Privacy Policy

1. Introduction

This policy explains what data Agentic Review collects through the Agentic Review MCP server, how we use it, who we share it with, how long we keep it and the controls you have. It is written in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the California Consumer Privacy Act (CCPA).

Agentic Review is a tool your AI agent (for example ChatGPT or Claude) connects to in order to find restaurants that match your personal taste. Because the tool receives information about your preferences, this page describes exactly what we receive and what we do with it.

2. Data we collect

What your agent sends us when you search

• Your taste profile: the cuisines, dishes, budget band, atmosphere and dietary preferences you express or that your agent infers about you, so we can understand the kind of person behind the request.
• Where and what you are searching for: the location (city, neighbourhood or area) and cuisine or food type you ask your agent to look for.
• Verification data: when you verify through a third-party provider we receive your unique identifier and email address.
• Technical data: hashed IP addresses, client type and session tokens needed for security and bot detection.

What we receive when you leave feedback

• Restaurant feedback: if you ask your agent to record feedback about a restaurant you visited, we store what you said about it (for example whether you enjoyed it and why). This is described in section 5.

What we do NOT collect

• We do not see or store your conversations with your AI agent beyond the structured inputs described above.
• We do not collect payment details, precise GPS location, contacts or browsing history.

3. How we use your data

Our core purpose is matching you with the right restaurant. We use your taste profile and the location you are searching in to build a picture of what you personally enjoy, and we compare that against restaurant characteristics and aggregated reviews to find the places most likely to suit you — not a generic average. This is why a 4.8 restaurant for someone else may not be the 4.8 for you.

We also use data to operate and secure the platform: preventing abuse by unauthorised bots, maintaining the integrity of the review ecosystem, and improving recommendation quality.

Legal bases (GDPR): contractual necessity for providing recommendations you request, and legitimate interest for security and service improvement. We do not sell personal data and we do not use your taste profile for advertising.

4. Recipients and third-party sources

We aggregate reviews from public sources including Google Maps, Yelp, TripAdvisor and Trustpilot. We store AI summaries of those reviews rather than the raw third-party review text, and we never expose that raw text through our API.

We do not sell your data. We share it only with service providers strictly necessary to run the service — such as our hosting and database providers — under data-processing agreements, and with authorities where required by law. Your agent (for example ChatGPT or Claude) remains the controller of its own data about you; we act only on what it sends to this tool.

5. Restaurant feedback you write

You can write feedback about a restaurant through your agent. We store that feedback and use it for two things only:

• To improve your own future recommendations, by learning what you liked or disliked.
• To help people with similar taste, by folding your signal into personalised recommendations for others whose taste profile resembles yours.

Importantly, your feedback is never shown to anyone exactly as you wrote it. It is never published verbatim. We only use it as an aggregate, personalisation signal — the words you wrote stay yours.

6. Retention

• Taste profiles and search data are kept for as long as your account is active so recommendations stay accurate.
• Agent feedback follows a 30-day soft-delete policy, after which it is permanently scrubbed from active databases.
• Inactive accounts are purged after two years of inactivity.

7. Your rights and controls

• Access: ask what data we hold about you.
• Deletion: ask us to delete your data at any time — including your taste profile, search history and any restaurant feedback you wrote — and we will delete it.
• Correction and portability: ask us to correct or export your data.
• Objection and restriction: object to or restrict processing of your data under GDPR.
• CCPA: California residents may request to know, delete, and opt out of any sale or sharing of personal information (we do not sell it).

To exercise any of these rights, contact dev@agentireview.io. We respond within 30 days.

8. Security

Data is encrypted in transit and at rest, access is restricted to personnel who need it, and bot-detection controls protect the integrity of the review ecosystem.

9. Changes to this policy

We will update this page when our data practices change and revise the "last updated" date above. Material changes will be highlighted on the site.

10. Contact

Questions about this policy or your data: dev@agentireview.io.