Raview Technologies Inc. ("Raview", "we", "us") operates the Raview service at raview.ca, which helps businesses respond to their Google reviews. This policy explains what personal information we collect, why, how we protect it, and your rights. It is written to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and with Google's API Services User Data Policy.
Raview Technologies Inc. is a federally incorporated Canadian company (Business Number 789806973). Our contact details are set out in the Contact section below.
business.manage scope.When we retrieve your Google reviews, we necessarily process information created by the reviewers who wrote them — their public display name, star rating, and review text. Reviewers are third parties who interact with Google, not with Raview. We process this information solely to generate and, where you authorize it, post a response on your behalf. We do not build profiles of reviewers, contact them, enrich their data, or use it for any other purpose, and it is deleted or de-identified when your account is closed, subject to the Retention section.
Raview's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:
To generate responses, the relevant review content and your configured business details are sent to our AI provider, Anthropic, via its API. Anthropic processes this data to return generated text and, under its API terms, does not use it to train its models. We do not use your data or reviewer data to train any AI model. Where we use aggregated or de-identified data to monitor and improve the service, it is processed so that it cannot reasonably identify any individual or business. No automated decision produces legal or similarly significant effects about an individual; you control whether responses post automatically or after your review.
We share information only with providers that help us run the service, under contractual confidentiality and security obligations:
Several of the service providers above store and process data on servers located in the United States and other countries. As a result, your information may be subject to the laws of those jurisdictions, including lawful access by their authorities. By using Raview you acknowledge this cross-border transfer. We require our providers to apply protections comparable to those required under PIPEDA.
Raview uses only strictly necessary cookies — principally an authentication cookie that keeps you signed in to the dashboard. We do not use advertising cookies, cross-site tracking, or third-party analytics cookies on our website or dashboard. Because the cookies we use are essential to providing the service, disabling them in your browser may prevent you from signing in.
We send two kinds of email: essential service messages (such as account, security, and billing notices) and optional messages (the morning digest and product updates). You can turn off the digest and other non-essential messages at any time from your notification preferences in the dashboard, and every non-essential email includes an unsubscribe link, consistent with Canada's Anti-Spam Legislation (CASL). We may continue to send essential service messages while your account is active.
We collect, use, and disclose personal information with your consent. You provide consent when you create an account, connect your Google account, and configure the service. You may withdraw consent at any time (see Your rights below), subject to legal and contractual limits; withdrawing consent may mean we can no longer provide the service.
We keep personal information only as long as needed for the purposes above or as required by law. Account, review, and reviewer data are retained while your account is active and for 90 days after closure, after which they are deleted or de-identified. Billing and tax records are retained for six years, as required by the Canada Revenue Agency.
We protect information with measures appropriate to its sensitivity, including encryption of OAuth tokens at rest, encryption in transit (TLS), database row-level security, and access controls limiting staff access to what is necessary.
If a breach of security safeguards involving your personal information creates a real risk of significant harm, we will report it to the Office of the Privacy Commissioner of Canada and notify affected individuals as required by PIPEDA, and we will keep records of such breaches as the law requires.
To exercise any right, contact our Privacy Officer (see the Contact section below). We respond within the timelines required by PIPEDA.
Raview is a business-to-business service and is not directed to individuals under the age of majority. We do not knowingly collect their personal information.
We may update this policy. Material changes will be posted here with a revised effective date and, where appropriate, communicated by email.
Questions, requests, or complaints:
Privacy Officer, Raview Technologies Inc.
1152 Longwood Rd, Cowichan Bay, BC V0R 1N2, Canada
Email: nicholas@raview.ca
If we cannot resolve your concern, you may contact the Office of the Privacy Commissioner of Canada.