Effective date: May 31, 2026 · Last updated: May 31, 2026
This Privacy Policy describes how DevelopingRiches Inc., a California C-Corporation doing business as ReviewBombz, collects, uses, shares, and protects information about the small business owners and operators who use our reputation monitoring and crisis response service. We wrote this in plain English on purpose. If anything is unclear, email us and a human will answer.
ReviewBombz is a product of DevelopingRiches Inc., a California C-Corporation headquartered in Long Beach, California. Our authorized representative for privacy questions is the Privacy Officer at DevelopingRiches Inc. You can reach us at [email protected] for any privacy or data request, and a human team member will respond within five business days. The ReviewBombz service operates exclusively in the United States and is intended for U.S.-based small business owners.
Mailing address: DevelopingRiches Inc., Long Beach, California, United States. Specific street address available on request for any customer with a legal or regulatory need to send physical correspondence.
We collect the minimum information needed to monitor your business reviews, respond to a crisis on your behalf, and bill you for the service. Specifically:
When you sign up we ask for your business name, the city and state where the business operates, a contact phone number, and an email address. If you want us to monitor multiple locations we also ask for each location's address and the public listing identifiers (Google Place ID, Yelp business ID, Facebook page ID, TripAdvisor location ID, etc.) that you authorize us to watch on your behalf.
All payments are processed by Stripe. We never see or store your full credit card number, CVV, or bank routing information. Stripe returns a tokenized customer ID and the last four digits of your card so we can show you what is on file inside the billing portal and so we can charge renewals at your direction.
To detect coordinated review attacks we periodically retrieve public reviews from third-party platforms (Google Business Profile, Yelp, Facebook, TripAdvisor, and similar) using the Outscraper API. These reviews are already public on the platform; we do not collect or scrape any private data, account credentials, or content behind a login wall. We store the review text, star rating, reviewer display name (as it appears publicly), timestamp, and the platform of origin so that we can compare scans over time and detect a sudden cluster of negative activity.
When our system, including the AVA voice agent, contacts you or you contact us, we log the timestamp, channel (call, SMS, email), and outcome (delivered, answered, opted out, etc.). For voice calls we additionally retain call duration and, when consent has been captured, an audio recording (see section 5).
We log which pages of the customer dashboard you visit, which reports you download, and which response templates you accept or decline. This helps us improve detection accuracy and the quality of the response copy we recommend.
ReviewBombz monitors publicly available review platforms (Google, Yelp, Facebook, TripAdvisor) on behalf of our paying customers. As a necessary part of providing this monitoring service, we collect and process limited public information about three categories of non-customer third parties:
Reviewers who post reviews on the platforms we monitor. We collect: the reviewer name or username as displayed publicly, the star rating, the review text, the date of the review, and the platform where it appeared. We do not contact reviewers. We do not aggregate this data across platforms or businesses for any purpose other than serving the monitored business. We do not sell or share reviewer data with third parties.
Non-customer businesses that appear in our system when a free reputation scan is run by a visitor. We collect: business name, address, public Google Place ID or equivalent, public rating, public review counts, and category. This data is retained for up to twelve months for service-quality and lead-conversion purposes, then deleted unless the business becomes a paying customer.
Competitor businesses that a paying customer designates for competitive monitoring as part of the Elite Protection tier. We collect the same public business data described above for designated competitors and surface that data only to the requesting customer.
For all three categories, the data we collect is limited to information that is publicly available on the source platforms. We do not derive private information about any non-customer. Non-customer individuals or businesses may request deletion of any data about them in our system by emailing [email protected] and we will comply within 30 days unless legal hold applies.
We use the data we collect for two purposes and two purposes only: (a) to deliver the ReviewBombz monitoring and crisis response service that you have paid for, and (b) to operate our business in compliance with the law (taxes, accounting, fraud prevention, regulatory disclosures). Specifically that means:
We never sell, rent, lease, or trade your personal data, your business information, or your monitored review history to any third party for marketing or any other purpose. We do not run an advertising business and we do not have an advertising data partner.
We rely on a small set of vetted vendors to deliver the service. Each one is contractually bound to use your data only for the purpose we tell them to, and each one is listed below in plain English so you can audit our supply chain.
AVA is the artificial intelligence voice agent we use to deliver Crisis Kit follow-ups, urgent monitoring alerts, and time-sensitive customer onboarding calls. By signing up for ReviewBombz you give explicit, informed consent for AVA to place outbound calls to the phone number you provided at signup, and you give explicit, informed consent for those calls to be audio-recorded for quality, training, and dispute-resolution purposes.
