Privacy Policy

Last updated: April 25, 2026

1. Introduction

Bump Reviews, operated by Stonegate Labs LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and related services (collectively, the "Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, password, business name, business phone number, and Google review URL.

Customer Data

You may provide us with your customers' names, phone numbers, and email addresses for the purpose of sending review requests on your behalf. You represent that you have obtained appropriate consent from your customers to share this information and to contact them via SMS or email.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, review request delivery status, click-through data, and timestamps.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card information on our servers. Please refer to Stripe's Privacy Policy for details on how they handle your payment data.

3. How We Use Your Information

  • To provide and maintain the Service, including sending review requests via SMS and email on your behalf
  • To manage your account and provide customer support
  • To process payments and manage subscriptions
  • To send automated follow-up reminders to your customers who have not yet responded
  • To generate analytics and reports about your review request performance
  • To communicate with you about your account, service updates, and important notices
  • To detect, prevent, and address technical issues or abuse

4. SMS Communications & Consent

Bump Reviews sends SMS messages on behalf of business account holders to their existing customers who have provided prior express written consent to that business. Bump Reviews does not purchase, rent, or source contact lists from third parties.

How consent works: Before any SMS is sent, the business account holder must attest — via a required checkbox in the Bump Reviews interface — that the recipient has given explicit consent to receive SMS messages. This attestation is logged with a timestamp in our system.

Opting out: Recipients can reply STOP at any time to permanently unsubscribe from all future SMS messages sent through our platform. Other accepted opt-out keywords: STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT. Opt-outs are applied immediately and stored permanently — businesses cannot override them.

Opting back in: Recipients may reply START, YES, or UNSTOP to resubscribe after opting out.

Help: Reply HELP or INFO for support contact and opt-out instructions.

SMS delivery is powered by Twilio. Message and data rates may apply. Message frequency varies by business account.

For full details on our SMS consent practices, see our SMS Consent & Messaging Policy.

5. Third-Party Services

We use the following third-party services to operate the Service:

  • Twilio — SMS message delivery
  • Stripe — Payment processing and subscription management
  • Google — We redirect your customers to your Google Business review page

Each third-party service has its own privacy policy governing the use of your data. We encourage you to review their policies. A complete list of our Subprocessors, including their roles and links to their privacy policies, is available at our Subprocessors page.

Biometric Information Notice

Bump Reviews does not currently collect biometric identifiers or biometric information (such as voiceprints, face geometry, or fingerprints) from users or reviewers. Review content submitted by your customers (such as photos or videos) is stored on our servers as provided by users. We do not run facial recognition, speaker identification, or biometric analysis on any user-submitted content.

If you collect any biometric information from individuals through your use of Bump Reviews, you are responsible for complying with all applicable biometric privacy laws, including the Illinois Biometric Information Privacy Act (BIPA).

Data Subject Access Requests (DSAR)

To submit a privacy request (access, deletion, or correction of your personal data):

  • Email: privacy@bumpreviews.com
  • Subject line: "Privacy Request — [Access / Delete / Correct]"
  • Include your registered email address and a description of your request

We will verify your identity and respond within 45 days. We do not charge a fee for reasonable requests.

6. Data Retention

We retain your account information and customer data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal or compliance purposes.

7. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL), secure password hashing, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access, correct, or delete your personal information
  • Export your data in a portable format
  • Withdraw consent for data processing
  • Object to certain uses of your data

To exercise these rights, please contact us at the email address below.

9. Cookies

We use essential cookies to maintain your session and remember your preferences. We do not use third-party tracking or advertising cookies.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

Categories of personal information collected:

  • Identifiers (name, email, phone, IP address)
  • Commercial information (subscription history, review request data)
  • Internet/electronic network activity (usage data, click tracking)

Sale and sharing: We do not sell your personal information. We do not share personal information for cross-context behavioral advertising.

Your CCPA rights:

  • Right to know what personal information we collect, use, and disclose
  • Right to delete your personal information
  • Right to correct inaccurate personal information
  • Right to opt out of sale/sharing (not applicable — we do not sell or share)
  • Right to non-discrimination for exercising your rights

To submit a request: privacy@bumpreviews.com. We will verify your identity and respond within 45 days.

Data Breach Notification

In the event of a data breach affecting your personal information, we will investigate promptly, notify affected users within 72 hours where feasible, provide details about affected information, and notify relevant authorities as required by applicable law.

10. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@bumpreviews.com.