Privacy Policy

Last updated: 14 October 2026

Reviews CRM ("the Service") is operated by Third Eye Solutions ("we", "us"). The Service helps businesses collect customer reviews, draft replies and posts with AI, and manage their Google Business Profile. This policy explains what data we collect, how we use it, and the choices you have.

1. Information we collect

Account information: your name, business name, email address, phone number and a securely hashed password.
Business content you add: business details, services, keywords, competitor names, QR codes, posts and review replies.
Customer reviews and feedback: ratings, comments and (if given) names submitted by your customers through your review page.
Google Business Profile data (only if you connect Google): see section 3.
Technical data: IP address, login times and an activity log of actions taken in your account, used for security and support.

2. How we use information

To provide the Service: show your reviews, generate reply and post drafts, and run the features you use.
To keep accounts secure, prevent abuse and investigate problems.
To manage your subscription, payments and support requests.

We do not sell your data, and we do not use it for advertising.

3. Google user data

If you choose to connect your Google account, the Service asks for permission to manage your Google Business Profile (scope business.manage). With that permission the Service:

reads your business locations and customer reviews so they appear in your dashboard;
publishes posts and review replies to your Business Profile only when you ask it to.

Google access tokens are stored encrypted (AES-256) and are only used to perform these actions for your own account. You can disconnect Google at any time in Settings → Integrations, which deletes the stored tokens and revokes our access. You can also remove access from your Google Account permissions page.

Reviews CRM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the user-facing features described above. It is not used for advertising, not sold, not used to train AI models, and not read by our staff except with your permission for support, for security reasons, or where required by law.

4. AI processing

When you ask the Service to draft a review reply or a post, the relevant text (for example the review being answered and your business details) is sent to OpenAI using the API key connected to your account, solely to generate that draft. Under OpenAI's API terms, this data is not used to train their models.

5. Sharing

We share data only with providers needed to run the Service:

our hosting provider, where the Service and its database run;
OpenAI, for AI drafts as described above;
Google, when you connect your Business Profile.

We may also disclose data where required by law.

6. Security

Passwords are hashed, API keys and Google tokens are encrypted, connections use HTTPS, and each business's data is isolated from every other business at the database level.

7. Retention and deletion

We keep your data while your account is active. You can disconnect Google at any time. To delete your account and its data, email us at thirdeyesolutionsagency@gmail.com; we will delete it within 30 days, except where we must keep records (such as payment records) by law.

8. Your rights

You can ask to access, correct or delete your personal data, or ask questions about this policy, by contacting us at thirdeyesolutionsagency@gmail.com.

9. Changes

We may update this policy. The "Last updated" date above shows when it last changed; significant changes will be communicated to account holders.