not legal advice.
1.2 Information Collected Automatically
When you use our Services, we automatically collect:
- Usage Data: Pages viewed, features used, time spent, click patterns
- Device Information: IP address, browser type, operating system, device identifiers
- Log Data: Access times, error logs, performance data, API requests
- Cookies: Session cookies, preference cookies, analytics cookies (see our Cookies Policy)
2. How We Use Your Information
We use the information we collect for the following purposes:
Provide and Improve Services
- Operate and maintain the platform
- Generate AI-powered review responses
- Sync reviews from Google Business Profile
- Send notifications about new reviews
- Send review request messages via SMS and WhatsApp using Twilio
- Generate social media posts, ad copy, and testimonial cards from your reviews using AI
- Power embeddable review widgets on your website
- Send escalation alerts when critical negative reviews are detected
Process Transactions
- Process subscription payments
- Send invoices and receipts
- Manage billing and account changes
- Process and fulfill physical product orders (NFC review cards) including shipping
Communication
- Send service updates and announcements
- Respond to support requests
- Send marketing communications (with consent)
Growth and Engagement
- Manage referral campaigns and track referral conversions
Security and Compliance
- Detect and prevent fraud and security threats
- Enforce our Terms of Service
- Comply with legal obligations
3. Legal Basis for Processing (GDPR)
If you are located in the EEA, UK, or Switzerland, we process your data based on:
Contract Performance
Processing necessary to provide Services you requested
Consent
Processing based on your explicit consent (e.g., marketing emails)
Legitimate Interests
Processing for our legitimate business interests (e.g., fraud prevention)
Legal Obligation
Processing required to comply with legal obligations
5. SMS and WhatsApp Communications
We use Twilio to send SMS and WhatsApp messages on your behalf for review collection.
- Messages are only sent to contacts you have explicitly added or imported.
- You are responsible for obtaining proper consent from recipients before adding them.
- All messages include opt-out instructions. Recipients can reply STOP at any time.
- We comply with the Telephone Consumer Protection Act (TCPA), CAN-SPAM Act, and Canada's Anti-Spam Legislation (CASL).
- Message frequency depends on your campaign settings. Standard message and data rates may apply.
- We do not sell or share phone numbers with third parties for marketing purposes.
6. Physical Product Orders
- When you order NFC review cards, we collect shipping information (name, address, city, state/province, ZIP/postal code, country) to fulfill your order.
- Payment is processed securely through Stripe. We do not store credit card numbers.
- Shipping information is retained for order fulfillment and customer support purposes.
- Order data may be shared with shipping carriers (USPS, UPS, FedEx) for delivery.
7. International Data Transfers
5S Reviews is based in the United States. If you access our Services from outside the US, your information will be transferred to and processed in the United States using Standard Contractual Clauses (SCCs).
8. Data Retention
Active Account Data
- Account Data: Duration of your active account
- Review Data: Duration of your active account
- AI Responses: Duration of your active account
- Billing Records: 7 years (legal requirement)
- Log Data: 90 days
Data Deletion Policy
When you delete your account, disconnect a location, or request data deletion:
- Immediate Permanent Deletion: All your reviews, AI responses, analytics, and personal data are permanently and irreversibly deleted from our systems.
- No Data Retention: We do not retain any of your data for training, analytics, or any other purpose after deletion.
- GDPR Compliant: Our deletion process fully complies with GDPR Article 17 (Right to Erasure) and CCPA requirements.
9. Data Security
Encryption
- TLS/SSL encryption in transit
- AES-256 encryption at rest
Access Controls
- Role-based access control
- Multi-factor authentication
Monitoring
- 24/7 security monitoring
- Regular security audits
Compliance
- GDPR compliance
- Regular penetration testing
10. Your Privacy Rights
Access
Request a copy of your personal information
Correction
Request correction of inaccurate information
Deletion
Request deletion of your personal information
Data Portability
Request a copy in machine-readable format
Withdraw Consent
Withdraw consent for marketing communications
How to Exercise Your Rights
Email us at: support@5sreviews.com
11. California Privacy Rights (CCPA)
California residents have additional rights including the right to know, delete, and opt-out of sale. We do not sell your personal information.
12. European Privacy Rights (GDPR)
EU/UK/Swiss users have the right to lodge complaints with their local data protection authority. Contact our DPO at: support@5sreviews.com
14. Children's Privacy
Our Services are not intended for children under 18. We do not knowingly collect information from children.
15. Third-Party Services
Our Services integrate with third-party services that have their own privacy policies. These include:
- Google (Google LLC) — Business Profile and review data
- Stripe (Stripe, Inc.) — Payment processing
- OpenAI (OpenAI, Inc.) — AI language model processing
- Supabase (Supabase, Inc.) — Database hosting and authentication
- Facebook (Meta Platforms, Inc.) — Page reviews and recommendations
- Yelp (Yelp Inc.) — Business review data
- TripAdvisor (TripAdvisor LLC) — Location review data
- Twilio (Twilio Inc.) — SMS and WhatsApp messaging
We encourage you to review the privacy policies of these third-party services.
16. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you via email of material changes at least 30 days before they take effect.
17. Contact Us
VIRTUALLIFE TECHNOLOGIES INC.
Operating as 5S Reviews
Privacy Inquiries: support@5sreviews.com
Data Protection Officer: support@5sreviews.com
General Support: support@5sreviews.com