Privacy Policy

ReTestimonial is a product operated by Taprobane Labs, LLC, a Delaware limited liability company. Its mailing address is 1207 Delaware Ave #3938, Wilmington, DE 19806, United States. In this policy, ReTestimonial, we, us, and our refer to that operator.

For account, website, billing, and direct support information, ReTestimonial generally acts as the controller that decides why and how the information is processed. For testimonial content and other personal information a workspace customer submits or collects through the service, that customer generally acts as the controller or business and ReTestimonial acts as its processor or service provider. Requests about customer-controlled content should normally be directed first to the customer that collected it.

The information we collect includes:

• Account details such as your name, email address, company information, authentication provider identifiers, workspace settings, and billing metadata needed to operate your account.
• Customer proof content that you or your customers submit, import, record, upload, or connect, including testimonials, reviews, ratings, media files, transcripts, avatars, custom fields, tags, form responses, and related approvals.
• Usage, device, log, and analytics information such as IP-derived request data, browser and device details, pages viewed, embed events, widget impressions, video playback events, timestamps, referral URLs, and diagnostic logs.
• When a workspace enables Proof Impact, measurement records may include widget/proof exposures, conversion event names and timestamps, project-scoped client/session identifiers, page path and limited referral or campaign context, event currency/value, bounded customer-supplied metadata, attribution results, and experiment or optimization evidence. Optional consented identity uses salted project-scoped representations of opaque first-party aliases; direct email/phone aliases and probabilistic fingerprinting are not supported.
• Integration information from services you connect, such as authentication, review platforms, video hosting, storage, email delivery, rewards, analytics, and webhooks. Payment card details are handled by Stripe-hosted payment pages and are not stored directly by ReTestimonial.

We use information to provide, secure, maintain, and improve ReTestimonial, including collection forms, imports, widgets, Walls of Love, share pages, video processing, smart invites, notifications, support, abuse prevention, billing, and product analytics.

We may process testimonial content to generate transcripts, previews, summaries, recommendations, translations, spam signals, proof intelligence, and other features you choose to use.

We use contact information to communicate about your account, send operational notices, respond to support requests, enforce our agreements, and use limited billing information to process subscriptions, credits, invoices, payment recovery, and refunds.

Optional product education, product updates, and promotions are separate from operational email. Product education and product updates are switched on when the primary account owner creates an account, which the sign-up page states, and can be switched off at any time; promotions are sent only after the owner makes an affirmative choice. For those communications, we use the account email and limited account, plan, preference, and product-milestone information needed to select and personalize the message. You may decline without affecting the service and may change each choice in Settings or unsubscribe from any marketing email at any time.

For processing governed by Sri Lanka's Personal Data Protection Act or the EEA or UK GDPR, we rely on performance of a contract to create and operate accounts and deliver requested features; our legitimate interests in securing, supporting, improving, and enforcing the service, preventing fraud and abuse, and understanding limited product usage; measuring how visitors use our public widget builder, without cookies or browser storage; understanding how accounts use the service, through analytics of account events (for example signing up, publishing, and changes of plan) sent from our servers with your account identifier and email address, to which you can object by contacting us; our legitimate interests in sending account owners product education and product updates about the service they signed up for, which they can switch off at any time; consent for promotions, non-essential technologies, or other processing where consent is requested; compliance with tax, accounting, regulatory, and other legal obligations; and, where applicable, the establishment, exercise, or defense of legal claims or protection of vital interests. We balance our legitimate interests against the rights and reasonable expectations of affected individuals.

When you use Ask AI in our help center, we send your question, the earlier messages of that conversation, and excerpts of our help articles to Anthropic's models through Vercel's AI Gateway to write the answer. We keep the conversation to run it, to improve our help articles, and to prevent abuse, as described under retention below.

Some features, such as spam detection, translation, transcription, and proof analysis, rely on automated processing of content that you or your customers submit. We do not use these features to make decisions that produce legal or similarly significant effects about an individual without human involvement. Where regional law gives you rights in relation to solely automated decision-making, we honor them as described below.

We and our providers use cookies and similar technologies, such as local storage, pixels, and device identifiers, to keep you signed in, remember preferences, secure the service, measure widget and page performance, and understand product usage. Strictly necessary technologies are required to operate the service; others are optional.

