How TripleReviews handles information about the businesses that use it, their customers, and visitors to this site.
Company details and how to reach us.
TripleReviews is built and operated by Resonate Agency LLC (doing business as Point Higher), a Florida limited liability company, based in Miami, Florida. TripleReviews is review request and feedback software that businesses use with their own customers. It isn’t a review site: it doesn’t publish reviews or ratings of businesses. This policy explains how we handle personal information when businesses use TripleReviews, when their customers receive our messages, and when people visit our website.
Questions: info@triplereviews.com.
From business users, from their customers, and from site visitors.
From business users: name, business name, email, phone, billing details (processed by our payment provider), and how you use the Service. If you ask us to text or call you a code to confirm your Google listing, the phone number on that listing. If you sign in with Google or connect a Google Business Profile, also the Google data described in section 07. If you add your team in Settings, the names and nicknames of the people on it.
From your customers, provided by the business: name, email address and, if the business adds it, mobile phone number. From their replies: what they tell the business. Once texting is available, also the record of each customer's written agreement to get texts (when and how they agreed) and the business's confirmation of it (see section 05). If we add new kinds of customer information, we will update this policy first.
From website visitors: information you enter in forms, such as the free review check, a walkthrough request or the reviews playbook, including a mobile number and whether you asked for texts, and basic technical data like browser type and pages visited. For the free review check: the business name and the city or ZIP you type, and Google's place ID of the business you pick.
Running the service, support, security and product improvement.
To run the Service: send the messages a business asked us to send, show private notes and follow-ups, draft review replies (coming soon), and build reports.
Team Shout-Outs: if a business adds its team, we look for those names and nicknames in its private notes, its video testimonials and, once it connects Google Business Profile, its Google reviews, to show the business who customers thank by name and, if the owner wants, to email the owner when a 5-star note or review, or a video, names someone. The email says only who was named and where (for example "a 5-star Google review"), never what the customer wrote. We never ask customers to name anyone.
To support and secure accounts, bill customers, prevent abuse, and improve the Service. To reply to requests from our website, including the free review check and walkthrough bookings. If you ask for the reviews playbook, we email you a copy once, and your request reaches our team like any other website form, so we may write to you about TripleReviews. Ask us to stop and we won’t write again. We don’t add you to a newsletter.
Other review sites: we show a business the links to its own pages on sites like Yelp, Facebook, Angi and BBB that the business adds in its account, each site on its own. We no longer look these pages up through a Google search. If the business connects Thumbtack, we keep the reviews Thumbtack sends us (rating, text, the reviewer's first name, date and any reply) to show them in its account. We drop any other kind of message Thumbtack sends. When the business disconnects Thumbtack, we delete those reviews. If a business adds its Trustpilot page and turns on Trustpilot in its account, its review page also shows a "Leave a Trustpilot Review" button, the same for every customer whose experience with the business is from the last 12 months (Trustpilot asks for recent experiences only). Pressing it opens Trustpilot's own review page; we send Trustpilot nothing about the customer.
What we process for businesses, and what it means if one emailed you.
When a business uses TripleReviews, it decides whose information is added and why. We process that information on the business's behalf and only to provide the Service to that business.
We do not use one business's customer information to market to anyone, and we do not sell it.
Businesses use TripleReviews to thank their customers and ask for a review on Google. If you got one of those emails, the business added you as their customer. The business decides who to email. We send the email for them and handle the information below only for that business.
What we get from the business: your name and email address, and your phone number if the business adds it.
What we record when we email you:
What happens with it:
How often we email you: at most one review request from each business every 365 days, plus one follow-up: a reminder if you did not press anything, or, if you pressed a review button and the business takes video reviews, one thank-you that asks for a short video. Never more than two emails for one request, nothing more after you sent a private note or a video, pressed the video button or unsubscribed, and only between 8 AM and 8 PM where the business is.
