Privacy Policy

Last updated: 24 September 2026

This Privacy Policy explains how Febble Spot (“we,” “us,” “our”) collects, uses, and protects information when you use AiReview — whether as a business owner using the platform or a customer submitting feedback through a business’s review campaign.

1. Information We Collect

From Business Owners

• Account details: name, email address, password (stored as a secure hash, never in plain text)
• Business details you provide: business name, category, contact info, branding, and Google review link
• Usage data: campaigns created, team members invited, subscription plan

From Customers Submitting Feedback

• The rating, tags, and written feedback they choose to submit
• Their selected language
• Basic technical data (timestamp, and which campaign/QR code was scanned) used only for the business’s own funnel analytics

We do not require customers to create an account or provide their name, email, or phone number to submit feedback through a review campaign.

2. How We Use Information

• To operate the core product — generating AI-assisted review drafts strictly from what a customer typed
• To show business owners analytics about their own campaigns
• To send transactional emails (password resets, account creation, team invites) — never marketing emails without consent
• To maintain security, prevent abuse, and enforce our Terms of Service

3. AI Processing

When generating or transforming a review draft, the specific rating, tags, and text a customer entered are sent to our configured AI provider (which may be OpenAI, Anthropic, or an internal offline model, depending on configuration) solely to produce the draft text. No other personal data is included in this request, and the AI is explicitly instructed to use only the information provided — never to introduce facts, names, or claims that weren’t given.

4. Third-Party Service Providers

We rely on the following categories of infrastructure providers to operate AiReview:

• Cloud hosting and deployment (e.g., Vercel)
• Database hosting (e.g., Neon, PostgreSQL)
• Transactional email delivery (e.g., Resend)
• AI providers for review draft generation (e.g., OpenAI, Anthropic), where configured

These providers process data only as needed to deliver the service and are not permitted to use it for their own purposes.

5. Data Retention

We retain account and business data for as long as the account is active. Customer feedback is retained by the business that collected it for as long as their account remains active, subject to their chosen plan’s analytics retention period. You can request deletion of your account and associated data at any time.

6. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. To exercise these rights, contact us using the details on our About page.

7. Cookies and Local Storage

We use essential cookies/local storage required for authentication (keeping you signed in) and basic product functionality. We do not use third-party advertising trackers.

8. Security

Passwords are stored using industry-standard hashing (bcrypt). Access to business data is restricted so that one business owner can never read another business’s data, enforced at the database query level for every request.

9. Children’s Privacy

AiReview is intended for business use and is not directed at children under 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date above.

11. Contact

Questions about this Privacy Policy can be sent to the contact details listed on our About page.