Privacy Policy

Last Updated: August 25, 2026

This Privacy Policy describes how SJW Group, Inc., a New York corporation, d/b/a More Good Reviews ("MGR", "we", "us", or "our") collects, uses, discloses, and protects personal information when you visit our websites (including moregoodreviews.com and related subdomains), create or use an MGR account, contact us, or otherwise interact with us as a business customer, website visitor, or prospective customer (collectively, "you" or "Account Holders").

This Privacy Policy does not apply to personal information that our business customers collect about their own end customers and upload to, or collect through, the MGR platform. In that context, our customer is the data controller and MGR acts as a data processor. That processing is governed by our Data Processing Agreement and by our customer's privacy policy.

1. Who We Are

MGR is a review collection and reputation management platform operated by:

SJW Group, Inc., a New York corporation, d/b/a More Good Reviews
525 E 14th St 7H
New York, NY 10009
United States

For privacy-related questions or requests, contact us at legal@moregoodreviews.com.

If you are located in the European Economic Area ("EEA"), the United Kingdom ("UK"), or Switzerland, MGR is the controller of personal information described in this Privacy Policy unless otherwise stated.

2. Information We Collect

We collect personal information in the following ways.

2.1 Information You Provide to Us

When you register for an account, subscribe to a plan, or communicate with us, we may collect:

Account and profile information: first name, last name, email address, password (stored in hashed form), time zone, and optional profile details.
Business information: company or project name, business address, website, branding assets, and settings you configure in the Services.
Billing information: subscription plan, billing history, and payment-related identifiers. Payment card details are collected and processed by Stripe, Inc. We do not store full payment card numbers.
Communications: messages you send to support, feedback you submit, and other correspondence with us.
Integration credentials and configuration: when you connect third-party services (such as Google, Stripe, HubSpot, Slack, Discord, Twilio, ClickSend, SimpleTexting, or TextLink), we store the tokens, settings, and metadata needed to operate those integrations on your behalf.
Refer & Earn program information: if you participate in our referral program, we collect and store your referral code, commission rate, referral and payout history, Stripe Connect account identifiers, payout email, and limited information about users you refer (such as first name, last initial, signup date, and subscription status) as described in our Referral Program Terms.

If you sign in with Google, we receive basic profile information from Google (such as your name, email address, and Google account identifier) in accordance with your Google account settings and Google's privacy policy.

2.2 Information You Upload About Your Customers

If you use MGR as a business customer, you may import or enter personal information about your end customers, contacts, or other individuals, such as names, email addresses, phone numbers, company names, transaction or visit dates, review content, and related metadata. You are responsible for providing appropriate notice to those individuals and for having a lawful basis to share that information with us.

We process this information solely to provide the Services to you, as described in our Data Processing Agreement.

2.2.1 Referral Sign-Ups

If you create an MGR account using another user's referral link or code as part of our Refer & Earn program, we associate your account with the referring user and share limited information about you with that user, including your first name, last initial, signup date, and subscription status, so they can track their referrals. We also record the IP address used at signup to help prevent fraud and abuse. Our use of this information is governed by our Referral Program Terms, and the referring user is required to keep it confidential and not use it to contact or market to you outside any independent relationship they already have with you.

2.3 Information Collected Automatically

When you visit our websites or use the Services, we may automatically collect:

Device and usage information: IP address, browser type, operating system, referring URLs, pages viewed, features used, timestamps, and similar diagnostic data.
Log and security data: authentication events, API activity, error reports, and records used to secure and operate the Services.
Cookies and similar technologies: as described in Section 6 and in our Cookie Policy.

When end customers interact with review pages, widgets, kiosk pages, or messages sent through MGR on your behalf, we may collect identifiers, contact details, review content, ratings, engagement events, and limited technical data (such as IP address and browser metadata) needed to deliver those features.

2.4 Information from Third Parties

We may receive information about you from:

Payment processors (such as Stripe) regarding subscription status and billing events;
Authentication providers (such as Google) when you choose to sign in through them;
Integration partners you connect to MGR (such as Stripe, HubSpot, or Google My Business);
Service providers that help us validate email addresses, deliver messages, monitor performance, or prevent abuse; and
Public sources when you or we import publicly available review data from third-party review sites.