How long we keep it:
Your choices:
The pages you open from our emails (the review page, private note, unsubscribe) do not use advertising cookies. The review page runs no scripts and no analytics at all. The link in the email works like a key to your request, so we remove it from the address bar as soon as the page opens and never send it to our analytics or error-reporting services. Those pages use analytics in a private mode: no recordings, no automatic tracking of what you click, and no text from the page. Your browser keeps the link in its session storage so a reload works; it is cleared when you close the tab.
A business can also ask its customers for a short video, or a few words, about their experience. Nothing is recorded until you press record, and nothing is sent until you press send. Your camera and microphone are used only on that page, only after your browser asks you, and only while it is open.
What we store for the business: the video you send (or the words you write), a small still picture from it, the name you typed and how you chose to show it, the date, and the choices you ticked. Videos are stored privately: they have no public address, and each viewing link we create works for a short time only.
Who sees it: only the business you sent it to, unless you ticked the box that lets them show it publicly (on their website and social media and, on newer videos, their TripleReviews testimonials page). Only then can the business share it, and a shared link shows only the video, the name as you chose to show it, and the business's name. If the business turns them on, its TripleReviews testimonials page (triplereviews.com/t/…) and a testimonials widget on its own website show only what you agreed to publish: your video or words, the name as you chose to show it, and the month. The testimonials page lists only videos and words whose box named that page. The business can turn the page and the widget off, and hide or delete your video, at any time, which takes it off right away.
How long we keep it: until the business deletes it, or within 60 days after the business closes its account. To have it deleted sooner, ask the business, or email info@triplereviews.com from the address the business used and we will delete your videos from every business account on TripleReviews. On the video page, "Don't ask me again" stops that business's emails to you.
Consent, opt-out, and how mobile numbers are handled.
Review texts launch soon. Today we send only two kinds of texts: one-time verification codes (when a business owner asks us to text a code to the phone number on their Google listing, we send that one text through Twilio Verify), and follow-ups about the walkthrough you asked for if you tick the box for texts on our free review check (see "Texts from TripleReviews itself" below). Message and data rates may apply. This section describes how review texts work once texting is turned on for a business. The rules for people who receive our texts are also in our SMS terms.
Texts are sent in the name of a business that uses TripleReviews, to that business's own customers, through our messaging provider, Twilio. The texts are review requests: after a completed job, visit or order, the business asks how it went and invites an honest review. They never contain offers or promotions. Each person gets one review request per job and at most one reminder (up to 2 texts per job), and no more than one review request from the same business every 365 days. We also send one automatic reply when someone texts STOP or HELP.
A business may text only customers who agreed in writing to get texts from that business, before the first text: for example by ticking a text-message box on its booking form, or by signing an estimate, work order or invoice that includes a text-message consent line. Verbal agreement alone is not enough. Agreeing is never required to buy anything.
Before texting is turned on, the business shows us how its customers agree (a link to its form, or a photo of its paper form), and it keeps each customer's consent record. Each time it adds customers for texts, or turns on automatic import from its job software, it must tick a box confirming that every one of them gave it that written agreement. We record which login confirmed it, when, and which version of the wording was confirmed. Agreeing to texts from one business never covers any other business on TripleReviews.
For texting we handle the customer's name and mobile number (provided by the business), the consent record above, each text we send and whether it was delivered, and any reply, including STOP and HELP. We use this only to send the texts the business asked for, to pass replies to that business, and to honor STOP and HELP. We never use these mobile numbers to market our own services or anyone else's.
We do not share mobile numbers or text messaging opt-in data and consent with any third parties or affiliates for marketing or promotional purposes. We pass them only to the service providers that deliver the texts or keep our records for us, such as our messaging provider Twilio, the mobile carriers, our hosting and database providers and the tools our team uses to answer requests from our website, and only for that. The other kinds of sharing in section 08 do not include text messaging opt-in data and consent. We never sell or rent mobile numbers.
