Privacy Policy

1. Information We Collect

We collect information that you directly provide when you register, create a QR code, initiate a payment, or contact our customer support:

• Business & Contact Information: Business name, business category, Google Maps / Google Review page URL, WhatsApp / contact phone number, owner name, and owner email address provided via forms or Google OAuth.
• Account Authentication Data: When signing in via Google OAuth, we receive basic profile info (email address, full name, profile picture) to securely authenticate your session.
• Customer Feedback & Review Input: Feedback, ratings, and prompt selections entered by your customers when scanning your QR code to draft a review or submit private negative feedback.
• Payment & Transaction Data: When purchasing an annual subscription, we record the transaction reference ID, payment status, amount paid, timestamp, and payment method (e.g. UPI, Card, Net Banking).

2. How We Use Your Information

We use the collected information solely for genuine operational purposes:

• To generate, activate, and host your personalized ReviewQR code and dynamic review URL.
• To provide the AI-assisted review generation feature for your store’s customers.
• To generate high-resolution print files and tabletop display materials for your physical establishment.
• To process payments and issue subscription confirmation receipts.
• To route customer feedback: directly launching Google Review submission for positive experiences, or routing constructive feedback privately to the business owner.
• To provide customer support, troubleshoot technical issues, and communicate account notices.
• To comply with statutory legal, tax, and regulatory compliance obligations in India.

3. Third-Party Service Providers

We do not sell, rent, or trade your personal data to marketing companies or advertisers. We share information only with trusted third-party providers who assist us in operating our platform:

4. Cookies and Tracking

We use strictly necessary cookies to maintain your login session (e.g. NextAuth authentication tokens) and protect against Cross-Site Request Forgery (CSRF). We do not deploy third-party advertising tracking cookies or behavioral tracking networks.

5. Data Storage, Security & Retention

We implement industry-standard administrative, technical, and physical safeguards:

• All web traffic is transmitted via Transport Layer Security (TLS / HTTPS with 256-bit encryption).
• Data is stored in secure database clusters with encryption at rest and role-based access restrictions.
• We retain your business account data for as long as your account remains active or as required by applicable Indian legal, financial, and tax record-keeping regulations.

6. Your Rights and Data Deletion

Under applicable data protection laws, you have the right to:

• Request access to the personal data we hold about you.
• Request correction or updating of inaccurate business information.
• Request deletion of your account and associated QR codes ("Right to be Forgotten").
• Withdraw consent for optional communications at any time.

To exercise any of these rights, email us at bangarabhay78@gmail.com. We will verify and process your request within 30 days.

7. Policy Updates

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Any modifications will be posted directly on this page with an updated "Last Updated" timestamp. We encourage you to review this page periodically.