Doxa Reviews ("we," "our," or "us") provides a software-as-a-service (SaaS) platform that assists businesses ("Clients") in managing customer feedback and review generation. Our platform automates the process of sending review requests to our Clients' customers via text message (SMS) and email following customer interactions.
This Privacy Policy explains how we collect, use, disclose, and protect personal information when Clients use our application or when consumers receive automated communications powered by Doxa Reviews.
2. Information We Collect
A. Information Provided by SaaS Clients
When you register for or use Doxa Reviews, we collect:
Account Information: Name, business name, email address, phone number, billing address, and payment details.
Integrations & Credentials: Access tokens or integration data provided to connect Doxa Reviews with your Point of Sale (POS), CRM, or booking platforms.
B. End-Customer Data Uploaded by Clients
To deliver our automated review generation services, Clients import or sync end-customer details into our system. This includes:
Customer name
Phone number
Email address
Date, time, or location of interaction
C. Automatically Collected Information
When users access our web application, we collect technical data, including IP address, browser type, device information, operating system, and platform usage metrics through cookies and similar tracking technologies.
3. How We Use Your Information
We use collected information to:
Deliver Core Services: Trigger and dispatch automated SMS and email review requests on behalf of Clients following customer interactions.
Platform Operations: Maintain, troubleshoot, and optimize SaaS performance and account administration.
Analytics & Billing: Process subscription payments, analyze usage trends, and improve platform features.
Compliance & Security: Maintain delivery audit trails, process opt-outs (e.g., STOP keywords), and prevent fraudulent activity.
4. SMS & Mobile Data Privacy Disclosure (A2P 10DLC Compliance)
Doxa Reviews strictly respects mobile privacy. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
Strict Non-Sharing Policy: Mobile phone numbers, SMS opt-in data, and text messaging consent information will not be sold, rented, leased, or shared with any external third parties for marketing purposes.
Subcontractor Exception: Information may be shared with operational service providers (such as underlying telecommunications gateways or customer support infrastructure) solely to execute messaging services requested by the Client.
Opt-Out Instructions: Recipients can opt out of receiving automated text messages at any time by replying STOP to any text message. For assistance, recipients can reply HELP or contact us directly.
Message & Data Rates: Standard message and data rates may apply depending on the end user's mobile carrier plan. Message frequency varies based on customer interaction frequency.
5. How We Share Information
We do not sell personal data. We share information only under the following circumstances:
Service Providers: Third-party vendors providing web hosting, database storage, email delivery, payment processing, and SMS gateway infrastructure under strict confidentiality obligations.
Legal Requirements: When required by law, subpoena, or government authority, or to protect the safety, rights, and property of Doxa Reviews, our users, or the public.
Business Transfers: In connection with a merger, acquisition, restructuring, or sale of company assets, where customer data is transferred as a business asset.
6. Data Ownership and Client Responsibilities
Data Ownership: SaaS Clients retain ownership of all end-customer data uploaded or synced to the Doxa Reviews platform.
Authorization & Consent: Clients are responsible for ensuring they have obtained all legally required permissions, consent, and opt-ins from their end customers prior to triggering automated text messages or emails through Doxa Reviews, in compliance with applicable laws (e.g., TCPA, CAN-SPAM, CTIA guidelines).
7. Data Retention & Security
We maintain technical and organizational measures designed to secure personal information against unauthorized access, loss, or alteration. We retain personal data for as long as an account remains active or as needed to comply with legal obligations, resolve disputes, and enforce agreements.
8. End-User Rights & Choices
Depending on your jurisdiction, you may have rights regarding your personal information:
Email Unsubscribe: Every automated review request email contains an explicit "Unsubscribe" link in the footer.
SMS Opt-Out: End-users can reply STOP to cancel text requests at any time.
Access & Deletion: End-customers seeking to access, correct, or delete their information should direct requests to the business (our Client) with whom they interacted. We assist our Clients in responding to these requests as needed.
9. Contact Us
If you have questions or concerns regarding this Privacy Policy or our data practices, contact us at:
