Review is a private client-approval workspace operated by Petrichor Labs. It helps teams share campaign materials, collect comments, and record approval decisions.
What we collect
When you sign in, ConsentKeys provides a pseudonymous account identifier and the display name associated with your ConsentKeys account. Review uses that identity to grant project access and attribute comments and decisions. Review does not need your real name or email address to operate.
We collect the project content that an operator intentionally places in a review room: copy, creative previews, links, comments, decisions, and a limited audit trail of actions. We also receive basic technical information required to secure and operate the service, such as timestamps, browser requests, and error information.
How we use it
We use this information to authenticate reviewers, enforce project assignments, show the right revision, record change requests and approvals, protect the service, and respond to support requests. We do not sell personal information, build advertising profiles, or use review-room content to target you with ads.
Sharing and storage
Review uses ConsentKeys for authentication, Supabase for application data and private media storage, and Vercel for application hosting. Private media is served only to an authenticated reviewer with project access through short-lived links. We do not disclose QEO or another client’s project content to other clients.
Retention and deletion
Project owners control the content and can ask Petrichor Labs to correct or delete project material. Audit records may be retained when needed to preserve an accurate approval history. We retain account and security records only for as long as reasonably necessary to provide and protect the service.
ConsentKeys identity protection
If Review changes identity providers, or Petrichor Labs is sold or changes control, ConsentKeys must not reveal a user’s real identity unless the user first sees a clear warning and manually types I consent.
Your choices
You may stop using Review, ask the project operator to remove your assignment, or contact us about access, correction, or deletion. Authentication credentials are managed by ConsentKeys, not by Review.
Contact
For privacy questions, contact kris@petrichorlabs.ca.