Your feedback,
handled thoughtfully.
Privacy notice · Updated 2026-09-16
GreatFeedback.ai is operated by ML LABS. This notice describes the data the service processes. Questions or requests can be directed to omar@mllabs.com.
Account and workspace information
We store the name, email, optional profile photo, preferences, plan preference, and workspace memberships you provide. Authentication is managed through Better Auth in the deployed service. Workspace roles determine who may read or change feedback. Connection secrets for TopDo are encrypted before storage.
What the widget shares
The widget sends a visitor’s chosen message and category, optional email and rating, page address without query parameters or fragments, viewport size, and an optional selected element label and position. It does not silently record browsing sessions, capture screenshots, read form values, or set tracking cookies. Request network information is processed for delivery and abuse protection; stored rate-limit identifiers use a keyed hash rather than a raw IP address.
The website owner receives and controls the feedback in their workspace. Visitors should avoid including passwords, payment data, sensitive personal information, or confidential information in their comments.
AI website reviews
When a workspace user starts a review, GreatFeedback retrieves public website text and links and sends bounded excerpts, the chosen perspective, and the review goal to Anthropic to generate feedback. Reports retain observed excerpts and source URLs. Do not request reviews of content you are not authorized to submit for processing. AI output may contain mistakes and should be assessed by a person.
Connected services
Amazon Web Services hosts authentication, API processing, data, and background review jobs in the US East (Northern Virginia) region. Cloudflare delivers the website and widget. Anthropic processes AI review requests. Stripe processes subscription billing when payments are enabled. When you explicitly send an item to TopDo, its text, evidence, and source link are delivered to your configured TopDo workspace.
Retention and control
Workspace feedback and reviews remain available until removed through an operator-assisted deletion request. Application and account records are retained while the account is active. Operational logs are configured for 30 days in the deployed service; short-lived verification, rate-limit, and deduplication records expire on their respective schedules. Backups may retain deleted records for their configured recovery period.
You can edit your profile, remove your photo, disconnect TopDo, revoke invitations, remove teammates, and export feedback. Account and workspace deletion are currently handled by request. We do not sell account information or visitor feedback.
Cookies and local storage
The application stores authentication state and your theme/workspace preference in your browser. The feedback widget does not use cookies or persistent browser storage. Public marketing pages can load Google Analytics and Microsoft Clarity only after you allow analytics. Clarity records masked interactions. Authentication, private workspaces, form values, query strings, and widget host pages are excluded. Do Not Track and Global Privacy Control prevent analytics. Clear this site's browser data to reset your choice.
Security and changes
We use HTTPS in the deployed service, role-based access, encrypted connection credentials, input limits, and guarded outbound requests. The service is evolving, and this notice will be updated when processing changes. No certification or compliance status is implied.