Review LeaderboardPrivacy Policy
Last updated: October 19, 2026
This policy explains what Next Genesis LLC ("we") collects through Review Leaderboard (the "App"), why, and what we do with it.
Who decides what. The App is a business tool. The business that installs it (or the agency that installs it for that business) is our customer. For the data about its team and its customers' scans, that business is in charge (the "controller") and we process the data on its behalf (we're its "processor" or "service provider"), under the data processing terms in section 6 of our Terms of Service. For the business's own account details and for keeping the App secure, we decide how the data is used. If you are a team member or a customer of a business that uses the App, please contact that business first; we'll help it answer you.
What we collect
About the business (from the CRM when you install, with your permission): business name, address, time zone and logo link; the CRM account and sub-account IDs; install, plan and trial status. We also keep the Google listings we found for your business (name and address of up to three matches) so you can pick the right one.
Set by your team in the App: team member display names on badges, your review page links (Google or Facebook), your settings, and a log of changes (badge names before and after, count resets, link and setting changes, and whether each change was made in the CRM or from a manager phone link).
When a customer scans a badge: the time, which badge was scanned, and two one-way codes: one made from the scanner's internet address and browser type, one from the internet address alone (for IPv6, the network part of it). The codes let us count one scan per phone per badge per day and stop scripted floods. We never store the internet address itself in our database. The codes are made with a secret key, so nobody without that key can work them back into an address, and we don't try to. We don't collect customers' names, phone numbers, emails or locations, we don't record scans from link previews or bots, and the scan link sets no cookies. The App can't tell whether the customer went on to write a review.
Sign-in and security: when a user opens the App in the CRM, the CRM sends us their user ID, role and account. We use them to give the right access; we don't save them in our database, they travel in a sign-in token that expires after 12 hours. Install tokens are stored encrypted. Manager phone links are stored only as one-way codes. The App's pages save a few display preferences (such as a hidden tips panel) in your browser's local storage; there are no tracking or advertising cookies.
Hosting logs: our hosting provider, Cloudflare, keeps request and error logs for security and troubleshooting. These can include the internet address, browser type and the page address of a request, and are kept for up to 7 days. Cloudflare also uses internet addresses to block attacks and floods before they reach the App.
Support emails: if you email us, we keep the email and our reply.
What we use it for
To run the App (set up your account, count scans, show the leaderboard and cards), find your Google listing, keep the App secure and prevent abuse, answer support requests, and fix and improve the App. We don't sell personal data, share it for advertising, use it for targeted advertising or profiling, or share it with other customers.
Who else handles it
- Cloudflare, Inc. hosts the App, its database and its logs (cloudflare.com/privacypolicy). The database is stored in western North America.
- The CRM platform and its app marketplace, which you chose and contract with directly, provide sign-in, install, and billing. We read your business details from it with your permission. Its own privacy policy covers what it does.
- treg (treg.to), a data service, and the Google Maps search provider it uses, receive your business's name and address when the App looks up your Google listing at setup (up to three tries), and your listing's public ID once a day to read your Google review count and rating. No team or customer data is sent.
- Google LLC (Google Workspace) hosts our email, including support emails (policies.google.com/privacy).
- Google and Facebook: when a customer scans a badge, they leave the App and go to your review page on that site. Our link doesn't pass on where they came from. What happens there is covered by that site's own privacy policy.
We'll update this list at least 30 days before adding a new provider that handles personal data. We may also disclose data if the law requires it, to protect the App or its users, or to a buyer if the App is sold (and we'll tell you).
How long we keep it
- While the App is installed: your settings, badges, change log and scan history (with their coded values), so the year and all-time totals stay correct.
- After you uninstall: 30 days, so a reinstall restores everything, then deleted automatically. Install tokens are deleted at once when you uninstall. Deleted data can remain in Cloudflare's database restore history for up to 30 more days.
- Hosting logs: up to 7 days.
- Support emails: as long as needed to help you, then deleted after 2 years.
Team member cards
Each team member's card link shows only that person's name, their own scan counts and their rank. Anyone with the link can open it, so share it only with that person. Admins can rename or reset a badge at any time, which changes what the card shows.
Your choices and rights
Account admins can see, change and reset the data in the App. To get a copy, correct something, or have your account's data deleted sooner, email matt@nextgenesissites.com; we'll confirm the request comes from your account and answer within 30 days. If we can't do what you ask, we'll explain why, and you can ask us to reconsider by replying.
Privacy laws in some states (for example Colorado and California) give individuals rights to access, correct and delete personal data. Because we process the App's data for the business that uses it, we pass those requests to that business and help it answer. The scan codes can't usually be tied to a named person, so in most cases we can't find "your" scans.
Security
Data is sent over HTTPS. Install tokens are encrypted, manager links are stored only as one-way codes, each account's data is kept separate and checked by automated tests, and requests are rate limited. Only the owner of Next Genesis can sign in to the Cloudflare account that holds the database. No system is perfectly secure; if a breach affects your data, we'll tell the account's admin or agency without undue delay.
Children
The App is a business tool and isn't directed to children. We don't knowingly collect personal information from children under 13.
Where the App is offered
The App is offered to businesses in the United States, and data is processed in the US and on Cloudflare's global network.
Changes
We'll post any change here with its date, and give account admins at least 30 days' notice of material changes in the App or by email.
Contact
Next Genesis LLC · 3009 Grandview St, Colorado Springs, CO 80907 · matt@nextgenesissites.com