Privacy Policy
This Privacy Policy explains how Spade Review Co. (“Spade Review Co.,” “we,” “us,” or “our”), operated by Roman Spade (sole proprietor), collects, uses, shares, and protects information. It covers both our website and the review-request and reputation-management services we provide to business clients.
The short version. We collect what we need to run your review follow-up and nothing more. Your customer information belongs to you. We use it only to deliver the services you have contracted, we do not sell it, and we do not market to your customers on our own behalf.
1. Who this policy applies to
This policy covers three groups:
- Website visitors — anyone browsing our site or submitting the demo request form.
- Business clients — the local businesses that contract our services.
- Client customers — the end customers of our clients, who may receive follow-up messages sent on the client’s behalf.
For client customer information, our client is the party that decides what data is collected and why (in some laws, the “controller” or “business”). We act only as a service provider or processor carrying out the client’s instructions. If you are a client customer with a question about your data, contact the business you did business with first; you may also contact us and we will route your request to that client.
2. Information we collect
Information you give us directly
- Demo request form: full name, business name, email address, phone number, business type, current booking or CRM software, and anything you write in the message field.
- Client onboarding and support: business details, billing contact information, message templates you approve, your Google Business Profile review link, and correspondence with us.
Client customer information
To deliver the service, a client submits or connects a list of customers. This typically includes:
- First name (and last name where provided)
- Mobile phone number and/or email address
- Service or appointment details, such as the service performed, the date completed, and the assigned staff member
- Message activity — what was sent, when, whether it was delivered, whether the customer replied, and whether the customer opted out
We ask clients not to submit sensitive categories of information (for example, health, treatment, financial account, or government identifier details). Clients in regulated fields, such as medical spas, are responsible for ensuring that the data they submit and the messages they approve comply with the rules that apply to them.
Payment information
We do not collect or store payment card numbers. Payments, when they occur, are processed by a third-party payment provider that handles card details directly under its own privacy and security terms. We receive only limited records such as an invoice status or the last four digits of a card.
Information collected automatically
- Standard server log data such as IP address, browser type, device type, referring page, and pages viewed.
- Basic analytics about how the site is used, if and when analytics are enabled. We do not currently use a third-party analytics provider; this section will be updated if that changes.
3. How we use information
We use the information described above to:
- Respond to demo requests and questions.
- Set up, configure, operate, and support a client’s review-request workflow.
- Send check-in messages, honest review requests, and a single reminder on the client’s behalf.
- Monitor reviews that appear on public platforms and help clients draft responses.
- Notify a client when a customer replies with a complaint or a problem.
- Produce monthly performance reports for the client.
- Process billing, maintain records, and enforce our terms.
- Maintain security, prevent abuse, and comply with legal obligations.
- Improve our own service quality and reliability.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use client customer data to market our own services to those customers.
4. Customer data belongs to the client
Customer information submitted by a client remains that client’s information. We use it only to provide the contracted service, and only as instructed. Specifically:
- We do not sell, rent, license, or trade it.
- We do not use it to build or enrich a marketing list of our own.
- We do not share one client’s customer list with another client.
- A client may request an export of their data, or its deletion, at any time.
Client responsibility. Clients are responsible for confirming that every customer they submit is eligible to receive the communications we will send — including that any consent required by law has been obtained and any do-not-contact request is honored. We rely on that confirmation. Clients are also responsible for the accuracy of the contact details they provide.
5. Text and email messaging
- Messages are sent on behalf of the client and identify the client’s business by name.
- For a single completed service, a customer receives at most a check-in message, a review request, and one reminder.
- Messages include opt-out instructions. Opt-outs are processed immediately and applied to future sequences for that client.
- Message and delivery records are kept so that opt-outs can be honored and so that reports can be produced.
- Standard message and data rates from the recipient’s carrier may apply. We do not control those charges.
6. How we share information
We share information only in these circumstances:
- Service providers. Vendors that help us operate, such as messaging and telecom providers, email delivery services, automation and workflow platforms, hosting and storage providers, form and scheduling tools, analytics providers, and payment processors. They may access information only as needed to perform their function for us. A current list of these providers is available on request.
- With the client. Customer replies, delivery activity, and reporting are shared back with the client whose customers they are.
- Legal reasons. When required by law, subpoena, or valid legal process, or to protect the rights, safety, or property of Spade Review Co., our clients, or others.
- Business transfer. If our business is merged, acquired, or reorganized, information may transfer as part of that transaction, subject to this policy.
- With your direction. Any other sharing you specifically ask us to do.
7. Cookies and website analytics
This website is built as static pages and does not set advertising cookies or run third-party tracking scripts as published. Fonts are loaded from a third-party font service, which receives your IP address as part of that request. If we later add analytics or scheduling embeds, we will update this section to name them.
Most browsers let you block or delete cookies through their settings. Blocking cookies does not affect the core function of this site.
8. Data retention
- Demo requests: retained while we follow up and for a reasonable period afterward for our records.
- Client account and billing records: retained for the length of the engagement and afterward as required for tax, accounting, and legal purposes.
- Client customer data: retained for as long as needed to provide the service. Following termination, we delete or return client customer data on request; absent a request, we delete it within 30 days of termination.
- Opt-out records: retained indefinitely, because we need them to keep honoring the opt-out.
9. Security
We use commercially reasonable safeguards to protect information, including access controls, limiting internal access to those who need it, and working with reputable vendors. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affecting your information occurs, we will notify affected clients as required by applicable law.
10. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to opt out of certain processing, and to be free from discrimination for exercising those rights.
- Clients and website visitors: email us at hello@spadereviewco.com and we will respond within the timeframe required by applicable law.
- Client customers: contact the business that served you. That business decides what happens with its customer records. You may also contact us and we will forward your request to that client and assist them in fulfilling it.
- To stop messages: reply with the opt-out keyword included in the message, or contact the business directly.
We may need to verify your identity before acting on a request. An authorized agent may submit a request on your behalf where the law allows.
11. Children’s privacy
Our services are for businesses and are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child’s information has been submitted to us, contact us and we will delete it.
12. Third-party platforms
Our services interact with third-party platforms, including Google Business Profile and whatever booking, CRM, or messaging tools a client uses. Those platforms have their own terms and privacy policies, and we do not control them. Google and the Google logo are trademarks of Google LLC; Spade Review Co. is not affiliated with, sponsored by, or endorsed by Google.
13. International users
Our services are operated from and intended for use in the United States. If you access the site from elsewhere, understand that your information may be transferred to, stored in, and processed in that jurisdiction, where data protection laws may differ from those of your own.
14. Changes to this policy
We may update this policy as our services change or as the law requires. When we do, we will revise the “Last updated” date above. For material changes affecting active clients, we will provide notice by email. Continued use of the site or services after an update means you accept the revised policy.
15. Contact us
Questions about this policy or about your information:
- Email: hello@spadereviewco.com
- Legal entity: Roman Spade, a sole proprietor doing business as Spade Review Co.
Note. This policy is a plain-language description of our practices, not legal advice. Have it reviewed by a qualified attorney in your jurisdiction before you rely on it, particularly if you serve regulated industries or customers outside the United States.