Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Grade.us is a review management platform that helps businesses collect, display and respond to customer reviews across Google, Facebook and other review sites.
Grade.us is a review management platform for agencies and SMBs that automates the collection, monitoring, and display of customer reviews across Google, Facebook, Trustpilot, and dozens of other directories. It provides email and SMS review invitation flows, embedded review widgets, and reputation reporting dashboards.
Grade.us sets first party cookies on the embedded widget (gradeus_session for the current visit, gradeus_uid for twelve months to recognise returning visitors). It also stores reviewer name, email, phone, and the review text in its US based databases. Customer contact data sent through the platform (for invitations) is processed on US infrastructure.
Consent is required for the website cookies (Art. 5(3) ePrivacy). The review collection itself can rely on consent (Art. 6(1)(a)) or contract performance (Art. 6(1)(b)) depending on the relationship. Review invitations by email or SMS need explicit ePrivacy consent unless the soft opt in for similar services applies. Under the EU Omnibus Directive you must disclose how reviews are collected and verified.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Grade.us is operated from the United States by Traject. Personal data is transferred to the US under Standard Contractual Clauses and the EU, US Data Privacy Framework where applicable. Document this in your records of processing.
The Omnibus Directive (2019/2161) requires businesses to disclose how reviews are collected, whether they verify reviewers, and to avoid suppressing negative reviews. Grade.us features that funnel positive reviewers to public sites and negative reviewers to private feedback channels can be problematic if not disclosed transparently.
Sign a DPA with Grade.us, gate the widget cookies behind consent, disclose your review collection process on your website (Omnibus requirement), retain reviewer contact data only as long as needed, and ensure your invitation emails carry an opt out per ePrivacy.
Websites using Grade.us must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended when Grade.us is used to systematically profile reviewers or filter negative reviews, as this may raise Art. 35 GDPR concerns.
Sample consent text
We use Grade.us to invite reviews and display customer feedback. With your consent, Grade.us may set cookies to track interaction with our review pages.
Third-party domains contacted
grade.usapp.grade.uswidget.grade.usCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| gradeus_session | first_party | Session | Session identifier for the review widget |
| gradeus_uid | first_party | 12 months | Pseudonymous identifier for returning visitors |
| gradeus_pref | first_party | 12 months | Stores reviewer language and channel preferences |
Grade.us places tracking cookies for advertising — comply with GDPR using FlowConsent.
First party cookies gradeus_session (session), gradeus_uid (twelve months), and gradeus_pref (twelve months).
Yes for the widget cookies. The review collection itself can rely on consent or contract. Marketing emails require ePrivacy consent.
Consent for cookies and email invitations. Contract or consent for the review record. Omnibus disclosure obligation for review presentation.
Yes. Grade.us is US based. Use SCCs and the EU, US Data Privacy Framework where applicable.
Generally no for standard review collection. Yes when combined with systematic profiling or negative review filtering at scale.
Sign a DPA, block widget cookies until consent, publish a clear review collection notice (Omnibus), retain reviewer data only as needed, and respect opt outs on invitations.
Trustpilot Business (EU based), Avis Verifies (FR), eKomi (DE), Reevoo, and self hosted review widgets.
List the gradeus_ cookies, the grade.us domains, retention periods, and link to the Grade.us privacy policy.