Privacy Policy

Last updated: February 12, 2026

1. Information We Collect

When you create an account, we collect your email address and a hashed password. When you subscribe to a paid plan, payment is processed by Stripe — we do not store your credit card details. We also collect usage data such as API request counts and timestamps.

2. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Process payments and manage subscriptions
  • Enforce rate limits and usage quotas
  • Send important service-related communications
  • Improve and optimize the Service

3. Data Storage

Your account data is stored securely in Supabase (hosted on AWS). API responses are cached temporarily (up to 24 hours) to improve performance and reduce redundant requests. Cached data is automatically purged after expiration.

4. Third-Party Services

We use the following third-party services:

  • Stripe — Payment processing
  • Supabase — Database and authentication
  • Vercel — Hosting and deployment
  • Anthropic (Claude) — AI-powered review summarization

Each service has its own privacy policy. We only share the minimum data necessary for each service to function.

5. Review Data

ReviewStack aggregates publicly available product reviews from YouTube and Reddit. We do not collect or store personal data about review authors beyond what is publicly visible. AI-generated summaries are derived from this public data.

6. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days. Aggregated, anonymized usage statistics may be retained indefinitely.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Export your data in a portable format

9. Security

We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and secure API key generation. However, no method of transmission over the Internet is 100% secure.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes via email or a notice on the Service.

11. Contact

Questions about this policy? Email us at geartalk.co@gmail.com.