Last updated 3 September 2026

Privacy policy

Reviewrs sends review requests on behalf of small service businesses in Australia and New Zealand. This policy explains what we hold about the people those messages go to, why we hold it, how to stop the messages permanently, and how long anything survives afterwards. It describes what the software actually does, not what would be convenient to say.

If you got a text or an email from us

You were sent it because a business you had just dealt with uses Reviewrs to ask their customers for a Google review. That business is named in the message. They gave us your details from their own accounting records when they marked your invoice paid; we do not buy lists, we do not scrape anything, and we did not collect anything from you directly.

You will get one message, and one reminder three days later if you have not opened the link. That is all. To stop, reply STOP to the text, or use the unsubscribe link in the email. It is permanent. The rest of this page is the detail.

Who we are

Reviewrs is the service that sends the messages. The business you dealt with decides that their customers should be asked, and we act on that decision using the details their accounting system already holds. If you want something removed, you can come to either of us; write to [email protected] and we will deal with it ourselves rather than sending you back to them.

What we hold, and where it came from

About a customer of one of our client businesses, all of it taken from that business’s own Xero records:

Your name

As it appears on the contact record their invoice was raised against.

Your mobile number and your email address

Whichever of them that contact record holds. We keep the number in two forms: exactly as Xero had it, and tidied into a standard international format so it can be compared reliably against an opt-out.

The contact identifier their accounting system uses

So a returning customer is recognised rather than added twice.

Facts about the job

The invoice reference, its amount, and the date it was marked paid. These decide whether a request is sent at all; the amount is never shown to you and never leaves the system.

The message we sent you

Its text with your first name filled in, when it went out, and whether the network reported it delivered.

Whether the link was opened

A single timestamp on the redirect. We do not know whether you wrote a review, what it said, or what star it carried — nothing in this system reads reviews.

Anything you text back

The number it came from and the words, so an opt-out can be honoured and so a question about the job can be passed to the business owner.

About our client businesses we also hold their trading name, the owner’s name, mobile and email, their time zone, and — for Australian businesses only, because the telecommunications regulator requires it before a dedicated number can be issued — their street address.

What we use it for

One review request per completed job, and at most one reminder, sent three days later and only if you have not already opened the link. There is no third message. The same person is not asked again within three months, however many jobs they have had done.

The link in the message goes straight to Google’s own review form for that business. There is no page of ours in between, no question about how the job went beforehand, and no difference in what anybody is sent.

That is the only thing your details are used for. We do not sell them, we do not share them with advertisers or data brokers, and we never use them for marketing of our own or anybody else’s.

Every message names the business sending it and carries an instruction for stopping them. That is not a convention we try to follow — the software refuses to send a message template that leaves either of them out.

When messages are sent

Roughly an hour after the invoice is marked paid, and never outside 8am to 7pm read in the local time of the business you dealt with. A message that would fall outside those hours waits until they open again, and the check runs a second time at the moment of sending rather than only when the message is scheduled — so a delay or a backlog cannot deliver something at three in the morning.

Who else sees it

Only the providers that make the sending work, and only what each one needs:

Xero

The source. It tells us an invoice was paid, and we read the contact details attached to it. Nothing flows back the other way.

ClickSend

Carries the text messages out and the replies back.

Resend

Carries the email where a customer has no mobile number on file. Those are sent from [email protected], so the sender you see is ours even though the business is named in the message.

Google

Only to look up the client business’s own listing. We send Google nothing about you. When you tap the link your browser goes to Google as it would from anywhere else, and we deliberately suppress the referring page so that even the address of the message you came from is not passed on.

Anthropic

Used once, when a business joins, to draft the wording of their messages from their trading name, trade and preferred tone. No customer’s details are ever sent to it.

Our hosting and database provider

Runs the application and stores the records described above.

How to stop the messages

Reply STOP to any text. UNSUBSCRIBE, OPT OUT and a few other obvious variants work too, in any case and with or without punctuation. For email, use the unsubscribe link at the bottom of the message; your mail app’s own unsubscribe button works as well. We text back once to confirm, and then nothing further.

It is permanent. There is no resubscribe link and we do not offer one. Nothing in the software can lift an opt-out once it is recorded.

It is recorded against your phone number or email address, not against one record in a database. This matters more than it sounds. If that business tidies up their contacts, enters you twice, merges two records, or adds you to Xero again next year under a new contact record, you would ordinarily reappear as a fresh contactable person with no opt-out attached. Because we match on the number itself, you stay unsubscribed through all of that, and a new record inherits the opt-out the moment it is created.

An opt-out applies to the business whose message you replied to. If you are a customer of two businesses that both use Reviewrs, stopping one does not stop the other — your dealings are with each of them separately, and one of them has no standing to speak for the other. Reply STOP to each, or email us and we will do it for you.

How long we keep anything

Two years. Once a customer has had no message, no request and no new job for that long, an automatic monthly sweep clears their name and the copy of their number in the format their accounting system used, along with the text of every message we sent them and the words of anything they texted back. If they had not opted out, their mobile number and email address are cleared as well. Provider error text is cleared on the same clock.

The one exception, and it is deliberate. If you have opted out, we keep the identifier your opt-out is matched on — your phone number, or your email address — and nothing else. Deleting it would be the worse outcome for you: with nothing left to check a new invoice against, the very next job that named you would create a fresh, contactable record and we would contact you again. So the number survives, on its own, with the name and everything else gone.

Something does survive every redaction, and it would be dishonest to imply otherwise. Counts and timestamps with nobody attached to them remain: that a message went out on a date, that a link was opened, that a reply was classified as an opt-out and passed on. Those are what the weekly summary a business receives is drawn from, and none of them carries a name, a number or an address. So does a one-way fingerprint of any text you sent in, kept for one purpose only — recognising the phone network redelivering the same message twice. The words themselves are gone, and the fingerprint cannot be turned back into them.

If a business stops using Reviewrs, everything belonging to them and their customers is deleted outright rather than aged out.

Asking what we hold, and asking us to delete it

Email [email protected]. You can ask us what we hold about you and we will tell you, and you can ask us to delete it and we will. We aim to answer within a few days and will not take longer than 30 days.

The one thing an erasure request will not remove is the identifier described above, if you have opted out, for the reason given there — removing it would restart the messages you asked to stop. We will say so explicitly rather than quietly leaving it out of the answer. Everything else goes.

How it is kept safe

Connections to a business’s accounting system are held as encrypted credentials rather than as anything a person can read. Every personal link we send is signed, so it cannot be altered or guessed at, and the unsubscribe link works without anyone having to log in to anything. These pages load nothing from anywhere else — no fonts, no analytics, no tracking scripts — so visiting them tells nobody but us that you did.

The law this is written against

In Australia: the Privacy Act 1988 and the Australian Privacy Principles, and the Spam Act 2003 — which is why every message identifies the business sending it and carries a working way to stop it, and why an unsubscribe is acted on immediately rather than within five working days. In New Zealand: the Privacy Act 2020 and its Information Privacy Principles, and the Unsolicited Electronic Messages Act 2007.

We handle personal information in line with those principles whether or not the small business exemption in the Australian Act happens to apply to us. If you think we have got something wrong, tell us first at [email protected]; if we do not sort it out you can complain to the Office of the Australian Information Commissioner, or in New Zealand to the Office of the Privacy Commissioner.

Changes to this policy

If what the software does changes, this page changes with it and the date at the top moves. We will not narrow what we have promised here about opt-outs or retention without saying so plainly.