If you reach our website from a partner or campaign link, an attribution cookie (rt_ft, 30 days, issued and signed by our server; a later partner link replaces it) records only URL-derived attribution — the referral code, campaign identifiers, a partner click identifier, landing path, and referring site, and, when you arrive from one of our Google Ads, the ad click identifier with that ad's campaign identifiers — so a later sign-up can be credited to that partner or campaign, whether or not you use the public widget builder; it holds no name, email address, or account identifier. We never keep the ad click identifier for visitors in the United Kingdom, the European Economic Area or Switzerland, or when we cannot tell where a visitor is. If you choose Reject optional analytics, or your browser sends a Global Privacy Control signal, we stop using it: a small cookie (rt_ad_off) records that refusal so our server can honour it, and the identifier is removed from the attribution cookie. A widget design saved before you sign up is kept as a temporary draft for 14 days; review text you type into it counts as personal data and is deleted with the draft or moved into your account when you claim it.

If you search for a business in the public widget builder, the text you type is sent to Google to find it. The business you pick is looked up with Google and, when we hold no recent copy of its reviews, with our review-import provider, so the preview can show that business's public Google reviews. Reviews returned by Google are displayed and not stored. Reviews fetched by the import provider are kept for up to one day so another visitor looking up the same business does not trigger a second fetch (the example business shown by default is kept longer and refreshed weekly). A saved draft keeps only the reference to the business — never the reviews — and the reviews are imported into your account only when you sign up and claim the design.

If you ask a question with Ask AI in our help center, we set a strictly necessary cookie (rt_help_sid, until you close your browser) holding a random session identifier signed by our server, so only you can continue that conversation; it is set only when you send your first question. Ask AI is protected by Vercel BotID, which runs an invisible check in your browser when you send a question.

If you arrived through a partner link and chose Accept optional analytics, the script of our affiliate platform, Partnero, may set its own first-party cookies (partnero_partner, partnero_referral, and partnero_click_id, for up to 30 days) so the partner's click can be counted; withdrawing consent removes the script and those cookies.

On ReTestimonial's own website and application, optional PostHog product analytics, browser performance tracing, and privacy-masked Sentry session replay remain off unless you select Accept optional analytics. Essential authentication, security controls, and error diagnostics continue without that permission. One exception uses no cookies or browser storage at all: our public widget builder counts visits and the steps taken in it with PostHog's cookieless mode, which stores nothing on your device and does not identify you. It counts visits with a hash PostHog computes on its servers from a salt that changes every day, your IP address, and your browser, and keeps none of them. If you chose Reject optional analytics on our website, the builder on our website does not measure you either. The builder at builder.retestimonial.com and the builder that partners place on their own websites cannot read a choice made on our website, and show no choice of their own, so they count every visit this way. We store your choice, its policy version, and its timestamp in your browser's local storage; use Privacy choices in the site footer, or in your account menu once signed in, to withdraw or change it at any time.

Our public embeds, widgets, share pages, and Walls of Love may set limited storage or send analytics events to measure impressions, playback, and interactions. Where you enable optional analytics integrations, such as Google Analytics or Google Tag Manager, those tools are configured by you and are governed by the applicable provider's terms and your own privacy notices.

Proof Impact provides workspace controls for implicit or explicit consent, honored or ignored Global Privacy Control and Do Not Track signals, origin allowlists, same-session measurement, and optional consented first-party identity. The workspace customer chooses and configures these controls and is responsible for selecting settings, notices, and consent behavior appropriate to its use. When configured privacy state blocks measurement, the Proof Impact runtime does not transmit page context or identity state and does not persist the blocked conversion.

See the Proof Impact Privacy & Data Guide for the current technical data, control, retention, export, and deletion contract.

You can control cookies through your browser settings, and blocking some technologies may affect how the service works. Our owned website and application ask before starting the optional analytics named above. Customer-hosted embeds remain governed by the workspace customer's selected Proof Impact settings, optional analytics integrations, notices, and consent obligations.

We share information with vendors and subprocessors that help us operate the service, such as hosting, database, authentication, video hosting, object storage, email delivery, rewards, observability, product analytics, AI/OCR providers, customer support tools, Partnero for affiliate referral tracking and partner payouts, and Stripe for subscription, invoice, credit, and payment processing.

