1. Introduction
Master Reviews ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our reputation and loyalty platform, whether you are a Business or a Consumer. Trust Points is the consumer app powered by the Master Reviews platform; this Policy applies to your use of both Trust Points and the Master Reviews platform.
We comply with applicable data protection laws, including the GDPR, CCPA, the Australian Privacy Act 1988 and Argentina's Law 25.326.
2. Information We Collect
2.1 Information You Provide
- Account: name, email, phone, business name and address (Businesses)
- Consumer profile: email, verified phone, birthday date, approximate location and category preferences
- Customer data (Businesses): customer names, emails, phones, reviews and feedback submitted through your business
- Gift cards: purchaser and recipient name and email, gift message and balance
- Communications: messages sent through our platform, support inquiries, and conversations with our AI chat assistant
- Business content: logos, descriptions, customization preferences, message templates
2.2 Information Automatically Collected
- Usage data: pages visited, features used, time spent, click data
- Device information: IP address, browser type, operating system, device identifiers
- Precise location: when you enable location services, to show nearby offers and match geo-targeted coupons
- Push notification tokens: to send notifications to your device
- Cookies and tracking: we use cookies and similar technologies to enhance your experience
- Analytics data: performance metrics, error logs, usage statistics
2.3 Information from Third Parties
- Authentication services: information from Google or Facebook if you use social login
- Google Contacts import: names, emails, phones and company data from your contacts, imported with your consent
- Payment processors: transaction data from Stripe and Mercado Pago
- Communication platforms: delivery data from Twilio (SMS) and Meta (WhatsApp via the Meta Cloud API)
- Apple Wallet and Google Wallet: data needed to generate digital passes
- Google Maps: place search queries and map data
- Resend: transactional and marketing email delivery
3. How We Use Your Information
We use your information to:
- Provide services: operate your account, process reviews, send notifications and show nearby offers
- Loyalty program: accrue and redeem points, calculate tiers and grant rewards
- Gift cards: process purchases, issue codes and log redemptions
- Digital passes: generate passes for Apple Wallet and Google Wallet
- Geo-targeted promotions: match coupons and offers to your location
- Process payments: handle billing, subscriptions, one-time products and transactions
- Communications: send service updates, support responses and marketing/nurture communications (with consent)
- Improve services: analyze usage patterns, develop new features, fix bugs
- AI features: response suggestions, content moderation, sentiment analysis and processing of chat assistant conversations
- Security: prevent fraud, protect against abuse and ensure platform security
- Legal compliance: comply with legal obligations and enforce our terms
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process your data based on:
- Contractual necessity: to provide the services you subscribed to
- Legitimate interests: to improve our services, prevent fraud and ensure security
- Consent: for marketing and nurture communications, and optional features such as location
- Legal obligation: to comply with applicable laws and regulations
- Granular consent: for marketing, review requests, location and AI chat, you choose consent per purpose and per channel (email, SMS, WhatsApp, push and in-app). Your decisions are recorded in a consent ledger and can be withdrawn at any time.
5. AI Processing & Lead Capture
We use artificial intelligence to process landing-page chat assistant conversations, answer inquiries, suggest review responses, moderate content and analyze sentiment. When a visitor interacts with our assistant, we may capture their name, email and phone to respond and, if requested, escalate the conversation to a human agent. Conversations may be processed by third-party AI providers under their privacy policies. We also use AI to generate suggested responses to reviews (which businesses review before sending), marketing copy, social posts and business descriptions. AI-generated content published to public surfaces is labeled where required. AI processing of your conversations is governed by your AI chat consent.
6. Marketing & Nurture Communications
We may send you automated follow-up email sequences ("drips") for leads, business claims and GEO reports, as well as welcome and reminder emails. You can unsubscribe at any time via the unsubscribe link in each email or from your account settings. You can manage your per-channel consent choices and block specific businesses from contacting you via the Privacy & Consent preferences center in your account. Blocking a business stops all review requests, follow-ups, marketing and collection reminders from that business only.
