Privacy Policy
Effective October 19, 2026
The short version: businesses use UpYours to help their customers write and post reviews. We store the business's account and settings, and what customers type on a review page so the business can see it. We don't sell personal information, we don't post reviews for anyone, and we only use service providers we need to run UpYours.
This policy explains how Up Your Reviews ("UpYours," "we," "us") handles information when you use upyours.reviews, app.upyours.reviews, and review pages we host for businesses (including review pages on a business's own web address). It applies to two groups of people:
- Businesses — owners and staff who create an UpYours account to set up a review page.
- Customers — people who open a business's review page to write a review.
Information we collect
From businesses
- Account information: email address and password (stored securely by our authentication provider — we never see your password), or your Google or Microsoft account email if you sign in with one.
- Business information: business name, type of business, locations, review-site links (such as Google, Yelp or BBB), logo, crew or staff first names you choose to show, message templates, and any custom web address you connect.
- Billing information: if you subscribe, payments are handled by our payment processor. We receive your subscription status and a customer ID — not your full card number.
From customers using a review page
- What you enter: star rating, the words and services you pick, any staff names you tag, the city you enter, the sentence you write, and the drafted review — saved when you tap Copy or a review-site button, not while you're still typing or drafting.
- Technical information: your IP address and browser type, saved with that submission to help prevent abuse.
We don't ask customers for their name, email or phone number. When you post your review on Google, Yelp or BBB, you do that on their site, under their own privacy policies — we don't see or control what you post there.
Automatically
- Sign-in session: the business portal stores a sign-in token in your browser so you stay logged in. We don't use advertising or tracking cookies.
- Server logs: our hosting provider keeps standard request logs (such as IP address, time and page requested) for security and troubleshooting.
How we use information
- To run UpYours: show a business's review page, draft reviews, and send customers to the review sites the business chose.
- To show a business what its customers wrote on its review page.
- To operate accounts, send sign-in and account emails, and handle subscriptions.
- To keep UpYours secure, prevent spam and abuse, and fix problems.
- To meet legal obligations.
We don't sell personal information or share it for cross-context behavioral advertising.
Who we share it with
- The business whose review page you used. Customer submissions are visible to that business's account.
- Service providers that run UpYours on our behalf: Supabase (database, sign-in and file storage), Cloudflare (hosting, security and custom web addresses), our email delivery provider (account emails), and our payment processor (subscriptions). They may only use the information to provide their service to us.
- Google, Yelp or BBB only when you choose to open their site — your browser goes there directly.
- Legal reasons: if required by law, or to protect the rights, safety or property of UpYours, our users or others.
- Business transfers: if UpYours is involved in a merger, acquisition or sale of assets, information may transfer as part of that deal, under this policy.
How long we keep it
- Business account information is kept while the account is open, and deleted within 90 days after the business asks us to delete it — except what we must keep for legal, tax or accounting reasons.
- Customer submissions are kept while the business's account is open, so the business can see its history, and deleted along with the account.
- Server logs are kept for a limited period by our hosting provider.
Your choices and rights
- Businesses can view and update their information in the portal at any time, and can ask us to delete their account.
- Customers can ask the business whose page they used, or us, to delete a submission. Contact the business first — they control their account — or email us and we'll help.
- Depending on where you live, you may have rights to access, correct, delete, or get a copy of your personal information, and to not be discriminated against for using those rights. Email us to make a request; we may need to verify it's you.
Security
We use access controls so each business can only see its own data, encrypted connections (HTTPS) everywhere, and providers with strong security practices. No system is perfectly secure, but we work to protect your information and will notify affected users of a breach as required by law.
Children
UpYours is meant for businesses and adults. It isn't directed to children under 13, and we don't knowingly collect their personal information. If you believe a child has given us information, contact us and we'll delete it.
Changes to this policy
If we make material changes, we'll update the date above and, for businesses with an account, let you know by email or in the portal before the changes take effect.
Contact us
Questions or requests: hello@upyours.reviews