Privacy Policy
Last Updated: June 16, 2025
1. INTRODUCTION
1.1 About This Policy
Welcome to Star Guard Review ("Company," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website at starguardreview.com (the "Website") and our automated review management services (the "Services").
1.2 Scope
This Privacy Policy applies to:
- Visitors to our Website
- Businesses that subscribe to our Services ("Clients")
- Customers of our Clients who receive SMS messages through our platform ("End Customers")
- Anyone who interacts with us
1.3 Agreement
BY USING OUR WEBSITE OR SERVICES, YOU CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY.
If you do not agree with this Privacy Policy, please do not use our Website or Services.
1.4 Related Documents
This Privacy Policy should be read together with our:
- Terms of Service
- Cookie Policy (available on our Website)
2. INFORMATION WE COLLECT
2.1 Information You Provide Directly
Account Information (from Clients):
- Full name
- Business name and type
- Email address
- Phone number
- Business address
- Password (stored securely using industry-standard hashing)
- Payment and billing information (processed by Stripe)
Customer Data (provided by Clients about their End Customers):
- Customer names
- Phone numbers
- Email addresses
- Service/job details
- Rating and review responses
- SMS communication history
Communications:
- Support requests and correspondence
- Feedback and suggestions
- Survey responses
2.2 Information Collected Automatically
Device and Usage Information:
- IP address
- Browser type and version
- Operating system
- Device identifiers
- Pages visited and features used
- Time spent on pages
- Referring website
- Click patterns and navigation paths
Cookies and Tracking Technologies:
- Session cookies (required for functionality)
- Preference cookies (remember your settings)
- Analytics cookies (understand usage patterns)
- Marketing cookies (with your consent)
For more information, see our Cookie Policy.
2.3 Information from Third Parties
CRM Integrations:
When you connect your CRM (Salesforce, HubSpot, Zoho, Jobber, etc.), we may receive:
- Customer contact information
- Service/job records
- Communication history
Review Platforms:
- Review content posted by End Customers
- Rating information
- Review platform account identifiers
Payment Processor (Stripe):
- Transaction status
- Payment method type (we do not receive full card numbers)
- Billing address
3. HOW WE USE YOUR INFORMATION
3.1 To Provide Our Services
- Create and manage your account
- Send SMS review requests on your behalf
- Process and store customer reviews and feedback
- Provide analytics and reporting
- Enable CRM integrations
- Process payments
- Provide customer support
3.2 To Improve Our Services
- Analyze usage patterns and trends
- Develop new features and functionality
- Conduct research and analytics
- Test and troubleshoot our platform
- Train our support team
3.3 To Communicate With You
- Send service-related notifications
- Provide customer support
- Send billing and account information
- Notify you of policy changes
- Send marketing communications (with your consent)
3.4 To Protect Our Services
- Detect and prevent fraud
- Enforce our Terms of Service
- Protect against unauthorized access
- Comply with legal obligations
- Respond to legal requests
3.5 Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), UK, or Switzerland, we process your data based on:
- Contract: To fulfill our agreement with you
- Legitimate Interests: To operate and improve our business
- Consent: For marketing communications and non-essential cookies
- Legal Obligation: To comply with applicable laws
4. HOW WE SHARE YOUR INFORMATION
4.1 We Do Not Sell Your Personal Information
WE DO NOT SELL OR SHARE YOUR PERSONAL INFORMATION FOR MONETARY OR OTHER VALUABLE CONSIDERATION.
This applies to all categories of personal information we collect, including information about Clients and End Customers. We have not sold personal information in the preceding 12 months and do not intend to do so.
4.2 Service Providers
We share information with trusted third-party service providers who assist us in operating our Services, including services for hosting, database management, messaging, email delivery, payment processing, and analytics. These providers are contractually obligated to protect your information and use it only for the purposes we specify.
4.3 With Your Consent
We may share your information with third parties when you explicitly consent, such as:
- Connecting third-party CRM integrations
- Posting reviews to third-party platforms
- Participating in partner promotions
4.4 Business Transfers
If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.
4.5 Legal Requirements
We may disclose your information if required to do so by law or in response to:
- Court orders or subpoenas
- Government or regulatory requests
- Legal process
- To protect our rights, property, or safety
- To protect the rights, property, or safety of others
4.6 Aggregated and De-identified Data
We may share aggregated or de-identified information that cannot reasonably be used to identify you. This includes:
- Industry benchmarks and statistics
- Anonymized usage analytics
- Research findings
5. DATA FOR DIFFERENT USER TYPES
5.1 Client Data (Business Subscribers)
As a Client, you are the data controller for your End Customers' data. We act as a data processor on your behalf. You are responsible for:
- Obtaining proper consent from your customers
- Providing privacy notices to your customers
- Responding to data subject requests from your customers
- Complying with applicable privacy laws
5.2 End Customer Data
If you are an End Customer who received an SMS from one of our Clients:
- Your data was provided to us by the business you engaged with
- That business is the data controller responsible for your data
- Contact that business directly for privacy inquiries or data requests
- You can opt out of SMS messages at any time by replying STOP
5.3 Website Visitor Data
If you are just visiting our Website:
- We collect device and usage data via cookies
- You can manage cookie preferences in your browser
- See our Cookie Policy for more details
6. DATA RETENTION
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).
When we no longer have a legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.
We permanently retain records of SMS opt-outs to ensure we honor all opt-out requests.
