Privacy Policy

Information we process

• Account details such as email, username, profile information, and authentication records.
• Reviews, comments, business responses, claims, private resolution messages, and support requests.
• Subscription and entitlement identifiers from Stripe. Payment card details are handled by Stripe and are not stored by JustBadReviews.
• Security, diagnostic, and privacy-minimized product events needed to operate and improve the service.

Public complaint datasets

We may process lawfully available public complaint records. Ingestion stores provenance, removes fields we do not need, applies automated personal-data redaction, and publishes the source label. Automated redaction can miss context, so concerns can be reported for human review.

How information is used

We use information to provide accounts and review pages, moderate content, verify business claims, operate resolution tools, process subscriptions, prevent abuse, answer requests, comply with law, and understand service performance.

Service providers and international processing

We use service providers including Supabase for application data, Stripe for billing, and Vercel for hosting and privacy-minimized analytics. Data may be processed in countries different from yours under the safeguards available for the service and jurisdiction.

Retention and security

Retention depends on account status, publication needs, source updates, disputes, fraud prevention, and legal obligations. We use access controls, row-level security, secret separation, signed billing webhooks, and audit records, but no online service can promise absolute security.

Your choices and rights

You can edit eligible profile and review information, use anonymous publication for native reviews, manage subscription billing, and request access, correction, deletion, objection, or restriction where applicable. Public-interest, legal, fraud-prevention, or record-integrity grounds may limit a request.

Contact

Choose Privacy on the contact form and include the relevant account email or page URL. Do not send passwords, payment card numbers, or identity documents unless specifically requested through a secure process.