QR review assistant with owner control of what goes public

• Review assistant
• API reference

  Free-tier host; first request may take a moment to wake.

Local businesses want more reviews without gaming platforms or posting on the customer's behalf. Guests abandon long forms on their phones after a visit. Owners need a fast path that still produces specific feedback, plus clear control over what stays on the platform, what stays private, and what can reach a public review site only when the customer chooses to finish it.

• Guest routes stay public and separate from the authenticated owner dashboard.
• Submit always persists on the platform first. The server does not post to third-party review sites.
• Generated copy is reviewed or edited before it is kept. Submit requires the customer's final text.
• The legacy POST /feedback/generate endpoint is stateless smoke-test tooling only. The QR flow uses Public session endpoints.
• Google review handoff returns a URL for the customer to complete. The server does not post to Google on their behalf.

• Built a QR-driven review assistant: guest scans, rates with stars first, taps preset answers for visit areas, receives an AI draft, edits it, then submits.
• Owners register, log in, and manage businesses with review settings, logos, tags, and a configurable minimum rating for public handoff.
• Owners download review QR codes as PNG or SVG and filter submitted sessions by public or private visibility.
• Owners import assessment templates (general service, salon, restaurant, clinic) or manage departments, questions, and dropdown options.
• High ratings can offer a Google review URL the customer opens themselves. Lower ratings stay private with the owner.
• Owners connect their own website or app via webhook or REST with API key, Bearer, or HMAC auth. Connections can be tested, and failed deliveries retried.
• Owners view basic analytics for the last 30 days from the dashboard.
• Documented the full API in OpenAPI 3 with JWT bearer auth on owner routes.

• One product surface: a public guest flow and an authenticated owner dashboard.
• Public session pipeline: create session, generate AI draft from rating and answers, submit with edited text, route visibility by rating threshold, optionally deliver to owner connections.
• Persistence on the platform before any optional public-review handoff. Google redirect is a client-side URL, not a server-side post.
• Owner modules for auth (register, login, single-use refresh rotation), businesses, assessment questionnaires, and outbound connections with test and retry paths.