Data Processing

Data Processing Agreement (DPA)

This Data Processing Agreement governs how Reviews.ml processes personal data on behalf of our business customers and in accordance with applicable data protection laws.

Roles and Responsibilities

Reviews.ml as Data Controller

When you create an account or submit a review, Reviews.ml acts as the data controller for your personal information. We determine the purposes and means of processing.

Reviews.ml as Data Processor

When processing data on behalf of business customers (e.g., for analytics), we act as a data processor following their instructions.

Types of Data Processed

• Account Data: Name, email, profile information
• Review Data: Reviews, ratings, photos, and comments
• Technical Data: IP addresses, device information, cookies
• Business Data: Business profiles, responses, analytics

Legal Bases for Processing

• Consent: For marketing communications and optional features
• Contract: To provide our services to you
• Legitimate Interest: For fraud prevention and platform improvement
• Legal Obligation: To comply with applicable laws

Data Transfers

We may transfer data internationally. When transferring data outside your jurisdiction, we use appropriate safeguards such as Standard Contractual Clauses and ensure compliance with applicable regulations.

Data Retention

We retain personal data only as long as necessary for the purposes described or as required by law. Account data is deleted upon request, subject to legal retention requirements.

Your Rights

Depending on your location, you may have rights to access, correct, delete, or port your data. See our Privacy Policy for full details on exercising your rights.

Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption in transit and at rest
• Access controls and authentication
• Regular security assessments
• Employee training
• Incident response procedures