Last updated: 2 June 2026
This document is also available in French (original) and Dutch.
Arietis Consulting SRL (HelloReviews), Rue des Fabriques 41, 1000 Brussels, Belgium. BCE: BE 0688.954.772. Contact: hello@helloreviews.be. HelloReviews acts as data controller for data relating to your account management (registration, payment, support), and as data processor for data processed in the context of executing the Service on your behalf (Google reviews, responses, parameters). A data processing agreement (DPA) is available on request at privacy@helloreviews.be.
Account data (email, encrypted password), business data (name, address, language), public Google reviews on your listing (text, author name as shown on Google, rating, date — imported automatically once your Google account is connected), payment data (managed by Stripe, not stored by HelloReviews), usage data (logs for debugging purposes).
Service provision to the subscriber (contract performance, Article 6.1.b GDPR). AI response generation via Anthropic (contract performance). Processing of public Google review authors' data (legitimate interest of the business in responding to its own reviews, Article 6.1.f GDPR; a legitimate interest assessment is available on request). Transactional and onboarding emails (contract performance). Payment processing via Stripe (contract performance). Service improvement (legitimate interest). Belgian legal and accounting compliance (Article 6.1.c GDPR).
Supabase Inc. (United States; database hosted in EU region) — database hosting and authentication. Vercel Inc. (United States) — application hosting. Anthropic PBC (United States) — AI response generation. Stripe Payments Europe Ltd. (Ireland) and Stripe Inc. (United States) — payment processing (PCI DSS certified). Resend Inc. (United States) — transactional emails. Google LLC (United States / Ireland) — OAuth and Google Business Profile API. Transfers outside the European Union are governed by Standard Contractual Clauses (SCCs) approved by the European Commission and, where applicable, by the EU-US Data Privacy Framework.
Account data: contract duration + 3 years. Reviews and responses: contract duration. Payment data: 10 years (Belgian accounting obligation). Technical logs: maximum 90 days.
Under GDPR and Belgian law of 30 July 2018: right of access, rectification, erasure, portability, objection and restriction. Contact us at hello@helloreviews.be to exercise these rights, or at privacy@helloreviews.be for any data-protection question. Persons who have left a Google review on one of our customer listings may also request removal of their name and review from our systems by writing to privacy@helloreviews.be; we respond within 30 days. You may also lodge a complaint with the Belgian DPA (autoriteprotectiondonnees.be).
Strictly necessary cookies (session) and analytical cookies (Google Analytics) with your consent. No advertising or third-party tracking cookies.
Encryption in transit (TLS), encryption at rest, role-based access control (Supabase RLS), secure authentication.
In case of material changes, you will be notified by email. The date of the last update is shown at the top of this page.