Table of Contents
1. Who We Are
ReviewEngine is a product of Allgood Marketing LLC, a marketing agency headquartered in New Jersey. We provide review monitoring, AI-assisted response drafting, and SMS review request services to healthcare and wellness businesses.
When this policy says "we," "us," or "our," it means Allgood Marketing LLC. When it says "you," it means you — the business owner, agency, or individual using ReviewEngine.
Questions about this policy? Email us at contact@allgoodseo.com.
2. What Data We Collect
Account Information
When you create a ReviewEngine account, we collect:
- Business name and contact name
- Email address
- Phone number (optional, used for account alerts)
- Business location(s) — name and Google Business Profile URL
- Subscription plan and billing history
Review Data
ReviewEngine monitors publicly posted reviews on platforms including Google, Yelp, Facebook, Healthgrades, Trustpilot, Zocdoc, TripAdvisor, and the Better Business Bureau. This data is publicly available and includes:
- Reviewer display name and star rating
- Review text and date posted
- Platform the review was posted on
We do not collect, store, or process any private reviewer information beyond what is publicly visible on the review platform.
Patient / Customer Contact Data (SMS Feature)
If you use our automated SMS review request feature (Growth and Agency plans), you will upload or provide a list of your patients' or customers' phone numbers so we can send them review request text messages on your behalf. This data is:
- Used solely to send the review request SMS you authorize
- Never sold, rented, or shared with third parties for marketing
- Deleted within 30 days of account cancellation
You are responsible for ensuring you have appropriate consent from your patients or customers to send them SMS messages. ReviewEngine processes this data as a data processor acting on your instructions.
Payment Information
All payment processing is handled by Stripe. ReviewEngine does not store your credit card number, card verification code, or full payment details on our servers. We receive only a Stripe customer ID and subscription status. See Stripe's Privacy Policy for details on how they handle payment data.
Usage Data
We automatically collect limited technical data when you use ReviewEngine, including:
- IP address and browser type
- Pages visited and features used within the app
- Timestamps of logins and approvals
This data is used to operate and improve the service, and is not sold or used for advertising.
3. How We Use Your Data
We use the data we collect to:
- Monitor your reviews — pulling new reviews from connected platforms and alerting you in real time
- Generate AI response drafts — using your review text and business context to produce professional, on-brand response suggestions for your approval
- Send SMS review requests — texting your provided patient/customer list on your behalf via Twilio
- Send you email alerts and reports — including new review notifications, weekly summaries, and monthly performance reports
- Process billing — managing your subscription through Stripe
- Provide customer support — using your account details to respond to your support requests
- Improve the service — using aggregated, anonymized usage patterns to improve features
We do not use your data for advertising. We do not sell your data to any third party. We do not use your review data to train general AI models shared across customers without your consent.
4. Third-Party Services
ReviewEngine uses a small number of trusted third-party services to deliver the product. Here is who they are, what they receive, and why:
Stripe — Payment Processing
Stripe handles all subscription billing. When you check out, your payment details go directly to Stripe. We receive only a customer token and subscription status. Stripe Privacy Policy →
Twilio — SMS Delivery
Twilio sends the SMS review request messages on your behalf. Your customers' phone numbers are transmitted to Twilio only at the moment the message is sent. Twilio does not retain these for advertising purposes. Twilio Privacy Policy →
DataForSEO — Review Data
We use DataForSEO's API to pull publicly available review data from Google, Yelp, and other platforms. No personal data from your account is shared with DataForSEO — only the business location identifiers needed to retrieve reviews. DataForSEO Privacy Policy →
OpenAI — AI Response Drafts
Review text is sent to OpenAI's API to generate response drafts. Per OpenAI's API data usage policy, data submitted via the API is not used to train OpenAI's models by default. No patient names, medical information, or protected health information is included in prompts. OpenAI Privacy Policy →
We do not share your data with any advertising networks, data brokers, or analytics platforms that sell or monetize personal information.
