Privacy Policy
Last updated: April 2026
StarReview (“we”, “us”) operates the platform starreview.ch. Protecting your data is important to us. This privacy policy explains what data we collect, how we use it, and what rights you have.
1. Data We Collect
We collect the following personal data:
- Name and email address (upon registration via Google sign-in)
- Google Business Profile data (location information, reviews, review texts, reviewer name)
- Payment information (processed by our payment processor — we do not store credit card data)
- Usage data (login times, features used)
- Customised replies (to improve the response style)
2. How We Use Your Data
We use your data exclusively for the following purposes:
- Creating personalised replies to your Google reviews
- Managing your account and subscriptions
- Weekly and monthly summaries via email
- Notifications for negative reviews (1–2 stars)
- Improving the response style based on your adjustments (Style Memory)
- Improving our services
3. Data Sharing
We do not sell your data or share it with third parties for marketing purposes. The following service providers process data on our behalf:
- Google Business Profile API — to retrieve reviews and publish replies
- AI service provider — review texts are processed to generate reply suggestions, without permanent storage
- Payment processor — for secure payment processing (PCI-DSS compliant)
- Email service provider — for sending notifications
- Hosting — operation of our platform in EU data centres
4. Data Retention
Your data is stored as long as your account is active. After account deletion, all personal data is irrevocably deleted within 30 days. Anonymised data may be retained for statistical purposes.
5. Cookies and Analytics
StarReview does not use tracking cookies. For web analytics, we use a privacy-friendly analytics tool that does not collect personal data and does not set cookies. A session cookie is used solely for authentication.
6. Data Processing Location
Your data is processed and stored exclusively in EU data centres. Our AI service provider processes review texts for reply generation — no personal data is permanently stored.
7. Your Rights (nFADP + GDPR)
Under the Swiss Federal Act on Data Protection (nFADP) and the EU GDPR, you have the right to:
- Access your stored data
- Rectify inaccurate data
- Delete your data
- Data portability
- Withdraw your consent
- Restrict processing
8. Legal Basis
The processing of your data is based on the Swiss Federal Act on Data Protection (nFADP) of 1 September 2023 and, where applicable, the EU General Data Protection Regulation (GDPR).