Privacy Policy

Last updated: 1 July 2026 · Governing law: India

This Privacy Policy describes how Samiir Vivekanand Halady, trading as Review Mitra("we", "us", "our") collects, uses, stores, and protects your personal data when you use our website and services. This policy is issued in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. Data Fiduciary

Name: Samiir Vivekanand Halady (Proprietor), trading as Review Mitra
GSTIN: 27AAUPH0142G2ZS
Address: Ground Floor, 1, Plot 235, Talmakiwadi, Javji Dadaji Road, Grant Road, Mumbai 400007, Maharashtra, India
Email: info@reviewmitra.co.in

2. Personal data we collect

Identity data: name, email address, phone number, business name, GSTIN, PAN.
Usage data: pages visited, features used, review generation activity, device/browser type, IP address, referrer URL.
Transactional data: plan subscribed, payment history, billing address, invoice details.
Customer data you upload: phone numbers and names of your customers that you collect using our platform.

We do not knowingly collect sensitive personal data (as defined under the SPDI Rules and DPDP Act) such as passwords, financial account credentials, health records, biometric data, or government IDs other than GSTIN/PAN for billing purposes.

3. Lawful basis & purpose of processing

Under the DPDP Act, we process your personal data on the following lawful bases:

Consent: when you create an account and agree to this Privacy Policy and our Terms;
Legitimate use: to provide the service you requested, process payments, send transactional communications, prevent fraud, and comply with legal obligations (GST, tax, accounting).

We do not use your personal data for targeted advertising or sell it to third parties.

4. Data sharing & recipients

We share data only with:

Payment processors (e.g., Razorpay, Stripe) to process your subscription payments;
Cloud hosting & email providers (e.g., AWS, Google Cloud, Supabase) that host our infrastructure;
AI service providers (e.g., Google Gemini) to generate review drafts and reply suggestions. No customer PII is shared with AI providers beyond the review text you approve;
Google LLC when you use our Google Maps / Places integration, subject to Google's own privacy terms;
Law enforcement or regulators when required by a valid court order or statutory obligation under Indian law.

All recipients are bound by contractual confidentiality and data protection obligations.

5. Data retention

Account data is retained while your account is active and for up to 8 years after closure for tax, audit, and legal compliance (per the Income Tax Act, 1961 and GST law).
Customer data uploaded by merchants is retained per the merchant's instructions and deleted within 30 days of a verified account closure or deletion request, unless legal hold applies.
Usage logs are retained for up to 1 year for security and fraud prevention.

6. Your rights under Indian law

You have the right to:

Access the personal data we hold about you;
Request correction or updating of inaccurate or misleading data;
Request erasure (right to be forgotten) subject to legal retention requirements;
Withdraw consent, in which case we will stop processing data that relies solely on consent (this may affect service availability);
Register a grievance with our Grievance Officer or with the Data Protection Board of India once constituted.

To exercise any right, email info@reviewmitra.co.in with the subject line "Privacy request — [your email]". We will verify your identity and respond within 30 days.

7. Security measures

We implement reasonable security practices and procedures as required under the SPDI Rules, including:

Encryption in transit (TLS 1.2+);
Encryption at rest for sensitive fields;
Role-based access control and audit logging;
Regular security reviews and vulnerability patching.

No method of transmission over the internet is 100% secure. You are responsible for keeping your login credentials confidential.

8. Google API Services — Limited Use

When merchants connect a Google account to Review Mitra, we access their Google Business Profile data (reviews and location metadata) using the https://www.googleapis.com/auth/business.manage scope. Review Mitra's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not allow humans to read it (except as narrowly permitted), and do not use it to train generalised AI/ML models. Full disclosures, scopes, retention and revocation instructions are available on our Google API Services page.

9. Cookies & tracking

We use essential cookies to maintain your session and analytics cookies (e.g., Google Analytics) to understand how visitors use our site. You can control cookies through your browser settings. Analytics cookies are non-essential and do not collect PII.

10. Children's privacy

Our service is not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

11. Cross-border data transfers

Your data is hosted on servers located in India and the United States (via our cloud providers). By using the service, you consent to this transfer. We ensure that cross-border transfers are protected by standard contractual clauses and adequacy decisions where applicable.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. Material changes will be notified by email at least 15 days in advance. The "Last updated" date at the top reflects the latest revision.

13. Grievance Officer

In accordance with the IT Act, 2000 and Intermediary Guidelines, 2021:
Mr. Samiir Vivekanand Halady
Grievance Officer, Review Mitra
Email: info@reviewmitra.co.in
We will acknowledge complaints within 24 hours and resolve them within 15 days.

14. Contact

For privacy-related questions, contact us at info@reviewmitra.co.in.

Disclaimer: This Privacy Policy is provided in good faith and is not legal advice. You should have it reviewed by an Indian advocate before relying on it for material compliance matters.