Privacy Policy

Last updated: June 2026

1. Introduction

This Privacy Policy explains how Reevy, operated by Beltret Group Ltd ("we", "us", "our"), collects, uses, and protects your personal data. Beltret Group Ltd is registered in England and Wales (company number 07911617), registered office: Office 8885, 321-323 High Road, Chadwell Heath, Romford, Essex RM6 6AX. We are the data controller for the personal data we process about you.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect and process the following:

• Account data: your email address and password (stored securely as a hash)
• Amazon data: your Amazon Seller ID, marketplace, and an authorisation token that lets us send review requests on your behalf
• Order data: Amazon order IDs and order status, used to determine eligibility for review requests
• Payment data: processed by Stripe. We receive limited billing information (such as your customer ID and subscription status) but do not store full card details
• Usage data: activity logs such as logins and review run history

We do not access or store the personal details of your customers (such as their names or addresses).

3. How We Use Your Information

We use your data to:

• Provide and operate the Service (sending review requests via Amazon's API)
• Process subscription payments and manage your account
• Communicate with you about your account, service updates, and support
• Send product updates and tips (where you have consented; you can opt out anytime)
• Maintain security and improve the Service

4. Legal Bases for Processing

We rely on the following legal bases under UK GDPR: performance of a contract (to provide the Service), legitimate interests (to secure and improve the Service), consent (for marketing communications), and legal obligation (where we must retain records).

5. Data Sharing

We do not sell your personal data. We share data only with the following processors and parties as necessary to run the Service:

• Amazon: via the Selling Partner API, to send review requests
• Stripe: to process payments (Stripe acts as an independent controller for payment data)
• Krystal Hosting: our UK-based hosting provider

6. International Transfers

Some processors (such as Amazon and Stripe) may process data outside the UK. Where this happens, appropriate safeguards such as Standard Contractual Clauses or adequacy decisions are in place to protect your data.

7. Data Security

We protect your data using HTTPS encryption in transit, secure storage of authorisation tokens, hashed passwords, and access controls that limit who can access your data.

8. Data Retention

We retain your personal data for as long as your account is active. If you cancel, we delete or anonymise your personal data within 30 days, except where we are required to retain certain records (for example, for tax or legal purposes).

9. Your Rights

Under UK GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. You can also withdraw consent for marketing at any time. To exercise these rights, contact support@reevy.app.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been handled improperly.

10. Cookies

We use only essential cookies required for login sessions and security. We do not use advertising or third-party tracking cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Service or by email.

12. Contact

For any privacy questions or to exercise your rights, contact Beltret Group Ltd at support@reevy.app.