Platform Compliance & Data Use

Data sources

restaurantreview.ai aggregates review and reservation data from third-party platforms on behalf of authenticated restaurant owners. Each integration uses the official partner API, with per-restaurant OAuth or API-key authentication.

• Google Business Profile: full read/write via Google OAuth
• Tripadvisor Content API: read access under partner agreement
• TheFork: review & reservation webhooks (in onboarding)
• Facebook Pages: review read access
• GoTable: reservation sync

Tripadvisor display & attribution

All Tripadvisor-sourced content is rendered using official Ollie logo assets, official rating bubble graphics, and a "Powered by Tripadvisor" attribution. Every review card links back to the original Tripadvisor listing. Aggregate ratings include the Ollie logo to the left of the bubble graphic. Individual reviews use bubbles alone with traveler attribution and review date, per the 2025 Tripadvisor Brand Guidelines for Partners.

Review content is never modified, edited, or paraphrased. Quoted reviews always appear within quotation marks alongside the bubble rating from that reviewer and the date of the review.

Caching & retention

Tripadvisor review data is cached only as long as needed for display and is purged automatically on a 24-hour rolling window by a scheduled job (purge_expired_tripadvisor_reviews). Webhook deliveries are retained for 30 days for audit and replay, then purged.

AI-assisted responses (Human-in-the-Loop)

Suggested replies are drafted by Google Gemini based on each restaurant's tone of voice. No response is ever posted automatically, the restaurant owner must review, edit, and approve every reply before it is submitted to the source platform.

Security

• OAuth tokens are encrypted at rest (pgsodium TCE on the user_tokens table).
• Per-tenant data isolation enforced via Postgres Row Level Security.
• All webhooks verify HMAC-SHA256 signatures and dedupe on delivery ID.
• Hosted on Vercel (frontend) + Supabase Cloud (backend), behind Cloudflare.

Data deletion

Restaurant owners may disconnect any integration at any time from the Settings page; doing so revokes stored tokens and removes cached platform data within 24 hours. Account-level deletion requests are honored within 30 days. Contact privacy@restaurantreview.ai.