Trust & Review Quality
Rviewo uses multiple verification layers to ensure every review is authentic, constructive, and trustworthy, for businesses and consumers alike.
How We Verify Reviews
Unlike star ratings alone, Rviewo analyzes multiple dimensions of every review to produce a comprehensive trust signal.
AI Quality Grading
Every review is graded A+ through D based on detail, constructiveness, and specificity. Higher quality reviews carry more weight in business scores.
Engagement Depth Analysis
We measure how thoughtfully reviewers engage: response time, originality vs. suggested answers, and session duration. Speed-clicking through a review results in lower quality grades.
Geolocation Verification
For reward-bearing missions, reviewers must physically be at the business location. Server-side geofencing prevents remote farming.
Pattern Detection
Our systems monitor for suspicious patterns: excessive negative reviews, abnormally high daily volumes, and accounts that consistently game the reward system.
Reputation Score
Our proprietary Reputation Score (0-100) goes beyond simple averages. It weighs:
- Recency: newer reviews carry more weight than old ones
- Verification level: geo-verified reviews score higher
- Quality grade: detailed, constructive reviews influence more
- Consistency: stable sentiment over time builds confidence
Review Dispute Process
Business owners can dispute reviews they believe are fraudulent or violate our guidelines. Our process is transparent, fair, and fast.
Flag the review
Business owners can flag any review with a reason: suspected fake, not a customer, inappropriate content, or competitor.
We investigate
Our team reviews the flagged content using quality scores, engagement data, account history, and geolocation records.
Resolution
We either dismiss the dispute (review stays), hide the review pending further investigation, or remove it entirely if confirmed fraudulent.
Security
Rviewo follows SOC 2-aligned practices across infrastructure, access control, and change management. We have not commissioned a SOC 2 audit report; the practices below are what we do, described honestly.
Infrastructure
Rviewo runs on Google Cloud and Firebase, both built on SOC-certified infrastructure. We do not operate our own data centers.
Encryption
Data is encrypted in transit with TLS and encrypted at rest by the underlying Google Cloud storage layer.
Access control
Role-based access with per-location assignment: a team member sees only the locations they are assigned to, not the whole account by default.
Change control
Every deploy runs through a CI-gated automated test suite. A failing test suite blocks the deploy rather than only warning about it.
Backup and recovery
Daily backups plus point-in-time recovery on our production database.
Secrets management
API keys and credentials are stored in Google Secret Manager, not in source code or environment files checked into version control.
Subprocessors
Third parties that may process customer data on our behalf:
| Subprocessor | Purpose |
|---|---|
| Google (Cloud / Firebase) | Hosting, database, authentication, storage |
| Stripe | Payment processing |
| Resend | Transactional email delivery |
| Netlify | Web application hosting |
| PostHog | Product analytics |
| Mapbox | Map tiles for consumer search |
| Anthropic | AI development and support tooling |
Data Processing Agreement
A DPA covering our processing of customer data is available on request. Contact us to get a copy for your review.
Breach notification
If we confirm a data breach affecting your account, we will notify you without undue delay, targeting notice within 72 hours of confirmation.
Reviewer Privacy
Reviewers choose whether their feedback is public or private. Names are never publicly disclosed without explicit consent. All data is handled in accordance with our Privacy Policy and applicable data protection regulations.
Read our Privacy Policy