We also send a few texts of our own, separate from any business's review texts: the one-time verification codes above; follow-ups about the walkthrough you asked for (program name: TripleReviews follow-ups, up to 4 texts for each request) if you tick the box for texts on our free review check; and, once available, account alerts that business owners and team members turn on for their own number. The box is optional and never ticked for you. We keep the wording you agreed to, when you agreed and the number, and we use those numbers only for those texts. The promise above applies to them too. Details are in section 10 of our SMS terms.
Reply STOP to any text to stop texts from that sender. You can also reply STOPALL, END, CANCEL, UNSUBSCRIBE, QUIT, REVOKE or OPTOUT, or ask in your own words: we treat any clear request to stop as STOP. You get one text confirming it, and nothing more after that. Reply HELP for help, or email info@triplereviews.com. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.
We keep a STOP on file for as long as the service runs, so that business cannot text you again through TripleReviews, even if it adds you again, unless you text START to it yourself.
How customer replies are analyzed, and what models see.
Coming soon. This section applies once the feature is available in your account.
We use AI providers to ask follow-up questions, sort replies and draft messages. They receive only the content needed for that task.
Reply drafts for Google reviews: when you ask for a draft reply to a review from your connected Google Business Profile, we send that one review (its text, star rating and the reviewer's name as Google shows it) and your business name to our AI provider, Anthropic, so it can write a draft for you to check. We send a review only when you ask for a draft, and nothing is posted until you approve it.
Fix This Week: today the themes come from a list of keywords, and nothing is sent to an AI model. We will tell account holders by email before this starts: once a week we may then ask Anthropic's Claude, through Vercel AI Gateway, to sort the notes the keywords missed, from a business's own private notes rated 1 to 3 stars (or unrated with a complaint) and, once it connects Google Business Profile, its 1 to 3 star Google reviews, into themes such as late arrivals or price, for that business only. Names, email addresses and phone numbers are removed first, and a reviewer's name is never sent. We keep only the theme of each note or review, never its words, for no more than 30 days after it was made, and the result is shown only to that business.
The free review check asks AI assistants (OpenAI and Anthropic) one question, such as "Who are the best plumbers in Fort Lauderdale?", made from a type of business in our own words and the city or ZIP you typed. They never receive Google Maps content: no business names, addresses, ratings or reviews from Google. Google's own review summary is shown as Google wrote it, labeled as Google's.
We require our AI providers not to use this data to train their models, and to keep it confidential.
What we access, use, store and share, and how to disconnect.
The free review check, and your dashboard until you connect your Google Business Profile, show Google Maps data live through Google Maps Platform's Places API: a business's name, address, Google rating, number of reviews, up to 5 reviews as Google sorts them and Google's review summary, each shown with Google Maps attribution. We read it when you open the page and do not store it, cache it, email it, put it in our analytics or send it to AI models. Google data that our earlier providers collected before October 6, 2026 is still stored while we delete it.
What we keep: Google's place ID of the business (Google allows this) and, for dashboard accounts, its map coordinates for up to 30 days. What we send Google: the business name and city or ZIP you type, and the place ID of the business you pick. We never send Google your email address or phone number.
Use of Google Maps features and content in TripleReviews is subject to the Google Maps/Google Earth Additional Terms of Service and the Google Privacy Policy.
When a business adds its Trustpilot page, its dashboard can show its TrustScore, number of reviews and up to 5 newest Trustpilot reviews with each reviewer's display name, read through Trustpilot's official API and shown with Trustpilot attribution. This reading isn’t switched on yet: it starts only once Trustpilot grants us access, and until then we read nothing from Trustpilot. Trustpilot and TrustScore are trademarks of Trustpilot A/S. TripleReviews is not affiliated with, endorsed by or sponsored by Trustpilot. To find the page we send Trustpilot only the business's website domain. We keep the last read for up to 24 hours so the dashboard loads quickly, then delete it; it is never emailed, put in our analytics or backups, or sent to AI models.
If you choose Continue with Google when you sign up or log in, Google shares your name, email address and profile photo with us through our sign-in provider, Clerk. We use them only to create your account, log you in and keep your account secure. We never get your Google password, and signing in gives us no access to anything else in your Google Account.
