1. Who we are
TheReviewMitra ("we", "us", "our") operates thereviewmitra.com, a review-collection platform that helps local businesses invite genuine Google reviews from their customers. For any privacy question, write to support.thereviewmitra@gmail.com.
This policy covers two kinds of people: business owners who create an account with us, and end customers who scan a business's QR code to leave a review. We describe what we collect from each group separately.
2. What data we collect
From business owners (account holders)
- Account data — your name, email address, phone number, and a hashed password when you sign up. We never store your password in readable form.
- Business profile — business name, category, address, brand color, logo, Google Business profile link or Place ID, the languages you enable, and the review topics you configure.
- Usage data — activity in your dashboard, such as when reviews were generated and private feedback received.
From end customers (people who scan a QR code)
- Review interaction data — the star rating you tap, the topics you select, the language you choose, and the AI-drafted review text generated for you.
- Private feedback — if you leave a rating of 3 stars or fewer, the feedback message you write is stored and shared privately with the business owner.
- Technical data — your IP address, used only for rate-limiting and abuse prevention.
What we do NOT collect from end customers: we do not ask for your name, phone, email, or Google account. We never see what you actually post on Google — you edit and post the review yourself from your own Google account.
3. How we use your data
- To create and operate your account and business review page;
- To generate AI review drafts based on the topics and language a customer selects;
- To deliver private feedback from customers to the business owner;
- To send transactional emails (account verification, password reset, service notices);
- To prevent abuse of our public endpoints (rate limiting by IP and business);
- To respond to enquiries submitted through our contact form;
- To improve the product using aggregated, non-identifying usage statistics.
We do not sell your personal data, and we do not use it for third-party advertising.
4. AI processing
Review drafts are generated using an AI writing service. What we send for this purpose is limited to: the business name, business category, the topics the customer tapped, the chosen language, and the star rating. We do not send any personal data of the customer (name, phone, email, or similar) to this service. The generated draft is shown to the customer, who can edit or discard it — nothing is posted anywhere automatically.
5. Who we share data with
We share the minimum data necessary with a small number of trusted service providers who help us run the platform:
- AI writing service — business name, category, selected topics, language and rating, used only to generate the review draft.
- Google — nothing is sent by us; the customer opens Google's own review page themselves to post their review.
- Our hosting provider — stores service data on our behalf, under contractual confidentiality.
- The business owner — sees end-customer ratings, topics, drafts and private feedback for their own business only. That is the service.
We may also disclose data if required by law or to protect our legal rights. We do not sell data to anyone.
6. Data retention
- Account and business data — kept while your account is active, deleted or anonymised within 90 days of account deletion.
- Review interaction records — kept while the related business account is active, so owners can see their history.
- IP addresses — used for rate limiting; not retained longer than needed for abuse prevention.
7. Your rights
Under India's Digital Personal Data Protection Act, 2023 (and comparable laws elsewhere), you have the right to:
- Access a copy of the personal data we hold about you;
- Correct inaccurate or incomplete data;
- Request deletion of your data;
- Withdraw consent at any time (which may end our ability to provide the service);
- Nominate a person to exercise these rights on your behalf;
- Raise a grievance with us, and escalate to the Data Protection Board of India if unresolved.
To exercise any of these rights, email support.thereviewmitra@gmail.com. We respond within 30 days.
8. Security
All traffic to thereviewmitra.com is encrypted with TLS (HTTPS). Passwords are stored hashed. Access to production systems is restricted to authorised personnel. No internet service can promise absolute security, but if we become aware of a breach affecting your data we will notify you and the relevant authorities as required by law.
9. Children's privacy
Our service is intended for business use and for customers of legal age to hold a Google account. We do not knowingly collect data from children under 18 for account purposes. If you believe a child has provided us personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy as the product evolves. Material changes will be announced by email to account holders and by a notice on this page. The "Last updated" date at the top always reflects the current version.
TheReviewMitra
Email: support.thereviewmitra@gmail.com
Or use our contact form.