Privacy Policy & Customer Data Safeguards

1. Overview & Commitment to Customer Privacy

CogLumen Review System provides an in-person customer feedback and Google review management system for local businesses. We prioritize transparency, privacy-conscious data collection, and strict compliance with Google Review platform policies and FTC guidelines.

2. Information Collected During QR Scans

When a customer scans a QR code at a physical business:

• Zero Mandatory Personal Information: Customers are never required to provide their name, phone number, or email to access Google Reviews.
• Anonymized Funnel Analytics: We log hashed IP addresses (SHA-256 with server salt) solely for abuse prevention, rate limiting, and accurate unique scan counting. Complete IP addresses are never retained.
• Voluntary Customer Feedback: Any name, phone, or email submitted via our private feedback form is voluntary and used exclusively by the business for customer service follow-up.

3. Review Assistant & Authentic Experience

Our review assistant service utilizes secure server-to-server natural language processing. Customer prompts and selected tags are processed strictly to generate editable draft text based on the customer's real experience. We never sell or share customer data with third-party advertisers.

4. FTC & Google Anti-Review-Gating Policy Compliance

Revie strictly adheres to Google Business Profile policies and the FTC Consumer Review Fairness Act:

• Access to the genuine Google Review destination is always available to every customer regardless of rating.
• We never filter or hide Google Review links from customers who report unsatisfactory experiences.
• We never incentivize reviews or fabricate customer endorsements.

5. Data Retention & Tenant Isolation

All customer feedback and business configurations are stored in an isolated multi-tenant database. Authentication credentials and OAuth tokens are protected with AES-256-GCM encryption at rest.