1. Who handles your information
TapReview DIY operates the website and tools. The business named on a review page receives the private feedback submitted for that business and is responsible for its use of that information. The parties’ legal roles depend on the service arrangement and applicable law. Google separately handles reviews you choose to submit on Google.
2. Information processed
- Private feedback: your message, optional rating and name, business identifier, submission time and staff or referral identifier if present in the link. The feedback API also supports an optional email address, though the current public form does not ask for one.
- Review activity: page visits, review-link actions and feedback events, including time, business, device operating-system category, rating where supplied and referral identifier. The tracking API can accept region or coordinates if supplied; the current review page does not request your device’s precise location.
- Business accounts: account and authentication details, email, profile information provided by your sign-in service, saved business details, review links and design preferences.
- Orders: product choices, uploaded artwork, shipping details, amounts, order status and payment references. The payment provider processes payment credentials through its checkout.
- Technical information: requests, errors and service logs. Hosting, tunnel and other infrastructure providers may process IP addresses, browser information and connection metadata when serving requests.
Please avoid including passwords, payment credentials, health information or other sensitive personal information in feedback. Do not include another person’s information unless necessary and authorized.
3. How information is used
Information is used to deliver feedback to the relevant business, operate accounts and review pages, show business analytics, fulfill orders, process payments, troubleshoot failures and protect the service. Depending on the applicable law and activity, processing may rely on providing a requested service, legitimate operational interests, legal obligations or consent where required. Choosing private feedback is optional and is not consent to unrelated marketing.
4. Private feedback and Google reviews
You can open the optional private-feedback form from the review page. A message is sent only when you submit that form. The business can see saved feedback in the dashboard and its owner may receive it by email when email delivery is configured. “Private” means it is not publicly published by this service; it does not mean the message is anonymous to the business if you identify yourself.
Skipping the form does not submit its message or optional name. Review activity may still be recorded as described above. Copying a review uses your device clipboard when permitted. Your draft is not automatically posted on Google. Following a Google link sends you to Google, where Google’s Privacy Policy applies.
Successful private submission shows a thank-you message, then opens a blank page in the same tab after five seconds. Leaving the page does not erase feedback already submitted. See our private-feedback terms for all available choices.
5. Cookies and browser storage
Authentication uses cookies and, depending on the sign-in setup, browser storage to maintain sessions and protect sign-in requests. Review drafts and feedback are not saved in browser storage. Feedback is saved only when you submit the private form. You can clear site data through your browser settings; doing so may sign you out. The review page records activity through server requests, so blocking cookies alone does not prevent those requests.
6. Recipients and service providers
Information is shared with the relevant business and the providers needed to operate hosting, database storage, authentication, email delivery, payments and order fulfillment. These include Hostinger for website hosting and database storage. Providers receive information relevant to their service; following an external link also involves that external provider. Information may also be disclosed where legally required or necessary to address fraud, security threats or legal claims.
Provider and business processing locations may differ from yours. International-transfer requirements depend on the deployment and applicable law. This notice does not promise a particular storage country or an unverified transfer certification.
7. Retention and security
Feedback, activity records, account data and orders are stored in the service database. The current application does not implement a fixed automatic expiry for all such records. Retention therefore depends on operational needs, deletion handling and applicable legal requirements; payment and order records may need to be retained for accounting or disputes. Email notifications and provider backups may have separate retention periods.
Account access controls restrict business dashboard access. No storage or transmission method is completely secure. Avoid sending unnecessary sensitive information, and notify the business or service contact if you believe information has been exposed.
8. Your choices and privacy requests
You may skip private feedback, omit your name, use Google directly, clear browser storage or stop using the service. Depending on your location, you may have rights to request access, correction, deletion, restriction or portability, object to processing, or withdraw consent for processing based on consent. Requests may require proportionate identity verification and may be subject to legal exceptions. You may also complain to your local data-protection authority.
For a feedback request, contact the reviewed business through its published contact details and identify the business and approximate submission time. For account, order or service data, use the TapReview contact channel provided in your account or order correspondence. Do not send passwords or complete payment details with a request. Copies held independently by the business, its email service or Google must also be addressed with the relevant recipient.
9. Children and policy changes
The service is intended for business operators and customers able to use it under applicable law, rather than being directed to children. If you believe a child has submitted personal information without required authorization, contact the relevant business or service contact to request review and deletion where appropriate.
We will update this page and its date when practices change, and provide additional notice or obtain consent where required by law.