Privacy Policy

1. Data controller

Controller: Francisco Peris Oller (self-employed / sole trader), tax ID (NIF) 33570350X, trading as RoviDev.

Contact address: soporte@rovidev.com.

For any question about this policy or your personal data, you can write to that address.

2. What data we process

Account data: name, email and authentication data of the person who signs up (managed through our identity provider, Logto).

Business data: business name, industry, locations, business context, tone and automation preferences you enter in the dashboard.

Contact and customer data: names, emails and/or phone numbers of the people you (our customer) choose to send review-request campaigns to.

Review data: the public content of reviews we sync from Google, Facebook or Tripadvisor about your business, including the public reviewer name as it appears on those platforms.

Billing data: handled directly by Stripe, our payment processor; we never store card numbers ourselves.

Usage and analytics data: pages visited, interactions and technical browser data, collected via Google Analytics only if you accept analytics cookies in the corresponding banner.

3. Purpose and legal basis

Providing the contracted service (review management, AI replies, request campaigns, public widget) — legal basis: contract performance.

Sending the review-request campaigns you configure to your own contacts, by email, SMS or WhatsApp — legal basis: contract performance with our customer and legitimate interest in delivering the service.

Managing subscription billing — legal basis: contract performance.

Sending operational alerts (new reviews, digests, billing notices) — legal basis: contract performance.

Measuring site usage to improve the product — legal basis: consent, obtained through the cookie banner. You can withdraw it at any time.

Complying with legal obligations (invoicing, tax) — legal basis: legal obligation.

4. Who we share data with

We do not sell personal data to third parties. We only share data with the providers necessary to deliver the service, acting as data processors:

· Logto — user authentication and identity.

· Stripe — payment processing and billing.

· Google (Analytics and Search Console) — site analytics, only if you accept the corresponding cookies.

· Meta / WhatsApp Business Platform — sending alerts and campaigns via WhatsApp, when you enable that channel.

· Twilio — sending SMS campaigns, when you enable that channel.

· Outbound email provider (SMTP) — sending transactional and campaign emails.

· Google Business Profile, Meta (Facebook) and Tripadvisor — as the source of the public review data we sync, through the connection you authorize.

Some of these providers may process data outside the European Economic Area; in those cases they rely on safeguards recognized under applicable law (such as the European Commission Standard Contractual Clauses).

5. How long we keep your data

Account and business data is kept while the account is active and, after cancellation, for the period required to meet legal obligations (tax, accounting).

Contacts imported for campaigns are kept while the customer keeps them in their dashboard, and can be deleted at any time from the Acquisition section.

Analytics data is kept according to Google Analytics retention settings, with a maximum of 14 months.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time by writing to soporte@rovidev.com.

If you believe the processing of your data does not comply with applicable law, you have the right to file a complaint with the competent supervisory authority.

7. Cookies

We use technical cookies necessary for the dashboard to work (session, language) and, only if you accept them via the corresponding banner, Google Analytics cookies. You can change your decision by clearing this site's data in your browser, which will make the banner appear again.

8. Children

This service is aimed at businesses and professionals, not at minors. We do not knowingly collect data from minors.

9. Changes to this policy

We may update this policy to reflect changes in the service or applicable law. The date of the last update appears at the top of this document.