Privacy Policy

The agency responsible for your personal information is:

• Automate AI Limited (trading as Rocket Review)
• New Zealand
• Email: hello@rocketreview.co.nz
• Websites: rocketreview.co.nz and rocketreview.au

We collect personal information that is necessary for one or more of our functions or activities, including:

• Account & contact information — your name, business name, email address, phone number and the login details you use to access the Services.
• Business information — details about your business, your Google Business Profile location(s), and the integrations you connect (for example Xero).
• Free tools on our website — when you ask us to email you something from a free tool (such as the Google review link generator’s print pack), your name, email address, business name and the Google review link you created. We use these to send what you asked for, our team may follow up with you personally, and if you tick the box we send a short series of emails with review tips and information about Rocket Review. You can unsubscribe at any time.
• Customer contact details you provide — where you use Rocket Review to request reviews, you may supply your own customers’ names, email addresses and phone numbers so that review invitations can be sent on your behalf. You are responsible for ensuring you have a lawful basis to share this information with us.
• Google account & Business Profile data — where you connect a Google account, the data described in section 6.
• Billing information — subscription and payment details. Card payments are processed by our payment provider; we do not store full card numbers.
• Technical & usage data — IP address, device and browser type, pages visited and similar analytics data collected automatically (see section 8).

You do not have to provide the information we request, but if you do not we may be unable to provide some or all of the Services to you.

Where reasonably practicable, we collect personal information directly from you — for example when you create an account, contact us, connect an integration, or use the Services. We may also collect information:

• automatically through cookies and similar technologies when you use our website;
• from third-party services you authorise us to connect to (such as Google and Xero); and
• from you when you provide your customers’ details for review requests.

We use personal information for the purposes for which it was collected, including to:

• provide, operate, maintain and improve the Services;
• create and manage your account and authenticate you;
• send review invitations to your customers on your behalf, and display, monitor and help you respond to reviews;
• process payments and manage your subscription;
• provide customer support and respond to your enquiries;
• send you service, security and administrative messages, and (where permitted) marketing communications you can opt out of at any time;
• maintain the security and integrity of the Services and detect and prevent fraud; and
• comply with our legal obligations.

We will not use or disclose your personal information for a purpose other than that for which it was collected unless you would reasonably expect it, you have authorised it, or the Privacy Act otherwise permits it.

We do not sell your personal information. We may disclose it to:

• Service providers who perform functions on our behalf — for example cloud hosting (Amazon Web Services), email and SMS delivery, analytics, and payment processing — under obligations of confidentiality and only to the extent needed to provide their services to us;
• Integrations you authorise, such as Google and Xero, to enable the features you have connected;
• Professional advisers, regulators or authorities where required or authorised by law; and
• a successor entity in connection with a sale, merger or reorganisation of our business, subject to this policy.

Overseas disclosure

Some of our service providers are located outside New Zealand (for example data hosting and processing in Australia, the United States and other jurisdictions). Where we disclose personal information overseas, we take reasonable steps to ensure the recipient protects the information with safeguards comparable to those under the New Zealand Privacy Act 2020, as required by Information Privacy Principle 12.

If you choose to connect your Google account, we request access only to the data needed to provide the features you use. With your permission, we access:

• Basic profile information (such as your name and email address) solely to authenticate you and let you sign in with Google; and
• Google Business Profile data (such as your business locations and customer reviews) so that we can display your reviews, help you reply to them, and support review-collection features.

We access this data only while your account is connected and only to provide and improve the features described above. You can disconnect Rocket Review at any time and revoke our access to your Google data through your Google Account permissions.

Rocket Review’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, data obtained from Google APIs is:

• used only to provide or improve user-facing features that are prominent in the Rocket Review experience;
• not transferred to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with the user’s consent;
• not used or transferred for serving advertisements, including retargeting or personalised/interest-based advertising; and
• not read by humans unless we have your affirmative consent, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data is aggregated and anonymised for internal operations.

We take reasonable technical and organisational steps to protect personal information from loss, misuse, and unauthorised access, modification or disclosure. This includes encryption of data in transit and at rest, access controls, and use of reputable cloud infrastructure providers.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to provide the Services, and to meet our legal, accounting and reporting obligations. When information is no longer required, we will securely delete or de-identify it. Details given through a free tool on our website are deleted automatically about two years after your last request through that tool. You can request deletion of your data as described in section 10.

Our website uses cookies and similar technologies to operate the site, remember your preferences, and understand how the site is used so we can improve it. You can control or disable cookies through your browser settings, although some features may not work correctly without them.

The tools we use on this website are:

• Google Analytics 4 - measures how pages are used, so we can improve them.
• Google Tag Manager - loads and manages the tags listed here.
• Google Ads - measures which advertisements lead to sign-ups.
• Meta Pixel - measures which Facebook and Instagram advertisements lead to sign-ups.
• Stripe - processes payments and helps detect fraud during checkout.

Your choice. When you first visit the site you can accept or decline these measurement and advertising cookies. Declining does not remove any functionality. Cookies needed to operate the site and keep it secure are always used. Visitors in the European Economic Area, the United Kingdom and Switzerland have measurement and advertising cookies switched off until they accept.

To change your choice later, clear this site’s data in your browser settings and reload the page. The banner will appear again.

Under the Privacy Act 2020 you have the right to request access to the personal information we hold about you, and to request that we correct it if it is inaccurate. You may also request that we delete your account and associated personal information, subject to any information we are required to retain by law.

To make a request, contact us at hello@rocketreview.co.nz. We will respond as soon as reasonably practicable and within the timeframes required by the Act. We may need to verify your identity before actioning a request.

Our Services are intended for businesses and are not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be notified through the Services or by other appropriate means. We encourage you to review this page periodically.

If you have any questions, concerns or complaints about this policy or how we handle your personal information, please contact us first at hello@rocketreview.co.nz so we can try to resolve the matter.

If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner (privacy.org.nz).