The providers named in our current public register are:

• Clerk — Authentication, account security, and workspace identity management.
• Vercel — Application hosting, server execution, and delivery; AI model routing (AI Gateway) for Ask AI in the help center and for AI reading of captured text and screenshots; and bot detection (BotID) for Ask AI.
• Supabase — Managed PostgreSQL database infrastructure.
• Cloudflare — Object storage, edge delivery, caching, security, worker execution, and rendering widget previews for the dashboard.
• Upstash — Distributed rate limiting and short-lived abuse-prevention counters.
• Mux — Video upload, hosting, streaming, playback analytics, and transcripts.
• Amazon Web Services — Serverless rendering of social-video exports.
• Resend — Transactional and customer-configured email delivery.
• Stripe — Subscription, credit, invoice, payment, refund, and billing-management processing.
• Tremendous — Gift-card reward fulfillment.
• Partnero — Affiliate program management, referral tracking, and partner commission payouts.
• Sentry — Application error reporting and operational diagnosis.
• PostHog — Product and website analytics: our website, help center and application after you choose Accept optional analytics, the public widget builder, measured without cookies or browser storage, and the main events of each account, sent from our servers.
• Anthropic — Customer-requested AI analysis, writing, extraction, and OCR features, and answers to help-center questions (Ask AI).
• OpenAI — Fallback or customer-requested AI and OCR processing.
• Review and social import providers — Customer-requested review and social-content imports, and the business preview in the public widget builder.
• Google — Customer-requested Google account connection, business discovery, and review imports; business search in the public widget builder.

Purpose, data-category, and feature-scope details are maintained in our Subprocessor Register.

We maintain the current list of subprocessors and will make it available on request, and we require these providers to protect information consistent with this policy and to use it only to provide services to us.

We may disclose information if required by law, to protect rights and safety, to investigate abuse, or as part of a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined by California law. We do not use your customer testimonial content for third-party advertising.

You control which testimonials, reviews, widgets, Walls of Love, forms, and share pages are published. Published content may be visible to anyone with access to the page, embed, or link.

You are responsible for having the rights, permissions, notices, and consents needed to collect, upload, import, display, and process customer content in ReTestimonial.

If you remove, archive, or unpublish content, it may take a reasonable period for caches, embeds, backups, and external search indexes to update.

We retain customer content while the relevant account is active. After account termination, the account owner may request an export for 30 days. Unless a shorter period is requested or a longer period is legally required, we delete customer content from active production systems within 60 days after termination and from routine backups within 90 days after termination.

We generally retain security and diagnostic logs for up to 12 months and billing, tax, and transaction records for up to seven years. For optional marketing, completed or canceled queue payloads are redacted after 30 days, failed or ambiguous payloads and diagnostics after 90 days, parsed provider-webhook payloads after 30 days, and minimal provider event metadata after 12 months. A provider contact's email snapshot is redacted within 30 days after confirmed deletion or replacement.

While your account exists, we retain the minimum account-linked consent and withdrawal history needed to apply your current choices and demonstrate them. An unsubscribe takes effect immediately, but its record remains linked to the account while the account exists. After account deletion, we remove that link and keep only the minimum keyed email hash, category, action, notice version, source, and timestamp needed to honor the suppression and demonstrate the choice for as long as ReTestimonial operates the marketing program. We review that continuing need at least annually and do not retain raw IP addresses or user-agent strings as marketing-consent evidence by default.

Help center records follow their own schedule: Ask AI conversations (your questions and the answers) are deleted after 90 days; when you contact support from the help center or ask to talk to a person, we keep your message or question (up to 2,000 characters), your email address when you give it, and a short summary, never the conversation itself, for 365 days; article feedback (the vote and any comment) is kept for 365 days; and searches that found nothing are stored without any visitor identifier for 180 days. Your message, and the Ask AI conversation you send with it, are emailed to our support team and stay in our support mailbox like any other support email.

You may delete projects, testimonials, media, forms, widgets, and other workspace data through the product where available. Video, cache, search-index, and other asynchronous deletion jobs may take additional time within the periods above. De-identified or aggregated information that can no longer reasonably identify a person may be retained longer.

We may preserve specific information beyond these periods when required by law, court order, fraud prevention, security investigation, payment dispute, or legal hold. When the exception ends, the information will return to the applicable deletion schedule.

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, API key gates for internal services, signed webhook patterns, spam protections, and provider-level infrastructure controls.

No online service can guarantee absolute security. Please use strong credentials, protect your authentication provider, and contact us promptly if you believe your account or data has been compromised.

Sri Lanka. Subject to the Personal Data Protection Act and its commencement rules, you may request access, withdraw consent, object to certain processing, correct or complete inaccurate information, request erasure in the circumstances provided by law, and request review of certain decisions based solely on automated processing. If we refuse an eligible request, you may appeal to the Data Protection Authority of Sri Lanka.

EEA and United Kingdom. You may request access, rectification, erasure, restriction, and portability; object to processing based on legitimate interests; withdraw consent at any time; and complain to the supervisory authority where you live or work. You have an unconditional right to object to direct marketing. Withdrawing consent does not affect processing already carried out lawfully.

