How we collect, use, store, and protect your personal information when you use Integrated Reviews.
Integrated Reviews is operated by Affordable Website Design (SSM: TR0315856-M) ("we", "us", "our"), which runs the integratedreviews.com website and the Integrated Reviews platform (together, the "Service"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and what choices you have.
By using our Service, you agree to the collection and use of information as described in this policy. If you do not agree with this policy, please do not use our Service. This policy forms part of our Terms of Service.
When you create an account, we collect your name, email address, and password (stored as a one-way hash). If you are added to an organisation by an administrator, they provide your name and email address on your behalf.
When you join our waitlist, we collect your name, work email address, company name, and number of locations. This information is used solely to contact you about early access availability and to prioritise onboarding.
When you contact us through our website, we collect your name, email address, topic selection, and message content. This information is used to respond to your enquiry.
When you connect your Google Business Profile through our OAuth integration, we access and store the following data from your connected locations: business name and address, review content (reviewer display name, star rating, review text, review date, reply text), location metadata (categories, place ID), and profile information necessary to maintain the API connection.
We access this data using Google's Business Profile API with OAuth 2.0 authentication. You grant access through Google's standard consent flow, and you can revoke access at any time through your Google account settings or by disconnecting Google in Settings → Connections.
Review text from your Google reviews is processed by our AI enrichment engine to extract structured data including sentiment classification, customer needs and themes, topic categorisation, and reply quality analysis, and to draft suggested replies. This enriched data is stored in our database and associated with your organisation's account. We do not use your organisation's data to train AI models.
We automatically collect certain technical information when you use the Service, including IP address (for rate limiting and security), browser type and version, pages visited and actions taken within the platform, and timestamps of access. We do not serve advertisements.
On our public website (marketing pages), we use Google Analytics 4 and Microsoft Clarity to understand visitor behaviour, traffic sources, and page engagement. These tools collect anonymised usage data and are not present within the authenticated platform. Logged-in users are never tracked by third-party analytics. See our Cookie Policy for details.
Payment processing is handled entirely by Stripe. We never collect, see, or store card numbers or bank account details. We store your Stripe customer and subscription identifiers, and we can see your plan, billing period, invoice amounts, and payment status so we can show them in Settings → Billing. Stripe collects payment method details, billing address, and transaction history in accordance with its own privacy policy.
| Data | Purpose | Legal basis |
|---|---|---|
| Account details | Authenticate you, manage your access, communicate about your account | Contract performance |
| Waitlist details | Contact you about early access, prioritise onboarding | Consent (provided at submission) |
| Contact submissions | Respond to your enquiry | Legitimate interest |
| Google review data | Display in your dashboard, enrich with AI, generate analytics, power widgets | Contract performance |
| AI enrichment data | Provide structured review intelligence, reply drafts, analytics and alerts | Contract performance |
| Technical/usage data | Security, rate limiting, debugging, service improvement | Legitimate interest |
| Billing data (via Stripe) | Process payments, manage subscriptions, show billing status, send payment notices | Contract performance |
We share personal information with the following third-party processors, only to the extent necessary to provide the Service:
| Provider | Purpose | Data shared |
|---|---|---|
| Google (Business Profile API) | Sync review data from connected business profiles | OAuth tokens; we receive review data including public reviewer names |
| Anthropic (Claude API) | AI enrichment of review text and reply drafts | Review text, star ratings, location names and your reply settings. Anthropic does not use API inputs for model training. |
| Stripe | Payment processing and subscription management | Billing details you provide directly to Stripe; your organisation name and billing email |
| Hosting provider | Running the Service and storing its database | All Service data, stored on servers we control access to |
| Email delivery provider | Sending account, alert, report and billing emails | Recipient email address and email content |
| Google Analytics 4 (public website only) | Website analytics | Anonymised page views, traffic sources, device type, geographic region. IP anonymisation enabled. Not used in the authenticated platform. |
| Microsoft Clarity (public website only) | Session recording and heatmaps | Anonymised interaction data on public pages. Sensitive inputs masked. Not used in the authenticated platform. |
We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We do not use your data for advertising.
The Service processes Google review data that contains information about third-party individuals — specifically, the display names and review content of people who have left reviews on your Google Business Profile. This data is publicly available on Google and is accessed through Google's official API.
We process this data on your behalf as a data processor. You, as the data controller for your organisation's use of the Service, are responsible for ensuring your use of this data complies with applicable data protection laws. Reviewer last names are truncated to initials in our review widget to limit public exposure of personal information.
We retain your account data for as long as your account is open. If your paid plan ends, your account moves to the free plan and your data is kept; locations that are turned off keep their history so they can be turned back on.
If you ask us to close your account, we keep your data for a 30-day grace period in case you change your mind. After that, it is excluded from all processing and permanently deleted within 90 days, except records we must keep by law (such as invoices).
Waitlist submissions are retained until we have contacted you about access or you request deletion, whichever comes first. Contact form submissions are retained for up to 12 months.
We implement appropriate technical and organisational measures to protect your personal information, including encryption of data in transit (TLS 1.2+), encryption of sensitive credentials at rest (AES-256), multi-tenant data isolation enforced at the database query level, bcrypt password hashing, rate limiting and brute-force protection, CSRF protection on all state-changing requests, and regular security updates to server infrastructure. For more detail, see our Security page.
We are based in Malaysia. Some of our processors operate outside Malaysia: Google, Anthropic, and Stripe process data in the United States and other countries where they operate. Where personal data is transferred outside Malaysia, we take reasonable steps to ensure it is protected to a standard comparable to the Personal Data Protection Act 2010. By using the Service, you consent to these transfers.
Depending on your location and applicable law, you may have the following rights regarding your personal information:
Access: You can request a copy of the personal data we hold about you.
Correction: You can update your account information directly in the platform, or request that we correct inaccurate data.
Deletion: You can request that we delete your personal data. For account data, this will involve closing your account. For waitlist or contact form data, we will delete it upon request.
Data portability: You can request your data in a structured, machine-readable format.
Objection: You can object to processing based on legitimate interest.
Withdrawal of consent: Where processing is based on consent (e.g., waitlist submissions), you can withdraw consent at any time.
To exercise any of these rights, contact us at privacy@integratedreviews.com. We will respond within 30 days.
If you are a Malaysian resident, you have rights under the Personal Data Protection Act 2010 (PDPA), including the right to access and correct personal information we hold about you. We comply with the data protection principles set out in the Act. If you have a complaint about our handling of your personal information, you can contact us directly or lodge a complaint with the Department of Personal Data Protection (JPDP) at pdp.gov.my.
Our Service is for businesses and is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.
If you have questions about this Privacy Policy or our data practices, contact us at:
Affordable Website Design (SSM: TR0315856-M), trading as Integrated Reviews
Taman Negeri, Ampangan, 70400, Seremban, Negeri Sembilan
privacy@integratedreviews.com
See also our Terms of Service and Refund Policy.