Legal

Privacy Policy

This page describes how we handle information. The one section still marked in yellow needs a hosting/analytics provider named before this policy is published.

Before publishing

Company details and AI providers below are now filled in. Still open: the analytics/cookie provider for this website (marked below) — decide that and this page is ready to go live.

Review X-Ray ("Review X-Ray," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our website, use our services, browser extension, or otherwise interact with Review X-Ray.

By using Review X-Ray, you agree to the practices described in this Privacy Policy.

1. Information we collect

Information you provide

Depending on how you use Review X-Ray, we may collect information you voluntarily provide, including your name, email address, account information, contact information, information submitted through forms, feedback and communications you send to us, and information associated with your use of the Service. We only request information that is reasonably necessary to provide or improve the Service.

Information collected automatically

When you visit our website, we may automatically collect technical information, including IP address, browser type, device type, operating system, referring pages, pages visited, approximate timestamps, general usage information, and diagnostic and security information. We may use cookies and similar technologies to operate, secure, analyze, and improve our website. [List actual analytics/cookie provider here once chosen, e.g. Plausible or Google Analytics — none is in use yet]

Public review data

Review X-Ray is designed to analyze customer reviews and other publicly available information from third-party websites. When you use the Review X-Ray browser extension to analyze publicly available reviews, the extension reads review text directly from the page you're viewing in your own browser and processes it as described in Section 3 below. Review X-Ray does not claim ownership of third-party reviews or other third-party content.

Review X-Ray works in two modes, and how your review text is handled depends on which one you're using:

Free daily scan (default, no account or API key needed): review text is sent from your browser to our own backend server, which runs the analysis using our own AI provider keys and returns the finished report to you. We do not build a database of the reviews you've analyzed — review text is used only to generate your report and is not retained afterward. We do keep a minimal usage record (a random device identifier and a hashed, non-reversible form of your IP address, tied only to a date) solely to enforce the one-scan-per-day limit; this record contains no review content and no way to identify you personally beyond that.

Bring-your-own-key mode (optional, unlimited use): if you add your own DeepSeek and OpenRouter API keys in Settings, review text is sent directly from your browser to those providers using your own keys, and never passes through us at all. Generated reports and your API keys are stored only in your own browser's local storage (via the Chrome storage API) on your device. That data stays there until you clear the extension's data, uninstall it, or your browser clears it — we have no copy and no way to access it.

2. How we use information

We may use information you provide directly to us (for example, through the Contact page) to respond to you, provide support, and improve Review X-Ray. On the free daily scan, review text is used only to run the analysis you requested and generate your report — we do not use it for any other purpose, and we do not retain it afterward. In bring-your-own-key mode, review analysis happens entirely between your browser and the AI providers described below — we do not see, use, or analyze that data ourselves.

3. AI processing

The Review X-Ray browser extension uses artificial intelligence to analyze review content and generate insights, through either of the two modes described in Section 1:

On the free daily scan, our backend server calls these providers on your behalf using our own keys, and review text passes through our server to do so (see Section 1 for what we retain — in short, nothing beyond the minimal usage record). In bring-your-own-key mode, these requests go directly from your browser to each provider using your own API key, and Review X-Ray does not proxy, log, or store that traffic. Either way, each provider processes the data it receives under its own privacy policy and terms, which we encourage you to review.

Important: Review X-Ray's AI-generated analysis is informational and may contain errors. You should independently evaluate important conclusions before relying on them for business, financial, legal, product, or other significant decisions.

4. Third-party service providers

The AI providers named in Section 3 (DeepSeek and OpenRouter) are the third parties Review X-Ray's analysis relies on — either called by our own backend server (free daily scan) or called directly by your browser using your own API keys (bring-your-own-key mode). Our backend server runs on Vercel and uses Supabase to store the minimal usage record described in Section 1. For the website, we may use third-party providers for hosting and, once selected, analytics. [Name the actual website hosting provider once chosen] We do not sell personal information.

5. Third-party websites

Review X-Ray may analyze or interact with information originating from third-party websites. Those websites operate independently from Review X-Ray and have their own terms, privacy policies, and data practices. Review X-Ray is not responsible for the privacy practices, availability, accuracy, or content of third-party websites. You are responsible for ensuring that your use of Review X-Ray in connection with third-party websites complies with applicable laws and those websites' applicable terms and policies.

6. Data retention

On the free daily scan, review text passes through our backend server only to generate your report and is not retained afterward; we keep only the minimal usage record described in Section 1 (a device identifier and a hashed IP, tied to a date, with no review content), kept only as long as needed to enforce the daily limit. In bring-your-own-key mode, we do not retain analyzed review text, reports, or API keys on any infrastructure we control at all — that data lives only in your browser's local storage until you clear it, uninstall the extension, or your browser removes it. Information you send us directly (for example, a support email) is kept only as long as reasonably needed to respond to you and for our own records.

7. Data security

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

8. Your choices

Generated reports and (in bring-your-own-key mode) your API keys live only in your own browser — you can delete them at any time by clearing the extension's local storage or uninstalling it, no request to us needed. Because we don't retain your review text after a free daily scan completes (see Section 6), there's nothing further to delete on our end from that. For anything you've sent us directly (e.g. an email), you may request access, correction, or deletion by contacting us at bilaal@sudarfa.com. We may need to verify your identity before completing certain requests.

9. Children's privacy

Review X-Ray is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, please contact us so we can take appropriate action.

10. International users

Review X-Ray may be operated from and use service providers located in countries other than your own. As a result, information may be transferred to and processed in countries with different data-protection laws. Where required by applicable law, we will use appropriate safeguards for international data transfers.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. Your continued use of Review X-Ray after changes become effective constitutes acceptance of the updated Privacy Policy to the extent permitted by law.

12. Contact us

Elit Virtual LLC
Boulder, Colorado, USA
Email: bilaal@sudarfa.com