review2
Back to home ↗

Privacy Policy

Effective from 5 November 2026

This policy explains how we handle data when you visit reviewreview.io, try a sample QR page, send us an enquiry, or use a review² account and subscription. The contact form sends a real message to our team. Sample guest interactions are demonstrations.

1. Who is responsible?

The controller for this website, enquiries, and review² accounts and subscriptions is Domino City Kft. (Domino City Korlátolt Felelősségű Társaság), registered seat: Tas vezér utca 20. 6. em. 4. ajtó, 1113 Budapest, Hungary; company registration number: 01-09-458862; tax number: 33095668-2-43. Contact: info@reviewreview.io.

This notice covers this landing page, its sample QR pages, and your review² account and subscription in the review² app (section 5). It does not describe a participating business’s live guest journey; the relevant information must be provided for that service when you use it.

2. Contact forms and email

The enquiry form requires your name, business name, email address and acknowledgement that your information will be used to answer the enquiry. A message is optional. The form also sends your selected plan, where applicable, language and a request reference to help us handle your enquiry and avoid duplicate delivery.

We use this information to answer your questions and discuss the setup you request. Our legal basis is our legitimate interest in handling business enquiries (Article 6(1)(f) GDPR). Where an individual asks us to take steps before entering a contract with them, Article 6(1)(b) GDPR applies to the necessary steps.

The acknowledgement checkbox confirms that you understand this use. It is not consent to marketing. Submitting the form does not add you to a newsletter, create an account or subscription, or take payment. The required fields are necessary to submit this form; you can also contact us directly by email.

When you email info@reviewreview.io, we receive your email address, your message and any information you include. Please share only the information needed for your question.

3. Website delivery, security and the sample

Cloudflare processes technical request information, such as IP addresses, request times, requested URLs and browser information, to deliver the website and protect it against abuse. The contact endpoint also uses your IP address to limit submissions to five requests per minute. Abuse controls may reject repeated or automated submissions.

Our legal basis for necessary website delivery and abuse prevention is our legitimate interest in operating a secure and usable website (Article 6(1)(f) GDPR). If the form is blocked, you can reach us by email.

The enquiry endpoint processes the submission and sends it as email through Resend to info@reviewreview.io. It does not create a contact record in an application database. This does not mean your enquiry is never stored: the delivered message and correspondence remain in our business mailbox, and service providers process delivery and security data.

The sample QR experience does not send sample feedback to a business, submit a Google review, collect a guest mailing list or generate a redeemable coupon. It does not require an account. Ordinary technical requests to load its pages still pass through our hosting provider.

We use PostHog product analytics on this landing page and its sample QR pages to understand how visitors find and use them, and to improve them. We record the pages you view and when you leave them, the address you came from (referrer) and any campaign tags in the link, which sections of the page you scroll to, which buttons and links you click (such as “Get started”, a pricing plan, the sample demo or the language switch), the steps you take in the sample demo, and whether you open and successfully send the enquiry form. We never record what you type into a form. Each visit gets a random identifier that is kept in the page’s memory only; when you follow a link to another page of this site or to the review² sign-up, the identifier is passed along in that link, so the visit can be followed as one. If you then create a review² account, the events of that visit are linked to your account (section 5). As with any web request, PostHog receives your IP address and browser information with the events. The data is sent to z.domino.run, an address that forwards it to PostHog Cloud EU (PostHog Inc.), which stores it in the European Union. Our legal basis is our legitimate interest in understanding and improving our website and sign-up (Article 6(1)(f) GDPR). Nothing is stored on your device for this, so no cookie consent is needed. You can object at info@reviewreview.io.

4. Who receives data?

We do not sell your personal data or use this form to subscribe you to marketing. We may disclose information when legally required, for example in response to a valid authority request.

5. Your review² account and subscription

When you create a review² account at reviewreview.io/app, we process your email address, your name and profile picture where we have them, the one-time sign-in codes we email you, your team and its members’ roles, and the venues you set up (such as a venue’s name, Google review link, logo and images). We use them to provide the app under our contract with you or your business (Article 6(1)(b) GDPR) and to keep it secure (Article 6(1)(f) GDPR).

You can sign in with a code we email you or with your Google account. If you sign in with Google, Google Ireland Limited shares your Google account ID, email address, name (display name, first and last name) and profile picture with us; we use them to sign you in and to show your name and picture in the app. If you sign in with an emailed code, the app shows a profile picture from Gravatar (Automattic Inc., USA): the picture’s address is built from a hash (MD5) of your email address, so loading it sends that hash, and the usual request details of the browser loading it, to Gravatar.

When you start the subscription, you pay through Stripe Checkout. Stripe collects your card details and your billing details (name, email address, billing address and any VAT number); we do not receive or store your full card number. We store references to your Stripe customer and subscription, the plan, the number of venues, and the payment and renewal status, so that we can run the subscription, email your team’s owners and admins about the trial and payments, and pause or resume your review pages. Our legal basis is the contract (Article 6(1)(b) GDPR).

Domino City Kft. issues invoices through Billingo, from your billing details, the amounts charged and the VAT. Issuing and keeping invoices is a legal obligation under Hungarian VAT and accounting law (Article 6(1)(c) GDPR).

The review² app uses PostHog for product analytics: which pages and features are used, and how. While you are signed in, these usage events are linked to your account (your user ID, email address, name and profile picture), so we can understand and improve how the app is used. If you came to the sign-up from this landing page, the analytics of that visit (section 3) are linked to your account too. The data is sent to z.domino.run, an address that forwards it to PostHog Cloud EU (PostHog Inc.), which stores it in the European Union. Our legal basis is our legitimate interest in improving the app (Article 6(1)(f) GDPR). PostHog stores nothing on your device for this, so no cookie consent is needed. You can object at support@reviewreview.io.

For your account and subscription, data is received by:

We keep account and venue data while your account exists. When you ask us to close it, we delete or anonymise it, unless we need it to meet a legal obligation or to establish, exercise or defend a legal claim. Invoices and the accounting records behind them are kept for as long as Hungarian accounting law requires (currently 8 years). Questions about your subscription, payments or invoices: support@reviewreview.io.

6. International processing

Cloudflare, Resend and providers named in section 5, such as Google, Gravatar, Stripe, Loops and Sentry, operate internationally, including in the United States, so the processing described above may take place outside the European Economic Area. Their published data processing terms describe safeguards for international transfers, including the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework, where applicable: Cloudflare data processing terms, Resend data processing terms, Loops data processing terms and Sentry data processing terms. PostHog stores the analytics data of this landing page and the review² app in the European Union, but PostHog Inc. is a US company whose staff may access it; the same safeguards apply (PostHog data processing terms). The servers we rent from OVH SAS are in France. Contact info@reviewreview.io for information about the safeguards relevant to your data.

7. How long is data kept?

We keep enquiry emails and follow-up correspondence for as long as needed to handle the enquiry and any resulting discussion. Where a record is necessary to meet a legal obligation or establish, exercise or defend a legal claim, it may be kept for that purpose. We do not create a separate lead database through this form.

The IP-based submission limit operates in one-minute windows. Hosting, email delivery and security records are processed under the relevant providers’ service retention arrangements. You can ask us about the records associated with your enquiry or request deletion at info@reviewreview.io.

8. Cookies and tracking

This landing page uses no cookies or other browser storage for analytics or advertising, and no advertising trackers. Its PostHog product analytics (section 3) keep a random visit identifier in the page’s memory only and store nothing on your device. It does not store a marketing consent preference in your browser. There are no optional cookie categories to enable or disable, so we do not display a consent toggle.

The review² app at reviewreview.io/app is different: besides the cookies that signing in needs, it keeps your app settings, such as the colour theme and the venue you last opened, in your browser’s local storage. Its PostHog product analytics (section 5) store nothing on your device.

Links to external services open under those services’ own privacy and cookie policies.

9. Your rights and complaints

Depending on the applicable legal conditions, you can request access, correction, erasure or restriction of your personal data, object to processing based on legitimate interests, and request data portability where that right applies. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.

Send requests to info@reviewreview.io. We respond without undue delay and normally within one month. If the GDPR permits an extension because of the complexity or number of requests, we will explain the reason and extension within that first month.

You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9–11., Hungary; postal address: 1363 Budapest, Pf. 9. See NAIH contact and complaint information for the available submission methods. You may also complain to the supervisory authority where you live, work or where an alleged infringement occurred, and seek a judicial remedy.

10. Security and updates

We use appropriate technical and organisational safeguards for this website and correspondence. We do not use this website for profiling or solely automated decisions with legal or similarly significant effects.

We publish changes to this policy here with a revised effective date. Questions: info@reviewreview.io.