Privacy Policy

Reputation Reactor

A Service of TimeHack Systems LLC

Effective Date: June 6, 2025

1 Introduction

Time Hack Systems LLC ("Company," "we," "us," or "our") operates Reputation Reactor, a review generation and reputation management service (the "Service"). We are committed to protecting the privacy of all individuals whose information we handle. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have.

This policy applies to (1) business owners who subscribe to our Service ("Clients") and (2) the customers of those business owners whose contact information is shared with us for the purpose of generating reviews ("End Users").

By using the Service or by providing us with information, you agree to the practices described in this policy.

2. Information We Collect

2.1 Information Provided by Our Clients

When a Client subscribes to Reputation Reactor, they provide us with contact information for their customers. This information may include:

• Full name

• Mailing address

• Phone number

• Email address

We also collect account and billing information from our Clients directly, including business name, contact details, and payment information necessary to administer the subscription.

2.2 Information We Collect Automatically

When End Users interact with review request messages we send on behalf of our Clients, we may automatically collect limited technical data, including whether a message was opened or clicked and the date and time of that interaction. We do not collect this data for advertising purposes.

2.3 Review Content

When an End User submits a review in response to our outreach, we collect the text of that review. By submitting a review, the End User consents to that review being posted publicly as described in Section 4 below.

3. How We Use Information

We use the information we collect for the following purposes:

• To send review request emails and SMS messages to End Users on behalf of our Clients

• To process and display submitted reviews on relevant platforms

• To manage and administer Client subscriptions and accounts

• To optimize Client Google Business Profiles and Facebook accounts as part of the Service

• To communicate with Clients about their accounts, the Service, and any updates

• To comply with applicable legal obligations

We do not sell End User personal information. We do not use End User information for any purpose beyond what is described in this policy without obtaining appropriate consent.

4. How and Where We Share Reviews

Our review process is designed to be fully transparent and compliant with the policies of all platforms we work with, including Google. We do not filter, gate, or selectively route reviews based on their content or star rating. Every review submitted through our system is treated the same way regardless of whether it is positive or negative.

When an End User submits a review through our system, that review may be posted publicly on the following platforms on behalf of our Client:

• Google Business Profile

• Facebook

• The Client's website, including a review carousel feature

• Other review sites and social media platforms that we use from time to time

All review requests we send direct End Users to submit their review on the public platform directly. We do not intercept, suppress, or redirect reviews based on rating before they reach any platform. This approach complies with Google's review policies, the Federal Trade Commission's guidelines on endorsements and testimonials, and applicable consumer protection law.

By submitting a review, End Users acknowledge and consent to that review being posted publicly on the platforms listed above. If you are an End User and you do not wish to have your review posted publicly, do not submit a review through our system. You may contact us at the address in Section 12 to request removal of a review you have already submitted, though we cannot guarantee removal of content that has been posted directly to third-party platforms.

5. Third Party Service Providers

We use third-party vendors to help us deliver the Service. These vendors receive access to personal information only as necessary to perform their functions and are not permitted to use it for other purposes. Our current primary service providers include:

• GoHighLevel: Our CRM and email delivery platform, which stores Client and End User contact information, manages outbound email communications, and powers our compliant review request workflow

• SignalHouse: Our SMS messaging provider, which processes phone numbers to send text message review requests

We may also use other third-party providers from time to time. All providers are contractually required to handle data in a manner consistent with this policy and applicable law.

7. Washington State Privacy Rights

We retain End User contact information within our GoHighLevel system for as long as the Client account remains active. When a Client terminates their subscription, we will delete or return their data upon written request. Clients may also request deletion of specific End User records at any time.

End Users who wish to have their information removed from our system should contact us directly at the information in Section 12. We will process deletion requests within 45 days and will notify the relevant Client of the request.

6. Data Retention

Time Hack Systems LLC operates in the State of Washington. Washington residents may have rights under applicable state law. We are committed to transparency and honoring individual rights, including:

• The right to know what personal information we hold about you

• The right to request correction of inaccurate information

• The right to request deletion of your personal information

• The right to opt out of future communications from us

To exercise any of these rights, contact us using the information in Section 12. We will respond within 45 days. We will not discriminate against you for exercising your privacy rights.

8. SMS and Email Communications

End Users receive review request messages because a Client has identified them as a past customer and provided their contact information to us. Each message we send will identify the Client on whose behalf it is sent and will include instructions for opting out of future messages.

If you receive an SMS message from us and wish to stop receiving messages, reply STOP at any time. If you receive an email and wish to opt out, use the unsubscribe link included in the message or contact us directly.

We comply with the Telephone Consumer Protection Act (TCPA), the CAN-SPAM Act, and all applicable Washington State communications laws.

9. Children's Policy

Our Service is designed for use by business owners and their adult customers. We do not knowingly collect personal information from individuals under the age of 13. If you believe we have received information from a minor, please contact us immediately and we will delete it.

10. Security

We take reasonable technical and organizational measures to protect the personal information we store against unauthorized access, disclosure, alteration, or destruction. These measures include secure storage within GoHighLevel's platform and access controls limiting who within our organization can view personal data.

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information using industry-standard practices.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this document. If the changes are material, we will notify active Clients by email. Your continued use of the Service after any update constitutes your acceptance of the revised policy.