Every AVA call opens with an audible notice: "This call is being recorded and you are speaking with an AI assistant." The notice plays before any other conversation begins, and the call continues only if you do not object.
If you want a specific recording deleted, or you want to revoke recording consent for all future calls, email [email protected] with the date and time of the call (for a specific recording) or the words "revoke recording consent" (for all future calls). We will delete the recording within ten business days and confirm the deletion in writing. Revoking recording consent does not cancel your subscription, but it does mean AVA will no longer call you and our team will reach out by SMS or email instead.
AVA is an artificial intelligence voice agent, not a human caller. Pursuant to the Federal Communications Commission's February 2024 declaratory ruling that calls using AI-generated voices are "artificial" under the Telephone Consumer Protection Act, we make the following disclosure at the start of every AVA call:
If you ever want to confirm that a call you received was in fact from AVA, email us with the date and time and we will pull the matching call log and recording from our system. We keep AVA call logs for 24 months for compliance audit purposes.
All transactional and promotional SMS from ReviewBombz is sent from 866-621-7044, an Application-to-Person 10-Digit Long Code (A2P 10DLC) number registered with The Campaign Registry under DevelopingRiches Inc. as the brand. Our campaign is registered as a low-volume customer care and monitoring alert campaign and we do not send mass-marketing blasts.
The first SMS you receive from us in any new conversation includes our identity ("ReviewBombz") and an instruction line that says "Reply STOP to opt out, HELP for help." Standard message and data rates from your wireless carrier may apply. We honor STOP and HELP keywords automatically and instantly across every campaign and product in the KJE family.
If you opt out by replying STOP, your number is added to our internal suppression list within seconds and is propagated to the empire-wide KJLE suppression list within minutes, which means you will not receive SMS from any KJE-operated product going forward.
Before our system places any outbound voice call or sends any outbound SMS that is not strictly transactional (for example a receipt or a direct reply to your inbound message), the destination phone number is scrubbed against the following lists:
If a number appears on any of the four lists above, the call or SMS is blocked at the dispatch layer before it ever reaches the carrier. KJLE is the empire-wide source of truth for opt-outs, which means an opt-out you give to ReviewBombz is automatically honored by every other KJE product, and vice versa. We mention KJLE by name here so that you understand the shared infrastructure and can request a full account-wide opt-out across all KJE products if you wish.
Reviewbombz.com is intentionally lightweight. We use a single first-party session cookie to keep you logged in to the customer dashboard, plus Cloudflare's privacy-respecting analytics, which records aggregate page-view counts without setting tracking cookies and without sending your IP address to any third party. We do not use Google Analytics, Facebook Pixel, TikTok Pixel, LinkedIn Insight Tag, or any other third-party advertising tracker. We do not retarget you on social networks. We do not sell or share data with any data broker.
You have the following rights with respect to the personal information we hold about you:
To exercise any of these rights, email [email protected] with the subject line "Privacy Request" and we will verify your identity (typically by sending a confirmation code to the email or phone number on file) and respond within 30 days. California residents can also designate an authorized agent to make a request on their behalf.
We retain data for the minimum period needed to deliver the service and to comply with applicable law:
When a retention period expires, the underlying data is deleted from our primary database and from any backup copies on a rolling 30-day cycle.
We take reasonable and appropriate steps to protect your data:
No system is perfect. If we ever experience a security incident that affects your personal information, we will notify you by email within 72 hours of confirming the scope of the incident, in accordance with applicable state breach notification laws.
ReviewBombz is a business-to-business service intended exclusively for adults who own or operate a small business. The service is not directed at children under 18 and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it.
ReviewBombz is a United States-only service. Our servers, our processors, and our team operate inside the United States. If you access the service from outside the United States, you understand and consent to the transfer, storage, and processing of your personal information inside the United States, where data protection laws may be different from those in your country of residence.
We may update this Privacy Policy from time to time. If we make a material change — for example adding a new third-party processor, changing how we handle DNC scrubbing, or extending a retention period — we will notify all active customers by email and by an in-dashboard banner at least 30 days before the new policy takes effect. The "Effective date" at the top of this page will always reflect the version currently in force.
Privacy questions, data requests, complaints, and recording deletion requests all go to the same place:
Privacy Officer, DevelopingRiches Inc.
DevelopingRiches Inc., Long Beach, California
Email: [email protected]
SMS: 866-621-7044 (reply HELP for instructions)
We respond within five business days for routine inquiries and within 30 days for formal privacy rights requests.