Privacy Policy
This privacy policy explains how PAMPLEM ("we", "us", "our") collects, uses, and protects your personal data when you use Polite Review. This policy applies to politereview.com and all related services. Last updated: February 2026.
Data controller
PAMPLEM, SASU with a share capital of EUR 10,000. Head office: Europarc Pichaury, 1330 Rue Jean René Guillibert Gauthier de la Lauzière Bat B5, 13290 Aix-en-Provence, France. SIREN: 909 325 763.
Data we collect
We collect the following personal data: account information (email address, name) provided during registration; usage data (pages visited, actions performed) collected automatically; review data (review permalinks) submitted through funnels; and billing information processed securely through our payment provider.
Purpose of processing
Your data is processed to: provide and maintain the Polite Review service; manage your account and authentication; process payments and manage subscriptions; send transactional emails related to your account; improve our service through anonymized usage analytics.
Legal basis
We process your data based on: contractual necessity (to provide the service you signed up for); legitimate interest (to improve our service and ensure security); consent (for optional communications); and legal obligation (for tax and accounting requirements).
Data retention
Account data is retained for the duration of your account and deleted within 30 days of account deletion. Usage analytics are anonymized after 26 months. Billing records are retained as required by applicable tax law.
Your rights
Under GDPR, you have the right to: access your personal data; rectify inaccurate data; request deletion of your data; restrict processing; data portability; and object to processing. To exercise any of these rights, please contact us through our contact page.
Cookies
We use strictly necessary cookies to manage authentication sessions. We do not use advertising or tracking cookies. Third-party services we integrate with may set their own cookies according to their respective privacy policies.
Third-party services
We use the following third-party services: Auth0 (authentication), Vercel (hosting), and Stripe (payment processing). Each of these providers processes data according to their own privacy policies and in compliance with GDPR.
Changes to this policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.