Write a reviewFor businesses

Draft: the company details on this page have not been filled in yet.

Privacy policy

Last updated: 26 October 2026

This policy explains what personal data OKReviews (okreviews.com) collects, why, who we share it with, how long we keep it and what your rights are. We collect only what we need to run an honest review platform. We do not sell your data and we do not use advertising or tracking cookies.

  1. 1. Who we are

    OKReviews is run by [company], [address] ("OKReviews", "we"). We are the controller of the personal data described in this policy, except where we say we act for a business (see "Order data from businesses").

    For any privacy question or request, write to privacy@okreviews.com.

  2. 2. What we collect

    Depending on how you use OKReviews, we process:

    • Account data: your email address, the public name you choose, and optionally your country and profile photo; your language, whether you agreed to receive email updates, and when you accepted our terms. If you sign in with Google, Google gives us your name, email address and profile photo.
    • What you publish and do: your reviews (rating, title, text, date of experience, country), edits to them, replies, "Useful" votes, reports you make and appeals.
    • Proof of purchase: if you upload a receipt or invoice to verify a review, we keep it privately. Only you and the OKReviews moderation team can see it, never the business or the public.
    • Business accounts: if you manage a business page, your role in it, and the details you give to prove that you represent the business (for example a DNS record, a file on the website or a work email address).
    • Order data from businesses: if a shop connects OKReviews to invite its customers, we receive the customer's email address, name, order number and the products ordered.
    • Security data: to detect fake reviews and abuse we record a salted hash of the IP address and device used to post a review, never the IP address itself in our database. Our hosting providers keep short-lived server logs that include IP addresses.
    • Data stored in your browser: see "Cookies and data on your device".

  3. 3. Why we use it and on what legal basis

    • To provide your account and publish your reviews, because this is necessary to perform our agreement with you (our Terms of use).
    • To keep reviews genuine: detecting fake reviews, fraud and abuse, moderating content and handling reports and appeals. This is our legitimate interest, and that of everyone who relies on reviews.
    • To show reviews publicly, including in widgets on businesses' websites, because publishing honest reviews is the purpose of the service (our agreement with you and our legitimate interest).
    • To send you emails you need: sign-in links, notices about your reviews (for example a business reply or a moderation decision) and important changes to our terms.
    • To send you news and tips, only if you said yes. You can withdraw this consent at any time with the link in every such email or in your account settings.
    • To comply with the law, for example to respond to valid requests from authorities or to handle notices under the EU Digital Services Act.

  4. 4. What is public

    Your public name, profile photo, country, your reviews and their dates, the number of reviews you wrote and the date you joined are visible to everyone, including search engines, and may appear in OKReviews widgets on businesses' websites. Choose a public name you are comfortable with; it does not have to be your real name.

    Your email address is never shown publicly. A business you review does not receive your email address from us. If you came through a business's invitation, that business already has it from your order.

  5. 5. Order data from businesses

    When a shop uses OKReviews to invite its customers, the shop decides to share the customer's order data with us. For sending the invitation we act on the shop's behalf, as its processor. We also use the order to mark the resulting review as "Verified order", which is our own legitimate interest in keeping reviews genuine.

    We delete the customer's email address and name once the invitation period has ended. If you received an invitation you did not want, you can ignore it or write to us, and we will make sure you are not invited again.

  6. 6. Who we share it with

    We share personal data only with:

    • Service providers who run OKReviews for us and may use the data only on our instructions: Supabase (database, sign-in and file storage), Vercel (website hosting) and our email delivery provider.
    • Google, if you choose to sign in with Google.
    • The public, for the information listed in "What is public".
    • Authorities or courts, when the law requires it, and professional advisers when needed to protect our rights.

    We never sell personal data and we do not share it for advertising.

  7. 7. International transfers

    Some of our providers process data outside the European Economic Area, for example in the United States. In that case we rely on the EU Commission's adequacy decisions (such as the EU–US Data Privacy Framework) or on the Standard Contractual Clauses, together with additional safeguards where needed.

  8. 8. How long we keep it

    • Account data: as long as your account is open. When you close your account we delete it, except what we must keep by law.
    • Reviews: until you delete them or close your account. A review removed by moderation is kept, hidden, for as long as an appeal or a legal claim is possible.
    • Proof of purchase: until the review is verified and any dispute about it is closed.
    • Customer order data from shops: deleted at the end of the invitation period.
    • Security hashes: up to 24 months, to recognise repeated fake reviews.
    • Backups: deleted data can remain in encrypted backups for up to 30 days.

  9. 9. Cookies and data on your device

    We use only cookies that are needed for the site to work, so we do not ask for cookie consent:

    • Sign-in cookies (set by Supabase), which keep you signed in.
    • NEXT_LOCALE, which remembers the language you chose.
    • Your recent searches and an unsent review draft are saved in your browser's local storage, only on your device. We never receive them, and clearing your browser data removes them.

    We do not use analytics, advertising or social media tracking cookies. If this ever changes, we will ask for your consent first.

  10. 10. Your rights

    You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. Where we rely on your consent, you can withdraw it at any time. You can edit your profile and delete your reviews yourself in your account.

    Write to privacy@okreviews.com. We answer within one month. To protect your account, we may ask you to confirm the request from the email address of your account.

    You can also complain to a data protection authority, in particular in the country where you live or work. In the UK this is the Information Commissioner's Office (ICO).

    If you live in California or another US state with a privacy law: we do not sell or share personal information for targeted advertising, and you have the rights to know, delete and correct your information described above. Residents of Canada, Australia and other countries have the same rights with us.

  11. 11. Age

    You must be at least 16 years old to create an account. We do not knowingly collect data from younger children; if we learn that we have, we delete it.

  12. 12. Security

    Data is encrypted in transit and at rest. Access inside OKReviews is limited to the people who need it, and every moderation action is logged. Sign-in works without passwords, through one-time email links or Google.

  13. 13. Changes to this policy

    We may update this policy. This page always shows the date of the last change, and we email account holders about important changes before they take effect.