United States. Residents of California and other states with applicable privacy laws may have rights to know or access, correct, delete, and obtain a portable copy of personal information; opt out of sale, sharing, targeted advertising, or qualifying profiling; limit certain uses of sensitive personal information; receive equal service; and appeal a denied request where state law provides that right. ReTestimonial does not currently sell personal information or use it for targeted advertising.

Do Not Track and opt-out preference signals. Because we do not sell personal information or share it for cross-context behavioral advertising, we do not offer a “Do Not Sell or Share My Personal Information” page. Some browsers and extensions send Do Not Track or Global Privacy Control signals; where applicable law requires us to treat a recognized opt-out preference signal as a valid request, we honor it for the browser or device that sends it. The categories of personal information we collect, the sources, the purposes for using it, and the categories of recipients are described in the sections above and serve as our notice at collection under United States state privacy laws.

Canada, Australia, and New Zealand. Depending on the applicable law, you may request access or correction, withdraw consent where processing depends on consent, and complain to ReTestimonial or the relevant privacy regulator. Other regions may provide comparable rights, which we will honor where they apply.

To exercise a right, email privacy@retestimonial.com with your name, account email, relationship to ReTestimonial or a workspace customer, jurisdiction, and the right you wish to exercise. We may verify your identity and authority, and an authorized agent may need to provide written authorization. We aim to respond within one month for eligible Sri Lankan, EEA, and UK requests and within 45 days for eligible US state requests, subject to extensions allowed by law. If the information is controlled by one of our customers, we will direct the request to that customer or assist it as required.

You may unsubscribe from non-essential emails using the link in the message. You may also withdraw consent for optional processing by using the relevant product control or contacting us, without affecting processing already completed lawfully.

Taprobane Labs, LLC is formed in Delaware, United States, and the ReTestimonial team operates from Sri Lanka. We use service providers that may process information in the United States and other countries where they operate. Recipients may include the hosting, database, authentication, video, storage, email, rewards, observability, AI/OCR, analytics, support, and payment providers described above. Privacy laws in those locations may differ from the laws where you live.

ReTestimonial has not self-certified under the EU-U.S. Data Privacy Framework and does not currently offer its own EU Standard Contractual Clauses, UK International Data Transfer Agreement, or UK Addendum. Before making a restricted transfer that requires a specific legal mechanism, we will rely on an applicable adequacy decision, enter into the required approved contractual safeguards with the recipient, or use another transfer basis permitted for that transfer. If no lawful mechanism is available, we will not make the restricted transfer. Acceptance of this policy alone is not consent to an otherwise unlawful transfer.

Contact privacy@retestimonial.com before submitting EEA or UK personal information if you need confirmation of the transfer mechanism that will apply, or to request a copy of an applicable safeguard. Transfers from Sri Lanka will be handled under the Personal Data Protection Act, including any instruments specified by the Data Protection Authority or a statutory exception that applies to the particular transfer.

ReTestimonial is a business service and is not directed to children. We do not knowingly collect personal information from children under 16, and account holders must be adults as described in our Terms of Service.

If you are a customer collecting testimonials, you are responsible for having the appropriate consents where a person submitting content may be a minor. If you believe a child has provided us with personal information, contact privacy@retestimonial.com and we will take reasonable steps to delete it.

When you use ReTestimonial to collect testimonials and other personal information from your own customers, you generally act as the controller or business and we act as your processor or service provider for that content. If you require a Data Processing Agreement to govern that relationship, contact privacy@retestimonial.com and we will make one available.

If you are in the European Economic Area or the United Kingdom and interact with us as a controller in your own right, you can reach us about data-protection matters at privacy@retestimonial.com. Where we are required to designate a representative under Article 27 of the EU or UK GDPR, we will appoint one and identify it here or provide its details on request.

This section applies if you install the ReTestimonial browser extension for Google Chrome or Microsoft Edge. The extension has a single purpose: saving a review, a post, or other text from a web page into one of your ReTestimonial projects as a testimonial that waits for your approval. The rest of this policy applies to it as well.

What the extension reads in your browser. While its side panel is open and it is connected to your account, the extension reads the page in the tab you are looking at so that it can list the reviews and posts on that page. It does this only on pages the browser allows it to read: the sites it supports and is granted when you install it (X, LinkedIn, G2, Trustpilot, Capterra, and Yelp), a site you chose to always allow, and a tab on which you used its toolbar button, a keyboard shortcut, or one of its right-click menu items. What it reads stays in your browser unless you save it or ask for an AI reading of it, as described below. With the side panel closed, or while the extension is signed out, it reads no page. It does not keep a history of the pages you visit and does not record your keystrokes.

