Last updated: September 19, 2026
Review Kit Studio is operated by Duvsoft. Contact us at support@duvsoft.com with questions about your information or privacy choices.
We use AWS for hosting, account sign-in, and storage. We retain account identifiers, purchase references, access status, and AI credit balances to provide your kit and restore access. Stripe processes payments on its checkout page; Review Kit Studio does not store card numbers.
When you request an AI reply, we send the business name, review text, and selected tone to OpenAI. We do not save input review text in our database. Generated replies are cached for about 24 hours to support retries; deletion can take longer because database expiration is asynchronous. We request that API responses not be stored by OpenAI, but provider processing and retention policies still apply. Avoid including private customer information, and review drafts before publishing them.
Uploaded logos are sent to our backend when you request a PDF, processed in memory, and not intentionally retained. Your business form draft and sign-in information are stored in your browser session. These are separate from optional analytics.
We use Google Analytics 4 only after you select “Accept analytics.” If you decline or have not chosen, our site does not load the Google Analytics tag or send analytics events. You can use the kit and reply tools without accepting analytics. If your browser sends Global Privacy Control, we keep analytics off.
With permission, Google receives page visits, device/browser information, and events describing clicks, scroll depth, checkout starts, sign-in success, downloads, and reply-tool use. Google processes network information, including your IP address, as part of receiving requests. Analytics uses cookies such as _ga to distinguish browsers. Our tag sets analytics cookies to expire after 180 days without extending that expiration on each visit.
Our custom events use fixed action labels. We do not intentionally send your name, email address, business name, Google review link, review or reply text, logo, account identifiers, payment identifiers, or sign-in tokens to Google Analytics. We remove query strings and fragments from the page addresses we send and suppress referral addresses. Advertising storage, advertising user data, personalization, and Google signals are disabled in our site configuration.
We remember your analytics choice on this browser for up to 180 days in local storage. Use to change it. Withdrawing consent stops future tracking and removes the analytics cookies this site sets; it does not automatically delete information already received by Google. Clearing browser storage or changing devices may require a new choice.
Google’s processing is described in Google’s privacy policy and its explanation of data use on partner sites.
We keep operational logs for 14 days and use database backups. Account, purchase, and accounting records may remain as needed to operate the service and meet applicable obligations. Analytics retention is also governed by settings in our Google Analytics property. AWS, Stripe, OpenAI, and Google may process information in countries outside your location under their respective terms and privacy policies.
You may contact support@duvsoft.com to request access, correction, or deletion of your information. We may need to verify your identity. Applicable rights and exceptions depend on your location, and some purchase or accounting records may need to be retained. Declining analytics does not affect essential security logs or records needed to fulfill a purchase.