7. Information Sharing & Disclosure
7.1 We Share Information With:
- Service providers: Stripe and Mercado Pago (payments), Twilio (SMS) and Meta (WhatsApp via the Meta Cloud API), Google (Maps, Business Profile, Calendar, Contacts), Apple Wallet, Google Wallet and Resend (email)
- Business transfers: in connection with a merger, acquisition or sale of assets
- Legal requirements: when required by law, court order or government request
- Protection: to protect rights, property or safety of Master Reviews, users or the public
7.2 We Do NOT:
- Sell your personal information to third parties
- Share your data with advertisers without consent
- Use your customer data for any purpose other than providing our services to you
7.3 Data Sharing with Businesses
When you leave a review, earn Trust Points or redeem a coupon at a business, we share your name and contact details with that specific business so they can process the interaction. This sharing is scoped to the single business you interacted with and is governed by your data-sharing consent. You can block a business from future contact via your preferences center.
8. Data Security
We implement industry-standard security measures:
- Encryption: data in transit (TLS/SSL) and at rest
- Access controls: role-based access, multi-factor authentication
- Regular audits: security assessments and vulnerability testing
- Secure infrastructure: hosted on secure, compliant cloud platforms
- While we strive to protect your data, no method of transmission over the Internet is 100% secure.
9. Data Retention
We retain your information for as long as necessary to provide services and comply with legal obligations:
- Active accounts: data retained while your account is active
- Inactive accounts: data may be deleted after extended inactivity
- Closed accounts: data deleted within 30 days unless required for legal purposes
- Legal requirements: some data retained longer for tax, legal or regulatory compliance
- Aggregated data: anonymized analytics data may be retained indefinitely
- Consent and audit logs: your consent decisions and security audit events are retained in a tamper-evident ledger for the lifetime of the platform to demonstrate compliance (GDPR Art 7(1) and SOC 2). These records are deleted when your account is permanently erased.
10. Your Privacy Rights
10.1 All Users
- Access: request a copy of your personal data
- Correction: update or correct inaccurate information
- Deletion: request deletion of your data (subject to legal requirements)
- Opt-out: unsubscribe from marketing communications
- Data portability: receive your data in a portable format
- Per-business block: block any specific business from contacting you without closing your account
- Consent withdrawal: withdraw any previously granted consent per purpose and channel from your preferences center
10.2 GDPR Rights (EEA Users)
- Right to object to processing based on legitimate interests
- Right to restrict processing
- Right to withdraw consent at any time
- Right to lodge a complaint with your supervisory authority
10.3 CCPA Rights (California Residents)
- Right to know: request disclosure of data collection and sharing practices
- Right to delete: request deletion of personal information
- Right to opt-out: opt-out of sale of personal information (we do not sell data)
- Non-discrimination for exercising your rights
To exercise your rights, contact us through our support system or at info@master-reviews.com.
11. Cookies & Tracking Technologies
We use cookies and similar technologies for:
- Essential cookies: required for authentication and basic functionality
- Performance cookies: analyze service usage and performance
- Functional cookies: remember your preferences and settings
- Analytics cookies: Google Analytics and similar tools (with anonymization)
- You can control cookies through your browser settings.
12. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including standard contractual clauses and data processing agreements with service providers.
13. Regional Privacy Laws
Australia (Privacy Act 1988)
For users in Australia, we handle your personal information in accordance with the Privacy Act 1988 and the Australian Privacy Principles. You may request access to, and correction of, your personal information. For inquiries, email info@master-reviews.com.
Argentina (Law 25.326)
For users in Argentina, the processing of personal data is governed by Law 25.326 on the Protection of Personal Data. You have the right to access, rectify and delete your data, and to object to processing for marketing purposes. To exercise these rights, contact us at info@master-reviews.com.
European Economic Area (GDPR)
Our data controller is Master Reviews. You have the right to lodge a complaint with your local supervisory authority.
California (CCPA)
We do not sell personal information. For CCPA requests, email info@master-reviews.com with "California Privacy Rights" in the subject line.
14. Children's Privacy
Our Service is not intended for individuals under 18. We do not knowingly collect personal information from children. If we discover that a child has provided us with personal information, we will delete it immediately.
15. Your Responsibilities
As a Business Owner
- Obtain necessary consents from your customers before collecting their data
- Comply with applicable privacy laws in your jurisdiction
- Provide appropriate privacy notices to your customers
- Handle customer data requests (access, deletion, etc.)
- Use our platform only for lawful purposes
As a Consumer
- Provide accurate information when creating your profile
- Understand that your location is used to show nearby offers and you can disable it
- Know that your birthday (month and day) is used to award birthday points
- Manage your communication preferences from your settings
16. Changes to Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last Updated" date indicates when the policy was last revised. Continued use after changes constitutes acceptance.
17. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: info@master-reviews.com
- Support: through our in-app support system
- Data Protection Officer: info@master-reviews.com