14-day free trial on all paid plans — no card needed. Start free trial

Security

How ReviewPanel protects your data, credentials, and account access.

Authentication

ReviewPanel uses Firebase Authentication. You can sign in with:

  • Google OAuth (recommended)
  • Email and password

Protected application routes validate the signed-in session server-side.

Encryption

  • In transit: ReviewPanel uses HTTPS/TLS.
  • Sensitive credentials: OAuth tokens and webhook credentials are encrypted before storage.

Data storage

Review data is stored in Firestore and access is checked against the signed-in user and workspace membership. ReviewPanel:

  • Does not sell personal information
  • Uses service providers as described in the Privacy Policy
  • Sends relevant input to OpenAI only when an optional AI feature is requested; ReviewPanel does not implement model training on customer data

Access control

Access is controlled at two levels:

  • Role-based: Owner, Admin, Member, and Client roles with distinct permissions.
  • Workspace isolation: Data in one workspace is invisible to members of another workspace.

See Team Roles & Workspaces for details.

Webhook security

  • HMAC-SHA256 signatures on every webhook delivery.
  • Dual signatures during a user-managed secret rotation, until the rotation is confirmed.
  • Webhook credentials encrypted before storage.

See Webhooks for implementation details.

Account deletion

You can request account deletion at any time. The deletion workflow removes the ReviewPanel account and associated operational data; limited records may be retained where required by law or provider obligations, as described in the Privacy Policy.

If you own a workspace that still has other members, transfer ownership or remove those members before account deletion can complete. Memberships in workspaces you do not own are removed as part of the deletion workflow.

OAuth credential options

You have two options for the Google Business Profile OAuth connection:

  • Default credentials: Quick setup. ReviewPanel's pre-configured OAuth client handles the connection.
  • Custom credentials: Bring your own Google Cloud OAuth client ID and secret. Full control over your API project and quotas.

Configure in Dashboard → Settings.