Coming soon. Connecting a Google Business Profile is not available yet, and until it is we read no Business Profile data through Google's APIs. What follows is exactly how it works once it is in your account.
If you own or manage a business, you can choose to connect its Google Business Profile to TripleReviews, so you can read and reply to your Google reviews from your TripleReviews account. Google first shows you a consent screen, and nothing is connected unless you agree. Google asks you to let TripleReviews manage your Business Profile; we use that permission only for what this section lists.
What we read:
What we change: we post, edit or delete a reply to a review only when you write or approve it in TripleReviews; when you have turned on automatic replies, which stay off until you turn them on, cover only new 4 and 5 star reviews and can be turned off at any time; or, if you add Managed by Point Higher, when our team replies for you under the written authorization you give when you add it. Replies to 1 to 3 star reviews always wait for a person. We never change your profile's name, address, hours, photos, posts or any other information.
How we use it: only to show you your reviews and replies in your account, tell you about new reviews (by email and, if you turn them on, by a notification that shows only the star rating), include your rating and review count in your reports, prepare reply drafts when you ask for them, publish the replies you approve, and, only for you:
One business's Google data is used only for that business: we never combine it with other businesses' data, never use it for anyone else, and never use it for advertising.
How we store it: in our database in the United States (Neon), encrypted in transit and at rest. The access key Google gives us for your profile is stored encrypted and used only by our servers. In the app, only the users of your TripleReviews account can see your Google data.
Who at TripleReviews can read it: no one, as a rule. Our team looks at your Google data only if you ask us for help and agree to it, if you use Managed by Point Higher (our team then reads and replies to your reviews for you, because you asked us to), if it is needed for security, such as investigating abuse, or if the law requires it.
Who we share it with: we do not sell Google user data, and we do not use it for advertising, for credit or lending decisions, or to train AI models. We share it only:
How long we keep it: only while your profile is connected, and only as long as needed to show it to you. While you stay connected, we refresh it from Google instead of keeping old copies. Reviews and replies we received from Google are never kept longer than 30 days. When you disconnect, or close your TripleReviews account, we delete the access key right away, stop reading your profile, and delete the reviews, replies and location details we received from Google. Copies in our encrypted daily backups are erased within 14 days.
How to disconnect: at any time in your TripleReviews account, under Settings, next to Google Business Profile. You can also remove TripleReviews' access in your Google Account at myaccount.google.com/permissions. We treat that as a disconnect and delete your Google data the same way, within one day.
TripleReviews' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Service providers and the few cases where we share information.
We do not sell personal information. We share it only with service providers that help us run the Service, such as hosting, messaging, email, payments, data and AI providers, under agreements that limit how they can use it. Mobile numbers and text messaging opt-in data and consent are never shared for marketing (see section 05), and Google user data is shared only as section 07 describes.
We may also share information if the law requires it, to protect people or the Service from harm, or as part of a merger or sale of the business, in which case this policy continues to apply.
We use these companies to run TripleReviews. Each one gets only what it needs for its job, under its own agreement with us.
