Privacy Policy

BeamRatings (“BeamRatings,” “we,” “us”) helps local service businesses request and collect customer reviews. This policy explains what data we collect, how we use it, and the choices you have. Questions? Email support@beamratings.com.

Who we are

BeamRatings operates this service. For the personal data of your customers that you upload and email through BeamRatings, you are the data controller and BeamRatings acts as a processor on your behalf. For your own account data, BeamRatings is the controller. Our legal entity name and registered postal address are available on request at the email above and appear on our billing documents.

Information we collect

• Account data. Your name, email, password (stored hashed), and business details (business name, postal address, city/state, Google review link).
• Your customers' contact data. The names, email addresses, and optional phone numbers you add or import so we can send review requests on your behalf, plus the resulting ratings and any private feedback they submit.
• Usage data. Request status (sent, opened, rated), timestamps, and basic technical logs needed to operate the service.

How we use it

• To send review-request and reminder emails to your customers on your behalf.
• To show you a dashboard of your requests, ratings, and feedback.
• To operate, secure, and improve the service, and to provide support.
• To process billing through our payment provider.

Our legal basis for processing is the performance of our contract with you and our legitimate interest in operating the service. We do notsell your data or your customers' data, and we never suppress reviews or post fake ones.

Cookies

We use a single, strictly-necessary session cookie to keep you logged in. We do not use advertising or third-party tracking cookies, so no cookie-consent banner is required to use the service. If we ever add analytics, we will update this policy first.

Google account data (“Connect Gmail”)

If you choose to connect your Google account so review-request emails send from your Gmail, we request only the gmail.send scope, which permits sending mail on your behalf. We use this access solely to send the review-request and reminder emails you configure. We cannot and do not read, modify, delete, or download any of your existing email or mailbox contents. We store an encrypted refresh token to keep sending enabled; you can disconnect at any time from your settings, which deletes that token. BeamRatings' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers we share with

• Email delivery. Resend, and (only if you configure them) your own SMTP server or your connected Gmail account, to deliver your emails.
• Payments. sell.app and its connected payment processors handle subscription and one-time payments. We do not store your full card details.
• Hosting. Our servers, which store the application database. Data may be processed in the United States; where required, we rely on appropriate safeguards for any international transfer.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, export, or object to the processing of your personal data (for example under GDPR/UK GDPR), and the right to know about, delete, correct, and opt out of the “sale” or “sharing” of your personal information (under the CCPA/CPRA). We do not sell or share personal information. To exercise any right, email support@beamratings.com and we will respond as required by law. Customers who receive a review request can also use the unsubscribe link in any email at any time.

Data retention

We keep your data for as long as your account is active. You can edit your business details, disconnect Gmail, or ask us to delete your account and associated data by emailing the address above.

Children

BeamRatings is a business tool and is not directed to children under 16, and we do not knowingly collect personal data from them.

Security

Passwords are hashed, and sensitive secrets (such as email credentials and Google refresh tokens) are encrypted at rest. No system is perfectly secure, but we take reasonable measures to protect your data.

Changes

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.