Privacy Policy

Effective date: December 29, 2025

This Privacy Policy explains how Review La La ("Review La La", "we", "us", or "our") collects, uses, discloses, and protects personal information when you use our website, applications, and services (collectively, the "Service"). See our Terms of Service for additional legal details.

Who This Policy Applies To

The Service is a SaaS platform used by businesses to request and manage customer feedback and reviews. Depending on how you interact with the Service, we may collect information about:

• Visitors who browse our website.
• Customers (business users) who create accounts and use the Service.
• End Customers (your customers) whose contact details or feedback are processed through the Service.

Our Role

Businesses using Review La La control the end-customer data they upload or send through the Service. In many cases, we act as a service provider or processor on behalf of those businesses. If you are an end customer and have questions about how a business uses your information, please contact that business directly.

Information We Collect

Information you provide

• Account information such as name, business name, email address, phone number, and login credentials.
• Profile and preferences such as company website, business description, brand voice, and template settings.
• Billing information such as billing contact details and payment status. Payments may be processed by a third-party payment processor. We do not store full payment card numbers.
• Support communications including messages you send to us through forms, email, chat, or other channels.

Information processed on behalf of our business customers

• End-customer contact information (for example: name, phone number, email address) provided by the business user.
• Feedback content such as ratings, comments, and messages exchanged through the Service.
• Review-related metadata such as send status, delivery results, link clicks, and timestamps.

Information collected automatically

• Usage data such as pages viewed, features used, actions taken, and referring/exit pages.
• Device and log data such as IP address, browser type, device identifiers, operating system, and crash/diagnostic logs.
• Cookies and similar technologies as described in the Cookies & Tracking section below.

Information from integrations

If you connect third-party tools (such as CRMs, scheduling tools, messaging providers, or analytics), we may receive information from those services according to your settings and the integration permissions you grant.

Sensitive information

Please do not submit sensitive personal information through the Service (such as government identifiers, health information, or financial account information), unless we specifically request it for a defined purpose.

How We Use Information

We use personal information to:

• Provide, operate, maintain, and improve the Service.
• Create and manage accounts, authenticate users, and provide customer support.
• Send service-related communications (for example: confirmations, alerts, administrative messages).
• Send messages on behalf of our business customers (for example: review requests, feedback follow-ups), according to their instructions.
• Process payments and manage subscriptions.
• Monitor, prevent, and address fraud, abuse, security incidents, and technical issues.
• Analyze usage trends and measure performance to improve user experience.
• Comply with legal obligations and enforce our terms and policies.

Legal Bases (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process personal information when we have a valid legal basis, including:

• Contract (to provide the Service you requested).
• Legitimate interests (for example: security, fraud prevention, and improving the Service) where those interests are not overridden by your rights.
• Consent (for example: certain marketing communications or non-essential cookies, where required).
• Legal obligation (to comply with laws and regulations).

How We Share Information

We do not sell personal information. We may share personal information in the following circumstances:

• Service providers who help us operate the Service (for example: cloud hosting, analytics, customer support tools, email/SMS delivery providers, and payment processors). These providers are authorized to use personal information only as necessary to provide services to us.
• Business customers (the business you interacted with) when information is processed in connection with review requests, feedback, or support.
• Legal and safety when we believe disclosure is necessary to comply with law, enforce our policies, respond to lawful requests, or protect rights, safety, and property.
• Business transfers in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets. We will take reasonable steps to provide notice where required by law.
• With your direction when you choose to share information through integrations or request that we do so.

Cookies & Tracking

We use cookies and similar technologies (such as pixels and local storage) to operate the Service, remember preferences, understand usage, and improve performance. Cookies may be set by us or by third parties.

• Essential cookies help the site function (for example: security and session management).
• Analytics cookies help us understand how visitors use the site and Service.
• Preference cookies remember settings and improve your experience.

You can control cookies through your browser settings and may be able to reset identifiers by clearing cookies. If you disable cookies, some features may not function properly.

Marketing Communications

We may send marketing emails to business users (for example: product updates and promotions). You can opt out at any time by using the unsubscribe link in those messages.

Businesses using Review La La are responsible for ensuring they have the appropriate permissions to contact their customers by email or SMS. End customers can opt out of SMS messages by replying STOP (or any other method described in the message), and can opt out of marketing emails via the unsubscribe link when provided.

Data Retention

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods may vary depending on the type of information and whether we process it as a service provider/processor for a business customer.

Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

International Data Transfers

We may process and store information in the United States and other countries where we or our service providers operate. If you access the Service from outside the United States, you understand that your information may be transferred to and processed in countries with different data protection laws. Where required, we use appropriate transfer mechanisms.

Your Privacy Rights and Choices

Account information

You may review and update certain account information by logging into your account. If you need help, contact us using the details below.

Access, correction, deletion, and portability

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of your personal information. We will respond as required by applicable law.

State privacy disclosures (United States)

Certain U.S. state laws provide residents additional rights regarding personal information. Subject to applicable law, these rights may include:

• Confirm whether we process personal information and access that information.
• Correct inaccuracies.
• Delete personal information.
• Obtain a portable copy of personal information.
• Opt out of certain processing (for example: targeted advertising or profiling) where applicable.

We do not sell personal information as defined under applicable state privacy laws.

How to exercise your rights

To submit a request, contact us using the details below. We may need to verify your identity and/or your authority to act on behalf of an account.

If you are an end customer interacting with a business using Review La La, please direct your privacy request to that business. We will assist the business as required and appropriate.

Children’s Privacy

The Service is not directed to children under 13 (or other age as required by local law), and we do not knowingly collect personal information from children. If you believe a child has provided personal information, please contact us and we will take appropriate steps.

Third-Party Links

The Service may contain links to third-party sites or services. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. Please review their policies before providing information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to provide notice (for example: by posting an update on this page or within the Service). The “Effective date” above indicates when this Policy was last updated.

Contact

If you have questions or requests regarding privacy, contact us at:

• Email: privacy@reviewlala.example
• Mailing address: [Add your legal entity name and mailing address]