| Company | What it does for us | What it handles |
|---|---|---|
| Vercel | Hosts the website and the app; Vercel Blob stores the forms sent from our website; Vercel AI Gateway passes our requests to our AI provider | Every page request (IP address, browser, the page address), what you type into our website forms, and what we send to our AI provider |
| Neon | Our database, in the United States | Business accounts, customer lists, email history, private notes, follow-ups |
| Clerk | Sign-in for business users | Name, email, phone, password (stored scrambled), sign-in history, and the cookies that keep you logged in |
| Resend | Sends our emails | Recipient address, the email itself, and whether it was delivered, bounced or marked as spam |
| Twilio | Sends and receives our text messages: today only one-time verification codes (Twilio Verify), and review texts once they launch | Mobile numbers, the text of each message, delivery status, and replies such as STOP and HELP. Used only to deliver messages, never for marketing |
| HubSpot | Our own sales records, once we turn it on | Name, email, phone and message from our website forms and sign-ups. Never your customer lists or their phone numbers |
| Telegram | Tells our team about a new request from our website | Name, email, phone and message from our website forms |
| PostHog | Website and app analytics | Pages visited, browser and device, approximate location from the IP address, and events like "pressed Send". On our marketing pages it can record sessions, with everything typed into forms hidden; the free review check is never recorded, and its events carry only counts, never a business or what you typed. On the business app and the pages people open from our emails, it runs in a private mode: no recordings, no automatic click tracking, no page text |
| Sentry | Error reports | What went wrong, the browser and the page address. On the business app and the pages opened from our emails, links and query strings are removed from page addresses and sending personal information is turned off |
| Cloudflare Turnstile | Spam check on our website forms (instead of a puzzle) | Browser and device signals and the IP address, to tell people from bots |
| Google Maps Platform (Places API) – Google LLC | Shows Google Maps data live in the free review check and in dashboards that haven't connected Google: business search, a business's rating, reviews and review summary, and nearby competitors | The business name and city or ZIP you type, and the place ID of the business you pick. Never your email or phone number, and never information about your customers |
| Google Business Profile API – Google LLC | Only for businesses that connect their Google Business Profile: reads their reviews and posts the replies they approve (see section 07) | That business's own Business Profile reviews, replies and location details |
| Trustpilot A/S | Shows a business its own Trustpilot TrustScore and newest reviews in its dashboard (once switched on, see section 07) | The business's website domain; never customer information |
| Anthropic | AI that answers the question "who would you recommend?" in the free review check. Once we have told account holders by email, it also sorts complaints into themes for Fix This Week (see section 06). Once Google Business Profile can be connected, it also drafts a reply when you ask for one | A question with a type of business and the city you typed. For Fix This Week: a business's own private notes rated 1 to 3 stars and, once it connects Google Business Profile, its 1 to 3 star Google reviews, with names, email addresses and phone numbers removed (never a reviewer's name). Later, the one review you ask a draft for. Never Google Maps content, your customer lists or their contact details |
| Push services (Apple, Google, Mozilla, Microsoft) | Deliver notifications to the phones and computers where a business user turned them on | The device's push address and an encrypted message: a customer's first name and last initial, a star rating and a short line. Never an email address, a phone number or what a customer wrote |
| OpenAI | Answers the question "who would you recommend?" in the free review check, to show whether AI names a business | A question with a type of business and the city you typed. Never Google Maps content or information about your customers |
| Google Fonts | Serves the fonts on our pages | The IP address and browser of each visitor, when a page loads the fonts |
When a business connects its own job or accounting software (HubSpot, Follow Up Boss, Square, Pipedrive, Housecall Pro, Jobber or Intuit QuickBooks), we only read from it, even where the access that software grants would allow changes: its customers' names, email addresses and phone numbers, and which jobs are finished (for QuickBooks, which invoices are paid), so we can ask for a review after each job. We never change anything there, and the business can end our access at any time. A business can also send us its finished jobs itself, from its own software. If a business adds its own webhook addresses, we send event data there (for example "a review request was sent", "a customer sent a private note" or "a customer unsubscribed"), with that customer's name, email address and phone number, and for a private note its text and rating, signed so the business can check it came from us. Event data goes only to the addresses the business itself adds, never anywhere else. We keep a copy of each event we send for 30 days, so the business can see what went out and we can try again when its address fails; we delete it sooner when the customer is deleted or asks us to erase their information, and stop sending when the account closes.
How long we keep what, and when it is deleted.
We keep information for as long as an account is active and as needed to provide the Service. After an account is closed, we delete or anonymize it within 60 days (nightly backups keep it up to 14 days longer), unless we must keep some of it by law, for example billing records.
