Last updated: 30 July 2026

Privacy Policy

ReviewToWeb ("we", "us"), operated by Lukáš Gurecký, a sole trader (OSVČ) registered in the Czech Republic under company registration number (IČO) 08173257, with a registered office at Štěpánská 318/3a, Trnitá, 602 00 Brno, Czech Republic, is committed to protecting your personal data. This Policy explains what personal data we collect, how we use it, and with whom we share it. For the purposes of applicable data-protection law, including the GDPR, ReviewToWeb is the controller of the personal data described here.

1. Scope

This Policy takes effect on publication and replaces any prior privacy statements. It applies to all users of the Service, including those who access it from outside the European Union.

2. Definitions

Personal data: information relating to an identified or identifiable person. Processing: any operation performed on personal data, including collection, storage, use, disclosure, or deletion. User: any person or entity using the Service. Service: the ReviewToWeb website and related tools for generating, editing, exporting, and hosting websites.

3. Information we collect

We collect only what is necessary to operate the Service. Depending on how you use it, this may include:

  • identification data such as your name, if you provide it;
  • contact information such as your email address, used for passwordless sign-in;
  • account and authentication data;
  • billing and subscription information, such as your selected plan and subscription status (your payment card details are collected and processed directly by Stripe, our payment processor, and are not stored by us);
  • technical data such as IP address, cookies, and basic device or browser information;
  • business information you provide, such as business name, address, contact details, branding, and website preferences;
  • the Google Maps or similar business-listing links you submit for processing;
  • content you edit or upload, such as website copy, photos, descriptions, and section text;
  • support requests, feedback, and other communications you send us.

4. How we use your data

We process personal data to:

  • create and maintain your account and authenticate your access;
  • process the business-listing link you provide and analyse public reviews and listing information to generate your website;
  • deliver, host, edit, and export your website, and enforce plan limits;
  • process subscription payments, manage your plan, and communicate with you about billing, via our payment processor (Stripe);
  • provide support and send essential service emails, such as sign-in codes;
  • operate, secure, improve, and troubleshoot the Service;
  • detect abuse and fraud, defend legal claims, and comply with legal obligations.

6. Sharing and international transfers

We never sell your personal data. We share it only with service providers who process it on our behalf to deliver the Service, including hosting and database infrastructure (Supabase), edge hosting and storage (Cloudflare), payment processing (Stripe), review and business-data retrieval (Google and a data provider), and automated content generation (an AI provider).

Some providers are based in the United States or other countries outside your jurisdiction. Where personal data is transferred internationally, we take steps to ensure appropriate safeguards are in place where required by law.

7. Retention

We keep personal data for as long as necessary for the purposes described here, including account maintenance, service delivery, legal compliance, and dispute resolution. When you delete a website, its associated data and hosted files are removed, except for limited records we must retain for legal reasons. Billing and invoice records are kept for as long as required by applicable tax and accounting law (in the Czech Republic, currently up to 10 years).

8. Security

We use commercially reasonable technical and organisational measures to protect personal data, including encrypted transport and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Where provided by applicable law, including the GDPR, you may access, rectify, erase, restrict, or object to the processing of your personal data, and withdraw consent where processing is based on it. To exercise these rights, contact us at support@reviewtoweb.com; we may need to verify your identity first. You may also lodge a complaint with your data-protection authority.

10. Deleting your data

You may request deletion of your personal data or websites at support@reviewtoweb.com. Deleting a website removes its associated data and hosted files. We will action verified requests in accordance with applicable law.

11. Cookies

We use only cookies and similar storage that are necessary to keep you signed in and to operate and secure the Service. We do not use advertising cookies. If we introduce non-essential cookies and the law requires it, we will ask for your consent first. Most browsers let you refuse or delete cookies, though some features may then not work.

12. Changes and contact

We may update this Policy from time to time and will indicate changes by updating the "Last updated" date above. For privacy questions or requests, contact us at support@reviewtoweb.com.