This Privacy Policy describes how Go Review (Phuket, Thailand — "we", "us", "Go Review") collects, uses, and protects personal data when you visit goreview.co ("Site") or use the Go Review application at hello.goreview.co ("Service").

Go Review is a data controller under the Thai Personal Data Protection Act (PDPA) and the EU General Data Protection Regulation (GDPR), where applicable. We take your privacy seriously and process personal data only to the extent necessary to operate the Service.

1. Data we collect

We collect the following categories of personal data:

Account data

• Name, business name, email address, phone number (if provided)
• Billing details (processed by our payment provider; we do not store card numbers)
• Authentication credentials

Service data

• Review content, ratings, and metadata pulled from connected review platforms (Google, Tripadvisor, Yelp, etc.)
• Customer contact lists you upload or enter for review request campaigns
• Templates, replies, and other content you create within the Service
• Logs of actions you take within the Service (auditing, billing, abuse prevention)

Technical data

• IP address, browser type, device type, operating system
• Pages visited, referrer, approximate location (country/region)

We do not currently use third-party analytics or advertising cookies on the Site. If we add them in the future, we will update this Policy and request your consent where required.

2. How we use your data

• To provide the Service: create your account, fetch reviews, send review requests, display analytics, process payments.
• To improve the Service: diagnose errors, prevent abuse, develop new features.
• To communicate with you: service notifications, billing alerts, security messages, and — only with your consent — marketing communications.
• To comply with legal obligations: tax, accounting, and law-enforcement requests where required.

3. Legal bases for processing (GDPR)

• Performance of a contract — to deliver the Service you signed up for.
• Legitimate interest — to keep the Service secure, prevent fraud, and improve product quality.
• Consent — for non-essential marketing communications and any optional integrations.
• Legal obligation — for record-keeping, tax, and regulatory reporting.

4. Sharing and sub-processors

We do not sell your personal data. We share data only with vetted infrastructure partners that help us deliver the Service — for example, our hosting provider, email-sending provider, payment processor, and the platform that powers the Go Review application. All sub-processors are bound by data-processing agreements and process data only on our documented instructions.

A current list of sub-processors is available on request — contact hello@goreview.co.

5. International transfers

Personal data may be processed in Thailand, the European Economic Area (EEA), and other regions where our infrastructure partners operate. Where data is transferred across borders, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) and equivalent PDPA-compliant mechanisms.

6. Data retention

• Account data: retained while your account is active and for up to 12 months after closure for legal and accounting purposes.
• Review and customer data: retained while your account is active. On closure, you can request deletion or export — we will fulfill the request within 30 days unless legal obligations require longer retention.
• Logs: typically 12 months, longer where required for security or legal reasons.

7. Your rights

You have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your personal data ("right to be forgotten"), subject to legal exceptions
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Thailand Personal Data Protection Committee (PDPC) or your local EU supervisory authority

To exercise any of these rights, email hello@goreview.co. We will respond within 30 days.

8. Security

We use industry-standard technical and organizational measures to protect personal data against loss, misuse, and unauthorized access — including encryption in transit (TLS), encryption at rest, access controls, audit logging, and regular backups. No system is 100% secure; in the event of a data breach affecting your personal data, we will notify you and the relevant supervisory authorities as required by law.

9. Children

The Service is intended for businesses and adults. We do not knowingly collect personal data from children under 16. If you believe we have, contact us and we will delete it.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified by email or via a banner on the Site. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

Questions about this Policy or how we handle your data?

• Email: hello@goreview.co
• Phone: +66 63 665 8444
• Post: Go Review, Phuket, Thailand