Testimonial data security and how we handle your data
TestimonialScraper works with public reviews and with imports you are entitled to use. This page explains what we store, what we never collect, how access is controlled and how you delete your data, so your security and legal teams can review it before you sign up.
Public data only
The product is built on a simple rule: we only work with content that is already public or that you have the right to give us.
- Public reviews gathered through official interfaces, public feeds and public pages that allow it
- Exports you own, such as your own testimonial forms, NPS answers, support ticket exports and CSV files
- No private messages, private groups, closed communities or content behind someone else's login
- No passwords to third party accounts, ever
- No scraping that breaks a site's terms
Every quote keeps the author exactly as the source published it and a link to the original. We never add names, roles, companies or ratings that the source did not publish, and we never connect a public username to a real person.
What we store and what we do not collect
| We store | Why |
|---|---|
| Quotes from public reviews and your imports | To score, group and publish them |
| Author details as published by the source | To show who said it, exactly as the source shows it |
| Source name, review date, rating where published and link | So every quote can be checked against the original |
| Your settings, widgets, filters and approvals | To run your workspace |
| Your account email, team members and roles | To let your team log in and control access |
| Billing records | To charge your plan and issue receipts and invoices |
What we never collect
| We do not collect | Why not |
|---|---|
| Card numbers | Payments are handled by a payment processor, and we never see or store full card details |
| Private data of reviewers beyond what the source published | We do not need it and do not look for it |
| Visitor personal data from your widgets | Widgets serve quotes from a cache and set no tracking cookies |
| Passwords to review sites or app store accounts | Optional connections use official authorization, never shared passwords |
When you import your own files, such as NPS exports or support tickets, only the fields needed to show a quote are kept. Contact fields such as email addresses or phone numbers in those files are dropped during import and never shown in a widget.
How data is protected
- Encryption in transit. Every connection to the app, the client portal, the widgets and the API uses HTTPS.
- Access by role. Every workspace member has a role per brand, such as admin, editor or viewer, and sees only the brands they are given.
- Separate brands. Each brand has its own register, widgets and reports. On White Label, each client sees only their own brand in the portal.
- Single sign on. Agency includes Google single sign on. White Label includes SAML single sign on, so your identity provider controls who gets in and who is removed.
- Audit log. White Label keeps an audit log of sign ins, role changes, approvals, exports and settings changes.
- Email confirmation. Every new account confirms its address with a code before it can be used.
We do not claim certifications we do not hold. If your review needs specific answers, write to us and we reply with the facts.
Data deletion and removal requests
You stay in control of the data in your workspace, and people quoted in public reviews can ask us to remove them.
- Hide any quote with one click. It disappears from every widget and wall on the next refresh.
- Delete a brand, and its register, widgets and reports are deleted with it.
- Close your account, and your workspace data is deleted. Billing records are kept only as long as tax law requires.
- Quotes are removed automatically when the original review or post is deleted at the source.
- A reviewer or author who wants a quote removed can write to [email protected], and we remove it from every workspace that shows it.
Deleting data never resets the usage you already had in a billing period. Read the details in the privacy policy and the terms of service.
Security questions
Do you need passwords to our review profiles?
No. Public pages are enough for most sources. Optional connections, such as your own app developer accounts, use the official authorization of that platform.
Which plans include single sign on?
Agency includes Google single sign on and roles. White Label adds SAML single sign on, an audit log, invoices and an uptime commitment. See the pricing page and the page for review management platforms for agencies.
Do the widgets track our visitors?
No. Widgets serve quotes from a cache and set no tracking cookies, so they add nothing to your cookie notice.
Can we get our data out?
Yes. Export your quotes to CSV on every plan, and to JSON on Growth and higher. White Label adds API and webhooks.
Who do we contact with a security question?
Write to [email protected]. The contact page lists other ways to reach us.
Start with public reviews you already have
See how TestimonialScraper handles your reviews before you buy. Every plan is paid. The demo on the homepage needs no card.