Your feedback,
handled thoughtfully.
Private beta privacy notice · Updated September 6, 2026
GreatFeedback.ai is operated by ML LABS. This notice describes the data this private beta processes. Questions or requests can be directed to omar@mllabs.com.
Account and workspace information
We store the name, email, optional profile photo, preferences, beta application, and workspace memberships you provide. Authentication is managed through Amazon Cognito in the deployed service. Workspace roles determine who may read or change feedback. Connection secrets for TopDo are encrypted before storage.
What the widget shares
The widget sends a visitor’s chosen message and category, optional email and rating, page address without query parameters or fragments, viewport size, and an optional selected element label and position. It does not silently record browsing sessions, capture screenshots, read form values, or set tracking cookies. Request network information is processed for delivery and abuse protection; stored rate-limit identifiers use a keyed hash rather than a raw IP address.
The website owner receives and controls the feedback in their workspace. Visitors should avoid including passwords, payment data, sensitive personal information, or confidential information in their comments.
AI website reviews
When a workspace user starts a review, GreatFeedback retrieves public website text and links and sends bounded excerpts, the chosen perspective, and the review goal to Anthropic to generate feedback. Reports retain observed excerpts and source URLs. Do not request reviews of content you are not authorized to submit for processing. AI output may contain mistakes and should be assessed by a person.
Connected services
Amazon Web Services hosts authentication, API processing, data, and background review jobs in the US East (Northern Virginia) region. Cloudflare delivers the website and widget. Anthropic processes AI review requests. Stripe processes subscription billing when payments are enabled. When you explicitly send an item to TopDo, its text, evidence, and source link are delivered to your configured TopDo workspace.
Retention and control
Workspace feedback and reviews remain available until removed through an operator-assisted deletion request. Application and account records are retained while the account is active. Operational logs are configured for 30 days in the deployed service; short-lived verification, rate-limit, and deduplication records expire on their respective schedules. Backups may retain deleted records for their configured recovery period.
You can edit your profile, remove your photo, disconnect TopDo, revoke invitations, remove teammates, and export feedback. Account and workspace deletion are currently handled by request. We do not sell account information or visitor feedback.
Cookies and local storage
The application stores authentication state and your theme/workspace preference in your browser. The feedback widget does not use cookies or persistent browser storage. This rebuild does not load advertising pixels or third-party behavioral analytics.
Security and changes
We use HTTPS in the deployed service, role-based access, encrypted connection credentials, input limits, and guarded outbound requests. The beta is evolving, and this notice will be updated when processing changes. No certification or compliance status is implied.