5. Data Retention & Deletion
We keep your data for as long as your account is active. Here is our policy by data type:
- Account information — retained for the life of your account, deleted within 30 days of account closure
- Review data — stored for up to 24 months for historical reporting; deleted within 30 days of account closure
- SMS contact lists — deleted within 30 days of account closure or upon written request
- Payment records — retained for 7 years per standard accounting requirements (stored in Stripe, not on our servers)
- Usage logs — retained for 90 days on a rolling basis
Requesting Data Deletion
You can request deletion of your account and all associated data at any time by emailing contact@allgoodseo.com with the subject line "Data Deletion Request." We will confirm deletion within 10 business days. Note: Stripe-held billing records may be subject to their own retention obligations.
6. Cookies
ReviewEngine uses a minimal number of cookies. We do not use advertising cookies or third-party tracking pixels.
- Session cookie — keeps you logged in during your browser session. Expires when you close the browser.
- Preference cookie — remembers your account preferences (e.g., notification settings). Expires after 1 year.
- Analytics — we may use a privacy-focused analytics tool to understand aggregate page traffic (e.g., which features are most used). No personal identifiers are stored. You can opt out by enabling Do Not Track in your browser.
We do not use Google Analytics, Meta Pixel, or any advertising tracker on authenticated dashboard pages.
7. HIPAA Notice
ReviewEngine does not store or process Protected Health Information (PHI). We are not a HIPAA covered entity or business associate in the traditional sense — we do not access patient medical records, diagnoses, treatment histories, or insurance information.
However, because ReviewEngine serves healthcare and behavioral health practices, we have built the product with the following safeguards:
- AI responses never confirm patient identity. Our AI is specifically trained to draft responses that do not acknowledge whether a reviewer is or was a patient, and never include any treatment details, visit specifics, or personal health information in public replies.
- Human approval before every post. Every AI-drafted response requires your explicit approval before going live. This gives you — the covered entity — a final check to ensure no PHI is inadvertently disclosed.
- SMS data minimization. The phone numbers you provide for review request SMS messages are used only for that purpose and are not cross-referenced with any clinical data.
If your practice requires a signed Business Associate Agreement (BAA), please contact us at contact@allgoodseo.com before using ReviewEngine for any workflow that involves PHI. We do not automatically function as a business associate.
8. Security
We take the security of your data seriously and apply the following controls:
- All data is encrypted in transit using TLS 1.2+
- Account passwords are hashed using bcrypt; we never store plain-text passwords
- Payment data is handled entirely by Stripe and is never stored on our servers
- Access to production systems is limited to authorized Allgood Marketing personnel
- We conduct periodic reviews of our security practices
No system is 100% secure. In the unlikely event of a data breach that affects your account, we will notify you by email within 72 hours of becoming aware of the incident.
9. Your Rights (California / CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you specific rights regarding your personal information.
Right to Know
You have the right to request information about the categories of personal data we collect, the sources of that data, and how we use and share it. This privacy policy covers all of those categories.
Right to Delete
You have the right to request deletion of personal information we hold about you. See Section 5 (Data Retention & Deletion) for how to submit a request.
Right to Opt Out of Sale
We do not sell personal information. There is nothing to opt out of.
Right to Non-Discrimination
Exercising any of your CCPA rights will not result in different pricing, service quality, or any other form of discrimination.
How to Submit a Request
Email contact@allgoodseo.com with the subject line "CCPA Privacy Request" and a description of what you are requesting. We will respond within 45 days.
10. Children's Privacy
ReviewEngine is a business tool intended for adults operating businesses. We do not knowingly collect personal information from anyone under 18 years of age. If you believe we have inadvertently collected data from a minor, contact us immediately at contact@allgoodseo.com and we will delete it promptly.
11. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make a material change, we will:
- Update the "Last updated" date at the top of this page
- Send you an email notification to your account email address
Continued use of ReviewEngine after the effective date of an updated policy constitutes your acceptance of the changes. If you disagree with any changes, you may cancel your account at any time.
12. Contact Us
For any questions, data requests, or privacy concerns, reach out to us:
- Email: contact@allgoodseo.com
- Product: ReviewEngine by Allgood Marketing LLC
- Website: getreviewengine.ai
We aim to respond to all privacy-related inquiries within 5 business days.