Privacy Policy
Last updated: October 7, 2026
Introduction
CoreReview ("we," "us," or "our") helps local businesses manage their Google reviews with AI-drafted replies. This policy explains what information we collect, how we use it, and the choices you have.
Information we collect
- Account details: name, email address, phone number, and password (stored securely by our authentication provider; we never see it).
- Business details you provide: business name, industry, description, brand voice, staff names, and contact preferences.
- Google Business Profile data after you connect it: your business account and location details, reviews, and existing replies.
- Payment records: amounts, dates, and notes for payments you make to us. Payments are made through Venmo; we do not receive or store your card or bank details.
- Usage data such as sign-ins, actions taken, and errors, used to run and improve the product.
How we use information
We use your information to operate CoreReview, draft suggested replies, generate insights, provide support, secure the platform, and send you service emails. We never sell your data, and we do not use it for advertising.
Google user data
CoreReview accesses your Google Business Profile only after you authorize it through Google's sign-in. We use this access only to read your business information and reviews and to publish replies you have approved (or, if you turn it on, replies approved automatically). You can disconnect at any time in Settings, which revokes our access.
CoreReview's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not use it to train AI models. Our team views it only with your permission, for security, or where required by law.
AI processing
Review text and your business details are sent to our AI provider, through Lovable's AI Gateway, only to generate draft replies and insights. Drafts are suggestions; nothing is published without approval. We do not use your data to train AI models.
AI assistants
If you connect an AI assistant (such as Claude or ChatGPT) to CoreReview, it acts using your own signed-in account and can only see your business's data. AI assistants can save draft replies but can never approve or publish them.
Emails
We send emails needed to run your account, such as sign-in confirmations, password resets, access requests, and approvals. Some of these include an unsubscribe link; sign-in and security emails cannot be turned off.
Data security
We use industry-standard safeguards including encryption in transit and role-based access controls. No system is perfectly secure, but we work to protect your data.
Account access for support
Authorized CoreReview team members may access your account to provide support, fix technical issues, or investigate suspicious activity, limited to what is needed. While viewing your account this way, we cannot publish anything to Google. Each time a team member views your account as you, that access is logged.
Service providers
We rely on trusted providers to run CoreReview: Lovable (hosting, email delivery, and AI gateway), Supabase (database and sign-in), Google (Business Profile connection and sign-in), and Venmo (payments). They process data on our behalf to provide the service.
Cookies
We use essential cookies and local storage to keep you signed in and remember preferences. We do not use advertising cookies.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Email hello@corereviewai.com to exercise these rights.
Deleting your data
You can permanently delete your account at any time with "Delete my account" in Settings, or by emailing hello@corereviewai.com (handled within 30 days). Deleting your account removes your business, reviews, drafts and Google connection. We keep records of payments you made, as required for accounting.
Children
CoreReview is for businesses and is not intended for anyone under 18.
Changes to this policy
We may update this policy. If changes are significant, we'll notify you by email or in the app.
Contact
Questions about this policy? Email hello@corereviewai.com.