3. How We Use Personal Information

We use personal information for the following purposes:

Providing the Services. Creating and managing accounts, operating projects, sending review requests and reminders, hosting review pages and widgets, syncing and displaying reviews, generating analytics, and delivering AI-assisted features such as review suggestions, highlights, replies, and tags.
Billing and account administration. Processing subscriptions, invoicing, usage tracking, fraud prevention, and account support.
Communications. Sending service-related emails or messages (such as account verification, security alerts, product updates, and support responses) and, where permitted, marketing communications about MGR.
Security and integrity. Authenticating users, detecting abuse, protecting against unauthorized access, enforcing our terms, and maintaining the reliability of the Services.
Improvement and analytics. Understanding how our websites and Services are used, measuring performance, and developing new features. Where required by law, we rely on your consent for non-essential analytics and advertising cookies.
Legal compliance. Complying with applicable law, responding to lawful requests, and establishing, exercising, or defending legal claims.

We do not use personal information uploaded by our business customers about their end customers for our own independent marketing purposes.

4. How We Share Personal Information

We may share personal information in the following circumstances:

4.1 Service Providers

We use trusted third parties to help us operate the Services. These providers process personal information on our behalf and are contractually required to protect it. Our current sub-processors for customer data are listed on our Sub-processors page. Service providers we use in our role as a data controller include, among others:

Provider	Purpose
Amazon Web Services, Inc.	Cloud infrastructure, storage, databases, queues, and email delivery
Mailgun Technologies, Inc.	Transactional and review-request email delivery
Twilio Inc.	SMS delivery for review requests and reminders
Stripe, Inc.	Subscription billing and payment processing
OpenAI, L.L.C.	AI-generated review suggestions, highlights, replies, and tagging
Cloudflare, Inc.	DNS, CDN, security, bot mitigation (Turnstile), Zaraz tag management, and custom domains
Functional Software, Inc. (Sentry)	Application error monitoring and performance telemetry
Browserless.io Inc.	Headless browser automation for certain platform tasks
Bright Data Ltd.	Public review data collection from third-party review sites
Google LLC	Maps and Places APIs, OAuth sign-in, and Google My Business integration
PostHog, Inc.	Product analytics and usage measurement for our websites and Services
Postman, Inc.	API development and monitoring tooling

This list may change from time to time. Material changes affecting customer data processed on behalf of business customers are addressed in our Data Processing Agreement and Sub-processors page.

4.2 Integrations You Authorize

If you connect third-party services to MGR, we share or receive information as needed to operate those integrations. Those third parties handle information under their own terms and privacy policies.

This includes external AI assistants and Model Context Protocol (MCP) clients (such as Claude) that you connect to the Services. When you authorize such a client, information you request through it is transmitted to that client at your direction and is then handled under that client's own terms and privacy policy. MGR does not control how a connected AI assistant uses information once it leaves the Services.

4.3 Business Customers and Their End Users

If you are an end customer of one of our business customers, your review submissions, message responses, and related data are accessible to that business customer through the Services. MGR does not control how that business customer uses your information outside the Services.

4.4 Legal and Safety Disclosures

We may disclose personal information if we believe it is reasonably necessary to comply with law, regulation, legal process, or governmental request; to protect the rights, property, or safety of MGR, our users, or others; or to investigate fraud, security issues, or violations of our terms.

4.5 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to continued protection consistent with this Privacy Policy.

4.6 No Sale or Sharing for Cross-Context Behavioral Advertising

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA").

5. AI Features

Certain features use artificial intelligence to generate or analyze content based on review text, customer data, or other information you provide. When you enable these features, relevant content may be transmitted to AI service providers (currently OpenAI) for processing. We configure these services to process data for the purpose of delivering the requested feature and not for training public models, to the extent such restrictions are offered by the provider.

You should not submit sensitive personal information to AI features unless you have determined that doing so is appropriate for your use case.

6. Cookies and Similar Technologies

We use cookies, pixels, local storage, and similar technologies on our websites and, where enabled, within customer-facing pages hosted on MGR infrastructure.

These technologies help us:

keep you signed in and maintain session security;
remember preferences;
measure website traffic and product usage;
deliver and measure marketing campaigns; and
prevent abuse through services such as Cloudflare Turnstile.

On our primary marketing website and application, we use PostHog for product analytics and Cloudflare Zaraz to load analytics and marketing tags (including Google Analytics 4, Google Ads, Facebook Pixel, LinkedIn Insight, and X Pixel). Analytics tools (Google Analytics 4 and PostHog) require Analytics consent; advertising pixels require Marketing consent. We may also collect similar usage data through server-side analytics when you are signed in to your account. Non-essential cookies and similar technologies are used only where permitted by applicable law and, where required, based on your consent. You can manage cookie preferences through our cookie consent banner or the "Cookie Preference" link in our footer.

