Privacy Policy

Last updated: April 1, 2026

1. Information We Collect

When you use ReviewMasterAI, we collect the following information:

  • Account Information: Name, email address, and password when you register.
  • Google Account Data: If you sign in with Google, we receive your name, email, and profile picture.
  • Usage Data: Pages visited, features used, articles generated, and timestamps.
  • API Keys: If you provide your own AI provider API keys, they are stored encrypted (AES-256-GCM).
  • Payment Information: Transaction IDs and screenshots for manual payment verification. We do not store credit card numbers.

2. How We Use Your Information

  • To provide and maintain our service
  • To process your account registration and authentication
  • To generate AI-powered product reviews on your behalf
  • To manage your credits and billing
  • To send important service notifications (welcome emails, password resets)
  • To improve our platform based on usage patterns

3. Data Storage & Security

Your data is stored securely using:

  • MongoDB Atlas with encrypted connections
  • AES-256-GCM encryption for sensitive data (API keys)
  • JWT tokens with secure HTTP-only cookies
  • HTTPS encryption for all data in transit

4. Third-Party Services

We use the following third-party services:

  • Firebase: Google authentication
  • Vercel: Hosting and deployment
  • MongoDB Atlas: Database storage
  • Resend: Transactional emails
  • AI Providers: OpenAI, Anthropic, Google Gemini, Groq (for review generation)
  • ImgBB: Image hosting

5. Your Rights

You have the right to:

  • Access your personal data
  • Update or correct your information
  • Delete your account and all associated data
  • Export your generated content
  • Opt out of non-essential communications

6. Cookies

We use essential cookies for authentication (JWT session tokens). We do not use third-party tracking cookies or advertising cookies.

7. Data Retention

Your data is retained as long as your account is active. If you delete your account, all personal data and generated content will be permanently removed within 30 days.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or a notice on our website.

9. Contact Us

If you have questions about this privacy policy, contact us at inzamul.dev@gmail.com.