Skip to content
StarReview

Terms of Service

Last updated: July 2026

These Terms of Service govern the use of the StarReview platform (starreview.ch). By registering, you accept these Terms.

Optional photo-processing add-on

Photo processing is not part of the standard subscription. It can be purchased as a paid add-on for future Google reviews with photos, or as a separate one-time option for a purchased backlog period. The price, included volume, and selected period are shown before purchase.

When photo processing is active, StarReview may send up to two photos or photo URLs per Google review to the AI provider to extract short factual observations for reply suggestions. Photo-aware reply suggestions are held for manual approval and are not published automatically, even if automatic publishing is enabled for that star rating. Usefulness depends on image quality, content, and relevance. Some photos may be unclear, duplicated, unrelated, or not useful for a reply; StarReview may ignore such images and does not guarantee that photo-derived information will be useful in every case. People and faces are not identified, and hygiene, blame, legal, or quality claims are not made from photos alone.

1. Subscription

StarReview is offered as a monthly subscription. The subscription renews automatically unless cancelled before the end of the current billing period.

2. Pricing

All prices are in Swiss Francs (CHF) inclusive of VAT. Current subscription prices are:

  • Starter: CHF 39 / month (1 location)
  • Growth: CHF 29 / month per location (2-4 locations)
  • Scale: CHF 19 / month per location (5+ locations)

For responding to existing reviews (backlog), the final price is calculated after connecting the Google Business Profile based on the available unanswered reviews and shown before purchase.

Price changes will be announced at least 30 days in advance by email.

3. Cancellation

You may cancel your subscription at any time via your account settings. Cancellation takes effect at the end of the current billing period. No prorated refunds are provided for the remaining term.

4. Google Business Profile Authorisation

To use StarReview, you authorise access to your Google Business Profile. This includes:

  • Reading reviews
  • Publishing replies to reviews
  • Retrieving location information

You may revoke access at any time via your Google account settings. StarReview is an independent service and is not affiliated with Google LLC.

5. Automatic Replies & User Consent

StarReview uses artificial intelligence to generate and publish replies to your Google reviews. Replies are only published after you have given your express consent.

During onboarding, you confirm via a consent checkbox that you authorise StarReview to publish AI-generated replies to your reviews. Setup cannot be completed without this confirmation. The date and time of your consent are recorded and stored.

By default, every reply requires your manual approval, regardless of star rating. You explicitly enable automatic publishing per star rating in Settings (e.g. only for 5-star reviews). Negative reviews (1-2 stars) almost always remain in manual-approval mode in practice.

  • Replies are published with randomised delays (between 30 minutes and 11 hours, varying by star rating) that match natural human response patterns. Swiss public holidays and quiet hours are respected.
  • Backlog processing: maximum 8 replies per day

You may withdraw your consent, pause, or change automation settings at any time in your account settings. Upon withdrawal, no further automatic replies will be published. You remain responsible for all published replies.

6. Usage Guidelines

When using StarReview, you agree to:

  • Not create or promote spam or fake reviews
  • Not use the service for illegal purposes
  • Not circumvent security measures or rate limits

7. Limitation of Liability

StarReview is not liable for:

  • The accuracy or appropriateness of generated replies
  • Damages arising from the publication of replies
  • Downtime or service interruptions
  • Changes to third-party interfaces
  • Delays in reply processing

8. Changes to the Terms

We reserve the right to amend these Terms at any time. Material changes will be announced at least 14 days in advance by email.

9. Governing Law and Place of Jurisdiction

The contractual relationship between you and StarReview is governed exclusively by Swiss law, excluding its conflict-of-laws provisions and the UN Convention on Contracts for the International Sale of Goods (CISG). The exclusive place of jurisdiction for all disputes arising out of or in connection with these Terms is the registered seat of the provider in the Canton of Thurgau, subject to mandatory statutory jurisdiction rules in favour of consumers.

10. Contact

For questions regarding these Terms, please contact us at:

hello@starreview.ch

Data Processing Agreement (DPA)

v2 · Last updated: July 2026

This Data Processing Agreement ("DPA") forms part of the Terms and governs the processing of personal data by StarReview on the customer's behalf under Art. 28 GDPR and the revised Swiss Data Protection Act (nFADP, in force since 1 September 2023). It applies as soon as you connect your Google Business Profile and we process review data containing third-party personal data (your customers').

1. Roles and Subject Matter

The customer is the controller; StarReview is the processor. The subject matter of processing is the retrieval of Google reviews and the drafting and publishing of replies on the customer's behalf.

