Privacy Policy

REV9 is a software service for local business owners and authorized managers who want to analyze, improve, and manage their Google Business Profile from one workspace. REV9 can connect to Google Business Profile through Google OAuth, analyze profile data, generate scores and recommendations, help users prepare or perform supported profile actions, and store a history of those activities.

We collect information in the following categories:

• Account and contact information: information you provide when creating or using a REV9 account, contacting us, requesting support, or communicating with us.
• Google Account and OAuth information: account identifiers and authorization information returned when you connect Google through OAuth. REV9 does not receive your Google password. Where required to keep a connection active, REV9 may securely store authorization credentials or tokens until you disconnect the integration, revoke access, or delete the relevant account data.
• Google Business Profile data: profile and location information, business name, address or service area, phone number, website, business hours, categories, services, attributes, photos and other media, reviews, review replies, posts, and other profile information or activity that you authorize REV9 to access through available Google APIs.
• Analysis and product data: profile scores, category scores, findings, issues, recommendations, priorities, generated summaries, generated post drafts, generated review replies, and other outputs created through REV9. We store this information so users can view current results, history, progress, and prior actions.
• Profile-management activity: information about actions prepared, requested, completed, or failed through REV9, such as adding or changing services, publishing or preparing posts, uploading photos or media, responding to reviews, and other supported Google Business Profile actions.
• Customer review-request information: when you use REV9 to request a customer review, we may store information you provide about the customer, such as name, phone number, email address, service or job details, the review-request message, delivery status, follow-up status, and related history.
• Uploaded content: photos, media, text, files, or other content you upload to REV9 for use in Google Business Profile actions or other product features.
• Technical and usage information: device type, browser, operating system, IP-derived or general location information, page views, app events, feature usage, referral information, session information, and interaction data used to operate, secure, troubleshoot, and improve REV9.

REV9 accesses Google user data only after you explicitly authorize access through Google OAuth. Access is limited to the permissions and scopes you grant, and you can revoke REV9's Google access through your Google Account at any time.

REV9's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

REV9 does not sell Google user data, use Google user data for advertising or ad personalization, or use Google user data for purposes unrelated to the user-facing features described in this policy.

We use information to:

• connect and maintain authorized Google Business Profile integrations;
• retrieve and display authorized Google Business Profile information;
• analyze profile completeness, quality, activity, and other available profile signals;
• generate Profile Health Scores, category scores, issues, priorities, summaries, and recommendations;
• generate drafts such as Google posts, review replies, or other business content requested by the user;
• prepare or perform supported Google Business Profile actions requested or approved by the user;
• store scores, recommendations, generated content, uploads, and action history in the user's REV9 workspace;
• send and track customer review requests and permitted follow-ups when the user provides customer contact details;
• provide support, troubleshoot errors, protect REV9 from abuse, and maintain service reliability;
• measure website and product usage and improve the user experience; and
• comply with applicable legal obligations and enforce our agreements.

REV9 may prepare or perform supported actions on a connected Google Business Profile only when the relevant Google APIs and permissions allow the action and the user has authorized REV9 to act. REV9 does not own or control your Google Business Profile. You must own the profile or be authorized to manage it.

Where REV9 presents a draft, recommendation, or proposed change for review, you remain responsible for reviewing the information before choosing to publish or apply it.

REV9 uses AI systems, including the Google Gemini API, to help analyze profile data and generate scores, findings, summaries, recommendations, and content drafts. Only information reasonably necessary to provide the requested feature is used for AI processing.

AI-generated scores and recommendations are REV9 product outputs. They are not official Google scores, do not reproduce Google's confidential ranking algorithm, and may not always be complete or accurate.

If you use REV9 to send or manage customer review requests, you are responsible for ensuring that you have the lawful right and any required consent to provide the customer's contact information to REV9 and to contact that customer by the selected channel. REV9 processes the information you provide to prepare, send, track, and manage the requested review workflow.

REV9 uses analytics technologies to understand how the website and product are used, identify errors, improve usability, and measure product performance. Our analytics tools may include Google Analytics 4 (GA4), Microsoft Clarity, and PostHog.

Google Analytics 4 may collect page and session information, device and browser information, referral information, approximate location derived from network information, and interaction events.

Microsoft Clarity may collect interaction information such as page views, clicks, scrolls, mouse or touch movements, browser and device information, and may create heatmaps or session replays.

PostHog may collect product and web analytics such as page views, events, feature usage, session information, and technical information, depending on our configuration.

REV9 configures analytics and session-replay tools to avoid intentionally collecting Google OAuth tokens, Google passwords, customer contact details, or full connected Google Business Profile content as analytics event properties. Sensitive fields and authenticated areas are masked, excluded, or otherwise restricted where appropriate.

For more information about cookies and similar technologies used by these services, see the REV9 Cookie Policy.

REV9 does not sell personal information or Google user data.

We may share information only where reasonably necessary with:

• Google services used to provide connected features, including Google Business Profile APIs and Google Gemini API processing used for user-facing analysis and content-generation features;
• hosting, database, storage, infrastructure, communications, security, and other service providers that help us operate REV9;
• analytics providers such as Google Analytics 4, Microsoft Clarity, and PostHog for website or product analytics;
• professional advisers, regulators, law-enforcement authorities, or other parties when required by law or reasonably necessary to protect rights, safety, users, or the service; and
• a successor or purchaser in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable legal requirements.

REV9 stores connected-profile data, analysis results, scores, recommendations, generated content, uploaded media, customer review-request data, and activity history in our systems so the service can provide current and historical results.

We generally retain account and product data while an account is active and for as long as reasonably necessary to provide the service, maintain records, resolve disputes, prevent abuse, comply with legal obligations, and enforce agreements.

Authorization credentials used to maintain a Google connection are retained only while necessary for the authorized connection and are rendered unusable when the connection is revoked, disconnected, or the relevant account data is deleted, subject to technical and legal requirements.

When data is deleted from active systems, limited copies may remain temporarily in backups or logs until those systems are rotated or deleted in the ordinary course. Analytics providers may retain analytics information according to their own retention settings and terms.

REV9 uses reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. No internet transmission, storage system, or security measure can be guaranteed to be completely secure.

You can:

• disconnect your Google Business Profile from REV9;
• revoke REV9's access from your Google Account;
• manage non-essential analytics cookies through applicable cookie or browser controls;
• request access to, correction of, or deletion of your REV9 account data where applicable; and
• request deletion of stored Google Business Profile data and other data associated with your REV9 account.

Revoking Google authorization prevents future access through that authorization, but it does not automatically delete information already stored in REV9. A separate account or data deletion request may be required.

You may request deletion of your REV9 account and associated stored data through the Contact link published on rev9.us. If an in-app deletion option is available, you may also use that option.

Subject to legal, security, fraud-prevention, and backup requirements, REV9 will delete or de-identify information that is no longer required after a valid deletion request.

Depending on where you live, applicable privacy law may give you rights relating to your personal information, such as the right to request access, correction, deletion, portability, restriction, or objection to certain processing. REV9 will handle valid requests as required by applicable law.

REV9 and its service providers may process information in countries other than the country where you are located. Where required, we use appropriate safeguards for international transfers of personal information.

REV9 is intended for businesses and business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

REV9 may update this Privacy Policy when the service, integrations, data practices, or legal requirements change. The 'Last updated' date at the top of this page identifies the latest version.

For privacy questions, Google-data questions, or account/data deletion requests, use the Contact link published on https://www.rev9.us/. Please identify the request as a privacy or data-deletion request so it can be routed appropriately.