Google Business Profile data: only while your profile is connected, as section 07 describes. Fix This Week themes: 30 days. Copies of events sent to a business's webhook addresses: 30 days. Job ids a business's own software sent us: 90 days, so a repeat does nothing. Text messages: a STOP is kept for as long as the service runs, so that business never texts the person again; other texting records follow the same periods as emails in section 04.
Free review check: we don't keep the results. They are shown in your browser only, and gone when you leave the page. We keep Google's place ID of the business you checked and counters by network address (to hold the free checks to 2 a month) for 40 days. If you leave your email or ask for a walkthrough, that request keeps only your contact details, the place ID and what you typed.
How information is protected.
We use industry-standard measures to protect information, including encryption in transit, access controls and limited staff access. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.
Access, correction, deletion and opt-out.
You can ask to see, correct or delete personal information we hold about you by writing to info@triplereviews.com. If your information was added by a business that uses TripleReviews, we may pass your request to that business.
You can stop text messages at any time by replying STOP, and unsubscribe from our emails with the link in each email.
You can disconnect your Google Business Profile at any time in Settings in your account, or at myaccount.google.com/permissions (see section 07).
The service is not meant for children.
The Service is for businesses and is not directed at children under 13. We do not knowingly collect personal information from children.
How we tell you when this page changes.
We may update this policy. If a change is significant, we will say so on this page and, for account holders, by email before it takes effect.
What changed on October 8, 2026: we added our full company details (section 01), what happens when you ask for the reviews playbook (section 03), that reading Trustpilot data isn’t switched on yet (section 07), that TripleReviews isn’t a review site (section 01), and that we delete a closed account’s data within 60 days (section 10).
What changed on October 7, 2026: businesses can add their Trustpilot page. Their dashboard can show its TrustScore and newest reviews once Trustpilot gives us access, which it hasn’t yet (section 07), and, only if the business turns it on, their review page shows a Trustpilot button next to the Google one, the same for every customer with an experience from the last 12 months (section 04). Section 08 adds Trustpilot.
Also new on October 6, 2026: businesses can connect more of their own tools, and a few new features use the information this policy describes, each only when the business turns it on: Housecall Pro and, once they are available (not yet), Jobber and Intuit QuickBooks, which we only read from; finished jobs sent from Zapier, Make or the business's own software; webhooks that send events, including a customer's name, email address, phone number and private note, to addresses the business adds (section 08); a testimonials page on TripleReviews and a widget for the business's own website, which show only videos and words customers agreed to publish, chosen by the business (section 04); notifications on the business's phones and computers through their browser's push service (section 08 and section 09); Team Shout-Outs, with the names of the business's team (sections 02 and 03); and, for connected Google Business Profiles, flags on reviews that may break Google's rules (section 07). Fix This Week works from keywords only for now: before it asks our AI provider to sort private notes and low Google reviews into themes, we will tell account holders by email (section 06).
What changed on October 6, 2026: the review link in our emails now opens a page from the business, with the Google button (the same for everyone), a button to record a short video and a way to tell the business privately. Section 04 says what we count on that page and that, after you press the Google button, the one follow-up may be a thank-you that asks for a short video instead of a reminder. The free review check and the dashboard now read Google data only through Google's official APIs (Google Maps Platform and, once connected, the Google Business Profile API). We stopped using DataForSEO and SerpApi, no longer keep Google ratings or reviews from the free check, and no longer send Google reviews to AI models. Google data they collected before this change is still stored while we delete it. Your dashboard shows your Google rating and reviews live from Google Maps until you connect your Google Business Profile. Section 07 describes Google Maps data and section 08 lists Google Maps Platform.
What changed on October 5, 2026: texts sent through TripleReviews need each customer's written agreement, given before the first text, and verbal agreement alone is no longer enough. No review texts have been sent yet, so no one was texted under the old wording. Section 05 now also covers the verification codes we text today and our own texts, with the full list of words that stop texts, and section 08 adds HubSpot, Telegram and DataForSEO and says what Vercel AI Gateway does.
Where to send privacy questions.
Privacy questions or requests: info@triplereviews.com. We reply within 1 business day.