Privacy Policy

1. Who We Are

BharatReviews ("we", "us", "our") is a QR-based review collection platform operated in India. Our platform helps businesses such as hotels, restaurants, hospitals, and clinics collect structured guest feedback and manage their online reputation.

For any privacy-related questions, contact us at hello@bharatreviews.app.

2. Data We Collect

We collect the following types of information:

a) Business Owner Account Data

• Name, email address, and phone number
• Business name, category, logo, and location
• Google review link and Place ID
• Plan and billing information

b) Guest Review Session Data

• Star ratings for individual dimensions (e.g. food, service, cleanliness)
• Free-text feedback and comments
• Selected tags and language preference
• Automated review draft text
• Whether the guest copied the review or submitted private feedback
• Guest name (only if voluntarily provided in private feedback)
• Phone number (only if voluntarily provided in private feedback)

c) Technical Data

• Browser type, device type, and screen resolution
• Session timestamps
• IP address (for security and abuse prevention only)

3. How We Use Your Data

• Operating the review collection flow for guests
• Generating smart review suggestions based on guest feedback
• Providing analytics dashboards and reports to business owners
• Sending email notifications (private feedback alerts, weekly reports, account updates)
• Sending WhatsApp notifications for private feedback (where enabled)
• Processing plan upgrades and billing
• Improving the platform and fixing issues

4. Automated Processing

When a guest completes the review flow, their ratings, tags, and free-text comments are processed by third-party services (such as OpenAI or Anthropic) to generate a personalised review suggestion. This text is returned to the guest for them to review, edit, and optionally post on Google.

We do not use guest feedback to train third-party models. The services we use process data according to their own privacy policies and data processing agreements.

5. Third-Party Services

We use the following third-party services to operate BharatReviews:

• Supabase (database hosting on AWS) — stores all application data
• Resend — sends transactional emails (OTP, notifications, reports)
• Meta WhatsApp Business API — sends WhatsApp notifications
• Google Places API — fetches business and review data for analytics
• OpenAI / Anthropic — powers review suggestions and feedback analysis
• Cloudflare — CDN, DDoS protection, and DNS

Each service processes data in accordance with their own privacy policies. We only share the minimum data necessary for each service to function.

6. Data Storage & Security

• All data is stored on Supabase, hosted on Amazon Web Services (AWS)
• Data is encrypted at rest and in transit (TLS/SSL)
• Passwords are hashed using bcrypt; we never store plaintext passwords
• Access to production databases is restricted to authorised personnel only
• We use row-level security (RLS) policies to ensure data isolation between businesses

7. Data Retention

• Business owner accounts and associated data are retained as long as the account is active
• Guest review sessions are retained indefinitely to power analytics and reporting
• If a business owner deletes their account, all associated business data and review sessions are permanently deleted within 30 days
• Private feedback messages are retained for the business owner to access until account deletion

9. Your Rights

For Business Owners

• Access, update, or delete your account and business data at any time
• Export your review session data by contacting support
• Request deletion of all your data by emailing us

For Guests

• You can request to know what data was collected about your review session
• You can request deletion of your session data
• Contact us at hello@bharatreviews.app or reach out to the business that collected your feedback

10. Children's Privacy

BharatReviews is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify registered business owners by email. The "Last updated" date at the top of this page indicates when this policy was last revised. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Payment Data

• Payments are processed by Razorpay, a PCI DSS Level 1 certified payment gateway
• BharatReviews does not store your credit/debit card numbers, CVV, or banking credentials
• We store: transaction IDs, payment amounts, payment method type (e.g., UPI, card), payment status, and timestamps for billing records
• If you provide a GSTIN for tax invoicing, it is stored alongside your account data
• Invoice records (invoice number, amount, tax breakup, billing period) are retained for a minimum of 8 years as required by Indian tax law
• Razorpay's privacy policy governs the handling of payment data on their platform: razorpay.com/privacy

13. Contact Us

If you have questions about this privacy policy or wish to exercise your data rights, contact us:

• Email: hello@bharatreviews.app
• Contact form: bharatreviews.app/contact