What it keeps on your device. The extension stores the following in the browser's own storage for extensions, which the pages you visit cannot read: the tokens that keep it connected to your account; the captures waiting in its queue, each with the text of the part of the page it came from and any screenshot you took; a copy of your name, email address, project list, tags, and custom fields; and your settings. Signing out in the extension deletes the queue and the copy of your account details from the device, and removing the extension from the browser deletes everything it stored.

What it sends to us, and when:

• When you connect it. You confirm the connection in a ReTestimonial window while signed in to your account; the extension never receives your password. We keep a record of each connected browser: a label such as “Chrome on Windows”, the extension's version, when it was connected and last used, a hashed copy of its session token, and a reference to the web sign-in that connected it.
• When you save a capture. We receive the fields shown in its form: the quote, title, rating, and date; the author's name and, where the page shows them or you enter them, their role, company, handle, email address, profile link, and photo; and your tags and custom field values. We also receive the address of the post or page it came from, the post's identifier on that site where it has one, the like, comment, and share counts where the page shows them, the pictures in the post, and a screenshot only if you captured an area or switched on “Attach a screenshot of the original”. Our servers copy the photo and the pictures from the site that hosts them. A capture is sent only when you save it.
• When you click “Read with AI”. We receive the text of the part of the page the capture came from, with the links and dates inside it, or the screenshot you took, together with the address of the post or page and the names of your project's tags. That part of the page is the element you picked, or the block around the words you picked or selected, such as the review's card: it can hold more than those words, for example the author's name, the rating, and the date. We send these through Vercel's AI Gateway to an AI model provider, Anthropic or OpenAI, which reads the fields out of them. The request carries an internal identifier of your workspace so that usage can be totalled. The result comes back to your browser for you to check. We keep a count of readings per workspace per day; we do not store the text or the picture that was read.
• Diagnostics. When a page of a supported site cannot be read, or a save or an AI reading fails, the extension reports which supported site and which of its readers was involved, a short error code, and its version. A report never includes the address of the page or anything from it, and a page of any other site is reported without naming that site.
• Like every request to our service, these carry your IP address and browser details, which we use for security and rate limiting.

How we use it. We use what the extension sends only to provide and improve that single purpose: connecting your browser, saving the testimonials you capture, reading fields when you ask for it, keeping the service secure, and repairing the extension when a site changes. We do not sell this information, use or transfer it for advertising, or use it to determine creditworthiness or for lending. Our staff do not read what you capture unless you ask us for help with it, we need to investigate a security problem or abuse, or the law requires it. The use of information received from Google APIs, and of all other information the extension handles, adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Who else handles it. The providers that handle what the extension sends are Clerk, for signing in; Vercel, Supabase, and Cloudflare, for hosting, the database, and file storage; Upstash, for rate limiting; Sentry, for error reports; and, only when you ask for an AI reading, Vercel's AI Gateway and the AI model provider. We would ask for your consent before transferring this information as part of a merger, acquisition, or sale of assets. Once a capture is saved it is a testimonial in your project and is handled like the rest of your project's content, as this policy describes.

Each of these providers is described in our Subprocessor Register.

Other people's information. The extension is made to save what other people have published: a review or a post, with its author's name and, where the page shows them, their photo, role, company, and profile link. Those people are usually not users of the extension. As the sections on customer content describe, the workspace that saves such content decides how it is used and is responsible for having the rights and permissions to keep and display it. If you are the author of a review or post that was saved this way, you can ask the business that saved it to delete it, or write to privacy@retestimonial.com, and we will direct your request to that business or assist it as required.

How long we keep it. A saved capture is customer content and follows the retention section above. A connected browser that has not used the extension for 60 days is disconnected, and we delete the record of a disconnected browser 30 days after that. Daily counts of AI readings are deleted after 90 days. Diagnostic reports are kept with our other diagnostic logs, as the retention section describes.

Your controls:

• Closing the side panel stops the extension from reading pages.
• The sites you chose to always allow are listed under “Sites you allowed” in the extension's Settings, where you can remove each one. The browser's own settings for extensions let you limit which sites any extension may read.
• You can edit or remove a capture in the queue before you save it. A screenshot is attached only for an area capture or when you switch it on, and an AI reading runs only when you click it.
• To disconnect a browser, sign out in the extension's Settings, or remove it under Settings, Security, “Connected browsers” in ReTestimonial. Signing out of all your other devices, or changing or resetting your password while signing the other devices out, also disconnects your connected browsers, except any you connected during your current sign-in.
• A saved capture can be edited or deleted in your project like any testimonial, and the rights described in “Your choices and regional privacy rights” apply.

We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify account owners or present notice in the product.