2. Controller Obligations

The customer ensures that a valid legal basis for the processing exists, that its instructions are lawful, and that data subjects are informed to the extent required. The customer remains responsible for the lawfulness of the processing it instructs.

3. Duration

Processing takes place for the duration of the contractual relationship and ends when the subscription is cancelled or the account is deleted, subject to the deletion-and-return provisions.

4. Nature, Purpose, and No Own Use

StarReview processes the data solely to provide the agreed services and on the customer's instructions, not for its own purposes. The following are excepted: (a) aggregated or anonymized statistics with no personal reference, and (b) security, abuse-prevention, and logging data necessary to operate the service. The AI sub-processor processes review text only transiently to generate replies and does not train models on this data.

5. Categories of Data Subjects and Data

The data subjects are the authors of reviews (your customers). The data processed is: reviewer name, review text, star rating, and review date. Special categories of personal data are not the subject of this engagement; the customer refrains from introducing any by way of instruction.

5a. Optional photo processing

When the customer enables a photo-processing add-on, the engagement additionally covers up to two Google review photos or photo URLs per review, technical metadata, and short factual observations derived from them where required for reply suggestions. StarReview processes this data only on the customer's instructions and only to provide photo-aware reply suggestions.

6. Processing on Documented Instructions

StarReview processes personal data only on the customer's documented instructions, including with regard to transfers to third countries, unless a legal obligation requires otherwise; in that case StarReview informs the customer before processing, unless the law prohibits it. If an instruction appears unlawful to StarReview, StarReview informs the customer without undue delay. Your settings in the platform constitute such instructions.

7. Confidentiality

StarReview binds all persons authorized to process the data to confidentiality, to the extent they are not already under an appropriate statutory duty of confidentiality.

8. Security of Processing (technical and organizational measures)

StarReview implements appropriate technical and organizational measures under Art. 32 GDPR and the nFADP, in particular: encryption in transit and at rest; access control on a need-to-know basis; availability, resilience, regular backup, and restore capability; logging and monitoring; environment segregation; secure development; and periodic review of the effectiveness of these measures.

9. Sub-processors

The customer gives general authorization for the following sub-processors: a hosting provider (EU data center), an email-delivery service, the Google Business Profile API, and an AI provider for reply generation. StarReview binds them to equivalent data-protection obligations, remains responsible to the customer for their conduct, and informs the customer of intended changes with reasonable notice so the customer may object; on a legitimate objection, either party may terminate the affected service. Payment processing (Stripe) does not concern the review data; Stripe acts as an independent controller in that respect. On request, StarReview provides the customer with a current list of sub-processors stating their name, processing location, and transfer basis, and updates it when they change.

10. Assistance to the Controller

StarReview assists the customer, through appropriate technical and organizational measures and to a reasonable extent, in responding to data-subject requests and in complying with the obligations under Arts. 32 to 36 GDPR (security, breach notification, data protection impact assessment, and prior consultation).

11. Breach Notification

StarReview notifies the customer of personal-data breaches without undue delay after becoming aware of them and provides the information necessary for the customer's notification obligations.

12. Deletion or Return

On termination of processing, StarReview, at the customer's choice, deletes the personal data or returns it, and deletes existing copies within 30 days, unless a statutory retention obligation applies.

13. Records and Audits

StarReview makes available to the customer all information necessary to demonstrate compliance with the obligations under Art. 28 GDPR and allows for and contributes to reviews, including inspections, conducted by the customer or an auditor mandated by the customer, within a reasonable framework.

14. International Transfer

Where personal data is processed outside Switzerland or the EEA (e.g. by providers in the United States), the transfer relies on an adequacy decision or a certification under the applicable Data Privacy Framework where applicable, otherwise on the Standard Contractual Clauses with the adaptations required for Switzerland, supplemented by a transfer impact assessment and, where necessary, by additional safeguards. Onward transfers are subject to the same guarantees.

15. Relationship to Applicable Law

This DPA is governed by Swiss law; the place of jurisdiction is, to the extent permitted by law, StarReview's registered seat. The mandatory provisions of the GDPR and the nFADP (including Art. 9 nFADP and the foreign-disclosure rules of Arts. 16 and 17 nFADP), the competence of the supervisory authorities, the rights of data subjects, and any governing-law and jurisdiction clauses of applicable Standard Contractual Clauses remain reserved and prevail in the event of conflict.

16. Precedence and Language Versions

This DPA is provided in German, French, Italian, and English. In the event of discrepancies between the language versions, the German version prevails. In the event of discrepancies between this DPA and the Terms, the provisions of this DPA prevail for the data processing.