7. DATA SECURITY
7.1 Security Measures
We implement appropriate technical and organizational security measures designed to protect your personal information. This includes measures to protect data during transmission and storage, access controls, and regular security assessments.
7.2 Security Limitations
No system is 100% secure. While we implement reasonable security measures, we cannot guarantee absolute security. No electronic transmission over the Internet or information storage technology can be guaranteed to be completely secure.
7.3 Security Incident Response
In the event of a data breach affecting your personal information, we will notify affected users as required by applicable law and take appropriate steps to mitigate harm.
8. YOUR PRIVACY RIGHTS
8.1 All Users
Regardless of your location, you may:
- Access your personal information
- Correct inaccurate information
- Request deletion of your information (subject to legal exceptions)
- Opt out of marketing communications
- Close your account
8.2 How to Exercise Your Rights
To exercise any privacy rights, contact us at:
- Email: starguardreview@gmail.com
- Subject Line: "Privacy Request - [Your Request Type]"
We will respond within 30 days (or sooner if required by applicable law).
8.3 GDPR Rights (EEA, UK, Switzerland)
If you are in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under GDPR:
- Right to be Informed: Know how your data is used
- Right of Access: Obtain a copy of your data
- Right to Rectification: Correct inaccurate data
- Right to Erasure: Request deletion ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to processing based on legitimate interests
- Rights Related to Automated Decision-Making: Not be subject to solely automated decisions with legal effects
- Right to Withdraw Consent: Withdraw consent at any time (without affecting prior processing)
- Right to Lodge a Complaint: File a complaint with your local data protection authority
8.4 CCPA/CPRA Rights (California Residents)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: What personal information we collect, use, and disclose
- Right to Delete: Request deletion of your personal information
- Right to Correct: Correct inaccurate personal information
- Right to Opt-Out: Opt out of the sale/sharing of personal information (Note: We do not sell your data)
- Right to Limit Use of Sensitive Personal Information: Limit how we use sensitive data
- Right to Non-Discrimination: Not be discriminated against for exercising your rights
Categories of Personal Information We Collect:
- Identifiers (name, email, phone, IP address)
- Commercial information (transaction history, Services purchased)
- Internet/electronic activity (browsing history, interactions with Website)
- Professional information (business name, industry)
We Do Not Sell Personal Information. We have not sold personal information in the preceding 12 months.
8.5 Other State Privacy Rights
If you are a resident of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), or Utah (UCPA), you may have similar rights to access, correct, delete, and opt out. Contact us at starguardreview@gmail.com to exercise your rights.
9. SMS DATA AND COMMUNICATIONS
9.1 SMS Data We Collect
When SMS messages are sent through our platform, we collect:
- Recipient phone numbers (provided by our Clients)
- Message content (review requests, follow-ups)
- Delivery status (sent, delivered, failed)
- Responses (ratings, opt-outs, feedback)
- Timestamps
9.2 SMS Data Retention
We retain SMS-related data for as long as necessary to provide our Services, comply with legal obligations, and resolve disputes. Opt-out records are retained permanently to ensure we honor all opt-out requests.
9.3 Client Responsibilities for SMS
As a Client using our SMS features, you are responsible for:
- Obtaining TCPA-compliant consent before sending messages
- Providing proper disclosures to your customers
- Honoring opt-out requests
- Maintaining consent records for at least 5 years
- Complying with all applicable SMS laws
9.4 End Customer SMS Rights
If you received an SMS through our platform:
- Reply STOP to opt out of future messages at any time
- Reply HELP for assistance
- Contact the business that sent the message for privacy inquiries
- Message and data rates may apply
10. COOKIES AND TRACKING
10.1 Types of Cookies We Use
- Essential Cookies: Required for basic functionality
- Preference Cookies: Remember your settings
- Analytics Cookies: Understand how visitors use our site
- Marketing Cookies: Deliver relevant advertisements (with consent)
10.2 Managing Cookies
You can manage cookies through:
- Your browser settings
- Our cookie consent banner
- Opt-out links provided by analytics providers
10.3 Do Not Track
California law requires us to let you know how we respond to web browser Do-Not-Track ("DNT") signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.
11. INTERNATIONAL DATA TRANSFERS
Our Services are hosted in the United States. If you access our Services from outside the United States, your information will be transferred to and processed in the United States.
By using our Services, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.
For users in the European Economic Area, United Kingdom, or Switzerland, we use appropriate safeguards for international data transfers as required by applicable law.
12. THIRD-PARTY LINKS AND SERVICES
12.1 Third-Party Websites
Our Website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.
12.2 Third-Party Integrations
When you connect third-party services (CRMs, review platforms), those services have their own privacy policies. Your use of those services is governed by their terms.
13. CHANGES TO THIS PRIVACY POLICY
13.1 Updates
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Posting the updated policy on our Website
- Updating the "Last Updated" date
- Sending email notification (for material changes)
- Providing prominent notice on our Website
13.2 Your Continued Use
Your continued use of our Services after changes become effective constitutes acceptance of the updated Privacy Policy.
13.3 Review Regularly
We encourage you to review this Privacy Policy periodically to stay informed about our data practices.
14. CONTACT US
14.1 Privacy Inquiries
For questions about this Privacy Policy or our data practices:
Star Guard Review
Email: starguardreview@gmail.com
Phone: (619) 808-5487
Website: starguardreview.com
Location: San Diego, California, USA
14.2 Response Time
We aim to respond to all privacy inquiries within:
- General inquiries: 5 business days
- Data subject requests: 30 days (or sooner if required by law)
- Urgent security matters: 24-48 hours