Privacy Policy

This privacy policy explains how Qudo (the “Service,” “Qudo,” “we,” “us”) collects, uses, and protects your data, and the choices you have about it. By creating an account or using the Service, you agree to the practices described here.

Who this applies to

Qudo is used by business owners (“you” or “customers”) to request and manage reviews from their own customers (“end customers”). For end-customer data — names, phone numbers, emails you upload as contacts — you are the data controller and Qudo acts as your data processor, handling that information only to send review requests and track their delivery on your behalf.

Information we collect

• Account information: name, email address, and password (stored as a salted hash, never in plain text) when you sign up.
• Business information: business name, category, timezone, public review page slug, and the review links you configure.
• Contacts you upload: your end customers' names, phone numbers, emails, tags, and visit dates, added manually or via CSV import.
• Review data: reviews and replies synced from platforms you connect (Google, Facebook, Yelp, Tripadvisor, Trustpilot), including reviewer name, rating, and review text.
• Usage data: when a review-request link is clicked, we log the timestamp, user agent, and referrer to show delivery and click-through stats.
• Billing information: plan and subscription status. Card details are handled directly by Paddle — we never see or store full card numbers.
• Cookies: a session cookie to keep you signed in, and a theme preference cookie. We don't use third-party advertising cookies.

How we use it

• To operate the Service: send review requests by SMS/email, sync and display reviews, and draft AI-assisted replies.
• To communicate with you about your account, billing, and material changes to the Service.
• To monitor, secure, and improve the Service, and to prevent abuse.
• To meet legal and tax obligations.

Who we share it with

We share data only with the service providers needed to run Qudo, each bound by their own data-processing terms:

• Twilio — delivers SMS review requests.
• Resend — delivers transactional and review-request emails.
• Paddle — processes billing and payments, and acts as merchant of record.
• Google, Meta (Facebook), Yelp, Tripadvisor, Trustpilot — the review platforms you choose to connect, via OAuth or API keys you provide.
• Our hosting and database providers — to run the application and store data securely.

We do not sell personal data, and we do not share end-customer contact lists across businesses.

Data retention

We keep account and business data for as long as your account is active. Contacts, requests, and reviews are retained until you delete them or close your account, after which they're removed within 30 days, except where we're required to retain records for legal or tax purposes.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@qudo.ink. If you're an end customer and want your contact details removed, you can also reply STOP to any text request, or ask the business directly — they control that data.

Security

We use industry-standard safeguards — encrypted connections, hashed passwords, signed and verified webhooks — to protect your data. No system is perfectly secure, and we can't guarantee absolute security.

International transfers

Your data may be processed in countries other than your own, including the United States, where our hosting, database, and service providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Children

Qudo is intended for business use and is not directed at children under 16. We do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time. Material changes will be announced by email or in-app notice before they take effect.

Contact

Questions about this policy? Email privacy@qudo.ink— that's the fastest way to reach us.