QuickReview
Menu
Sign in with GoogleSign in

Privacy Policy

Last updated November 5, 2026

This Privacy Policy explains how NG Technology LLC, a California limited liability company (“NG Technology LLC”, “we”, “us”) collects, uses, and protects information when you use QuickReview: our merchant review platform, store QR touchpoints, review drafting tools, and merchant dashboard (together, the “Service”).

QuickReview is built with a privacy-by-design architecture that strictly limits data collection. This policy covers two categories of information:

  • Merchant Information: details regarding business owners and authorized operators who create an account and manage stores (“Merchants”);
  • Visiting Customers / Review Scanners: visiting patrons who scan a store QR code to draft a review for posting on Google.

1. Information we collect

Merchant Account and Technical Log Information. When you register and sign in to the merchant dashboard, we receive your name, email address, and OAuth authorization tokens from Google via Google OAuth. These tokens are stored securely by our authentication system in the account table; we do not use them to access your private Google account data or other Google services outside of basic authentication. To authenticate your sessions, prevent unauthorized account access, and maintain security, our authentication system automatically logs your IP address, browser User-Agent string, and session timestamps in the session table. In your dashboard, you configure store profiles including store business name, physical street address, Google Place ID, business category, and optional custom review highlights.

Billing and Subscription Data. We maintain your Stripe customer identifier, subscription identifier, plan status, and payment renewal dates. Payment card details (card number, expiration, CVV) are collected directly by our PCI-compliant payment processor, Stripe; we never receive or store your credit card numbers.

Trial Abuse Prevention. To prevent trial abuse and ensure fair access, Free Trials are limited to one trial per Google account and one trial per Google Place location. Additionally, Stripe provides a card fingerprint (a cryptographic hash representing the payment card, never the card number itself) to prevent the same card from being used to claim multiple free trials.

Terms Acceptance Records. Agreement to our Terms of Service and acknowledgment of this Privacy Policy is collected via the checkbox during Stripe Checkout and recorded by Stripe. We store the associated Stripe Checkout Session identifier and creation timestamp in our database; we do not maintain separate terms version records.

Visiting Customers (Review Scanners). Visiting customers who scan a store QR code do not create an account and are not asked for their name, email address, or phone number. To protect the Service against automated bot abuse, enforce draft generation rate limits, and maintain session continuity, we collect only:

  • a temporary device session cookie set to expire after 35 days; and
  • a one-way keyed HMAC cryptographic hash of the visitor's IP address.

We do not store raw IP addresses for customer review visits. The HMAC hash cannot be reversed to discover a customer's IP address and is used solely for anti-abuse and quota enforcement.

Store Highlights and Customer Choices. Store highlights are configured by merchants in their dashboard. When visiting customers draft a review, these highlights are presented as optional suggestions; customers choose freely whether to incorporate any highlight into their review draft.

2. How we use information

We use personal information exclusively to provide the Service:

  • to authenticate merchants and operate the merchant dashboard;
  • to generate store QR codes, poster downloads, and review links;
  • to assist visiting customers in drafting suggested Google reviews based on merchant category templates and customer-selected highlights;
  • to prevent spam, bot attacks, and abusive request patterns using device cookies and HMAC IP hashes;
  • to bill subscriptions and process payments through Stripe; and
  • to communicate important service notices, billing receipts, and updates.

We do not sell personal information, and we do not share personal information with third parties for cross-context behavioral advertising. Our customer review pages contain no third-party advertising trackers.

3. Data retention

  • Merchant Account Data: Kept while your subscription remains active and during the 30-day suspension period following cancellation, after which it may be permanently deleted.
  • Review Scanner Anti-Abuse Data: Server-side device hashes and HMAC IP hashes are retained for 35 days and are automatically deleted thereafter. In client browsers, the device cookie is set to expire after 35 days.
  • Generated Review Drafts: Drafts are generated in-memory for the visiting customer to customize and copy to Google. We do not store customer review drafts in our permanent database once copied.

4. Service providers and subprocessors

We rely on trusted third-party service providers (subprocessors) to operate the Service:

  • Stripe: Processes recurring subscription billing, card validation, card fingerprint checks, and customer invoicing.
  • Cloudflare: Provides global edge hosting, Workers runtime execution, D1 relational database storage, and edge security infrastructure.
  • Google: Provides Google OAuth authentication for merchants and Google Places API for verified store address and place lookup.
  • Third-Party AI Inference Providers (currently DeepSeek-compatible API): Provides large language model (LLM) inference used to generate suggested review drafts. Only store profile information (business name, category, custom highlights) and the customer's selected answers are sent to generate drafts. We never send customer names, email addresses, or IP addresses to the AI provider.

5. Security

We protect data using modern security measures, including HTTPS/TLS encryption for all network communications, keyed HMAC hashing for visitor IP addresses, and secure authentication tokens. While no system is infallible, we take reasonable precautions to safeguard all data.

6. Your privacy rights

Depending on your location, including under the California Consumer Privacy Act (CCPA), you may have the right to request access to the personal information we collect, request correction of inaccurate data, or request deletion of your information. We do not sell or share personal data and will never discriminate against you for exercising your privacy rights.

To submit a privacy inquiry or exercise your rights, please email us at help@support.ng-technology.org. We verify requests through the Google account email associated with your merchant profile.

7. Children's privacy

QuickReview is intended for business operators and general adult audiences. We do not knowingly collect personal information from children under 16 years of age.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When changes occur, we update the “Last updated” date at the top of this page. For material changes, we notify merchants by email or via the dashboard at least 30 days prior to the effective date.

9. Contact

NG Technology LLC. Privacy questions, data requests, and legal inquiries: help@support.ng-technology.org.

See also our Terms of Service and Refund Policy.