Privacy Policy

Your privacy matters. Learn how we protect and use your information on Revfer.

Last Updated: June 4, 2025

Overview and your rights

At Revfer, we're committed to protecting your privacy and being transparent about how we collect, use and protect your personal information. This Privacy Policy explains our practices for our community-driven business review and referral platform. We regularly update this policy to reflect changes in our practices and legal requirements; material changes will be communicated via email and platform notifications.

Your privacy rights include the right to access (request copies of your personal data), the right to correction (update or correct your information), the right to deletion (request deletion of your data) and the right to portability (export your data in a readable format).

Information we collect

Account information: name, email address, phone number and profile photo; authentication credentials and verification status; account preferences and privacy settings; premium membership status and billing information.

Business interaction data: reviews you write, ratings you provide and photos you upload; businesses you follow, refer or interact with; questions and answers in Q&A sections; verification activities and community contributions.

Location and usage data: general location (city or region) for business recommendations; search queries and discovery patterns; platform usage analytics and feature engagement; device and browser information for security.

Network and trust data: your connections with other users; trust chain information and verification history; referral patterns and network engagement; business relationship verification status.

AI and data processing

Revfer uses artificial intelligence to enhance your experience.

AI-assisted review generation: we use OpenAI's GPT models to help you write comprehensive reviews. Your input prompts and generated content are processed by OpenAI. We don't store your raw prompts, only the final review you choose to publish, and you keep full control over what gets published.

Document processing and embeddings: business documents (such as PDFs) are processed into searchable chunks, and reviews and business information are converted to vector embeddings that enable semantic search and recommendations. Embeddings are mathematical representations that don't contain readable text.

Smart rating algorithms: our algorithms analyze reviewer credibility and connection strength, using trust network data and community verification patterns to weight review authenticity while maintaining user privacy.

You can opt out of AI-assisted features in your privacy settings. This may limit some platform functionality.

How we use your information

Core platform services: maintaining your account and authenticating your identity; displaying your reviews, ratings and business interactions; business search and location-based recommendations; premium features and billing; communication between users and businesses.

Trust and safety: verifying review authenticity and detecting fraud; maintaining trust networks; preventing spam, abuse and manipulation; enforcing community guidelines; protecting user safety and business integrity.

Personalization and recommendations: suggesting relevant businesses; curating your "For You" feed; recommending connections within your trust network; optimizing search results; highlighting trending businesses in your area.

Communication and support: account and security notifications; customer support; platform updates and feature announcements; marketing communications, with your consent; community events and engagement programs.

Information sharing and disclosure

We don't sell your personal data. Revfer does not sell, rent or trade your personal information to third parties for marketing purposes.

SMS notifications. SMS notifications are optional and are not required to use any Revfer service. If you are a Premium subscriber and opt in, we collect your mobile phone number solely to send transactional notifications about your business content drafts. We do not sell, rent, share or transfer your mobile number to third parties for marketing purposes. Your number is verified with a one-time passcode before SMS notifications are enabled. Message frequency varies with your business activity, typically 1 to 3 messages per week. Message and data rates may apply. Reply STOP to opt out at any time, or visit your notification settings at revfer.com/business/edit. Reply HELP for assistance.

Public information by design: your reviews, ratings and business references are public by default; your display name and profile photo appear with your contributions; business follow lists and some network connections may be visible; community verification activities are public to maintain transparency.

Service providers and partners: OpenAI (AI processing for review assistance and embeddings), AWS (cloud hosting, storage and serverless computing), MongoDB Atlas (database services and vector search), payment processors (billing and subscriptions) and analytics providers (performance and usage insights).

Business integrations: businesses you review may see your review content and rating; QR code scans may be tracked for business analytics; verified business connections appear in trust chains; business owners can see aggregate engagement metrics.

Legal requirements: we may disclose information when required by law or court order, or to protect the rights and safety of our users and the public, prevent fraud, abuse or violations of our Terms of Service, comply with law enforcement investigations, and defend our legal rights.

Data security and protection

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration and destruction.

Data encryption: data encrypted in transit (TLS 1.3), database encryption at rest, secure API communications and encrypted file storage in AWS S3. Access controls: multi-factor authentication, role-based access permissions, regular access audits and secure credential management. Infrastructure security: AWS security compliance, regular security assessments, automated threat monitoring and secure development practices. Backup and recovery: automated daily backups, geographic redundancy, disaster recovery procedures and business continuity planning.

Your role in security: use strong, unique passwords; enable two-factor authentication when available; keep your contact information up to date; report suspicious activity immediately; review your privacy settings regularly.

Security incident response: in the unlikely event of a breach affecting your personal information, we will notify you within 72 hours by email, with details of the incident, its impact and the steps we're taking.

Your privacy controls

Account and profile: update your personal information in Account Settings; control who can see your profile and review history; manage display name and photo visibility; set notification preferences; choose communication channels.

Content and interactions: edit or delete your reviews and ratings at any time; control visibility of your business follows and references; manage trust network connections; set recommendation preferences; opt out of community verification.

AI and data processing: disable AI-assisted review generation; opt out of personalized recommendations; control smart rating participation; manage location-based services; request data export or deletion at any time.

All privacy controls are in Account Settings, under Privacy & Data. Changes take effect immediately.

Contact and questions

General privacy questions: privacy@revfer.com (within 48 hours). Data rights requests (access, correction, deletion, portability): dataprotection@revfer.com (within 30 days). Security concerns: security@revfer.com (within 24 hours). Business inquiries: business@revfer.com (within 72 hours).

Data controller: Revfer Inc., 59 Grover Rd, Ashland, MA 01721. EU representative: available upon request for EU residents. Governing law: this Privacy Policy is governed by the laws of Massachusetts, USA.

See also our Cookie Policy.