Privacy Policy

Review Scoreboard (reviewscoreboard.com) gives businesses a personal Google review QR code for every teammate, plus a team scoreboard. This policy explains what we collect from business owners who use the dashboard and from customers who open a review page.

We are a small team, not an advertising business. We do not sell personal data and we do not run third-party advertising trackers on our pages. Write to us at abdul.alim.uk@gmail.com, or use the WhatsApp support button in the corner of any page.

When you create an account we keep the minimum needed to run your workspace:

• Account details: your email address and a secure password hash, or the email from the Google account you used to sign in.
• Business details: your business name, and the description fields you fill in (business type, city, what customers love, your signature thing and reward message).
• Locations: names you type and the Google review link you paste for each location.
• Team: employee first names and roles you add, plus the personal code and short link we generate for each person.
• Plan and usage: which plan your workspace is on and simple counts, such as when you last downloaded a QR code.

Customers who open a link such as reviewscoreboard.com/r/abcd never see a login and never give us a name, email or phone number. We record only what is needed to credit the right teammate and to stop the same person being counted twice:

• Which teammate's page was opened and which location it belongs to.
• The star rating they chose and the action they took: scanned, copied the draft, or opened Google.
• The time of each action, and the review text they copied if they used one of our suggested drafts.
• An anonymous device identifier stored in their own browser, so a second tap from the same phone is not counted as a new review tap.
• Anything they choose to tell you in the private feedback form when they rate 1 to 3 stars.

We use this information for a handful of practical jobs: showing your dashboard, leaderboard and feedback inbox to you and only you; crediting review taps to the right teammate and location; suggesting friendly review drafts; blocking obvious abuse such as one device tapping "Copy and open Google" hundreds of times; and answering support messages.

Where the law asks for a basis, we rely on your contract with us for account and workspace data, your consent for cookies and optional fields, and our legitimate interest in keeping the service secure and working.

We keep things light. A sign-in session is stored so you stay logged in on your device. Two small items live in your browser's local storage: an anonymous device identifier used for the duplicate-tap check above, and a note of how you last signed in so the login page can show it back to you. We do not set advertising, profiling or cross-site tracking cookies.

• We never sell or rent personal data.
• We never share it with advertisers or data brokers.
• We never hide Google's public review button, whatever rating a customer chooses.
• We never collect card or bank details; there is no payment form in the app today.
• We never ask customers for rewards, contact details or account logins to leave a review.

Your workspace is private to you: every table is protected by row-level security, so one business cannot read another business's data. Our suppliers process data on our behalf to host the database and auth, to sign people in, and to generate the review drafts offered on customer pages. We may also disclose information where we are legally required to, or to protect someone's safety.

Only a very small number of people can see everything. Access is limited to the people who run the service, and any administrator view is checked on the server, not in the browser.

Workspace data stays while your account exists. You can delete a location, a teammate, an individual review tap or a feedback note at any time from the dashboard, and those deletions carry through to the database. If you close your account we remove your business data; short-lived security and backup copies are cleared on a rolling schedule.

Everything is served over encrypted HTTPS. Passwords are hashed, never stored as plain text. Row-level security scopes every record to its owner. Rate limits guard the customer pages and the draft generator. We keep the surface small on purpose: customers on a review page can only read the teammate's first name, the business name and the Google link, and can only write a rating or a feedback note.

You can ask to see the personal data we hold about you, have it corrected, have it deleted, or ask us to stop using it for a particular purpose. Most of this you can do yourself in Settings or the dashboard. For anything else, email abdul.alim.uk@gmail.com and we will handle the request. If you are unhappy with our answer you can complain to your local data protection authority.

Review Scoreboard is built for businesses and their staff. It is not intended for children under 16, and we do not knowingly collect their data.

We may update this page as the product grows. The date at the top shows the current version, and we will point out any meaningful change in a sensible place rather than only in small print.

Questions, requests and complaints about this policy: email abdul.alim.uk@gmail.com, or use the WhatsApp support button in the corner of any page. We would rather answer a question early than have a surprise later.