For more detail, see our Cookie Policy.

7. International Data Transfers

MGR is based in the United States. If you access the Services from outside the United States, your personal information may be transferred to, stored in, and processed in the United States and other countries where we or our service providers operate.

Where required by applicable law, we implement appropriate safeguards for international transfers, such as Standard Contractual Clauses approved by the European Commission or the UK International Data Transfer Addendum.

8. Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.

In general:

Account information is retained while your account is active and for a reasonable period afterward.
Billing records are retained as required for tax, accounting, and legal purposes.
Customer data uploaded by business customers is retained according to the customer's subscription and deletion settings, and as described in our Data Processing Agreement.
Log and security data is retained for a limited period appropriate to security and troubleshooting needs.
Marketing preferences are retained until you opt out or your account is deleted.

When personal information is no longer needed, we delete or de-identify it in accordance with our retention practices, subject to backup rotation and legal retention requirements.

9. Security

We implement technical and organizational measures designed to protect personal information, including encryption in transit, access controls, monitoring, and secure development practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If you believe your account has been compromised, contact us promptly at legal@moregoodreviews.com.

10. Your Rights and Choices

Depending on where you live, you may have rights regarding your personal information.

10.1 Account Information

You can access and update much of your account information by signing in to MGR and visiting your profile and project settings. You may delete your account by contacting us unless retention is required by law or legitimate business needs.

10.2 Marketing Communications

You may opt out of promotional emails by using the unsubscribe link in those messages or by contacting us. We may still send service-related communications that are necessary to administer your account.

10.3 Cookie Preferences

You can adjust non-essential cookie settings through our cookie consent tools. Essential cookies necessary for security and core functionality may not be disabled through those tools.

10.4 Rights for EEA, UK, and Swiss Residents

If GDPR or UK GDPR applies to our processing of your personal information as controller, you may have the right to:

request access to your personal information;
request correction of inaccurate information;
request deletion of your personal information;
request restriction of processing;
object to certain processing;
request data portability; and
lodge a complaint with your local supervisory authority.

Our legal bases for processing include performance of a contract, legitimate interests (such as securing and improving the Services), compliance with legal obligations, and consent where required.

10.5 Rights for U.S. Residents

Residents of California and certain other U.S. states may have additional rights, including the right to know categories of personal information collected, sources, purposes, and disclosures; the right to delete personal information; the right to correct inaccurate information; and the right to opt out of sale or sharing (which we do not engage in as described in Section 4.6).

We will not discriminate against you for exercising privacy rights permitted by law.

10.6 Submitting a Request

To exercise applicable rights, use our Data Subject Access Request page or email legal@moregoodreviews.com with enough information for us to verify your identity and describe your request. We will respond within the timeframe required by applicable law.

If you are an end customer of one of our business customers and want to access, correct, or delete personal information that customer controls through MGR, please contact that business directly. We will assist our customers in responding to such requests as required by our agreements and applicable law.

11. Children's Privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe we have collected personal information from a child under 16, contact us and we will take appropriate steps to delete it.

12. Third-Party Links and Services

Our websites and Services may contain links to third-party websites, review platforms, or services that we do not control. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies before providing personal information to them.

13. White Label and Agency Accounts

If you access MGR through a white-label or agency-branded domain, the agency operating that domain is MGR's customer and may display its own branding, support contacts, footer content, and legal notices in the Agency Portal or on customer-facing pages.

MGR remains the provider of the underlying platform and processes personal information as described in this Privacy Policy and in our Data Processing Agreement, unless the agency has entered a separate agreement with you that clearly states otherwise for specific processing activities.

If you are an agency's Client (a portal user invited by an agency), contact the agency for questions about how it handles your account information. If you are an end customer of a business using MGR (for example, you received a review request or submitted a review), contact that business first.

Agencies using white-label features must also comply with Section 9 of our Terms of Service.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by posting the updated policy on our website, updating the "Last Updated" date above, and, where appropriate, notifying Account Holders by email or in-product notice. Your continued use of the Services after the effective date of an updated Privacy Policy constitutes acceptance of the changes, except where further consent is required by law.

15. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact:

SJW Group, Inc., a New York corporation, d/b/a More Good Reviews
Email: legal@moregoodreviews.com
Address: 525 E 14th St 7H, New York, NY 10009, United States