Privacy Policy
Last Updated: October 9, 2026
1. Entity & Scope
This Privacy Policy is issued by Praxion Technologies (Sole Proprietorship, registered at Praxion Technologies, Rajkot, Gujarat, India - 360006), operator of the getReviews platform (“we”, “us”, or “our”).
This policy outlines our strict standards regarding the collection, storage, processing, and protection of personal data in accordance with the Digital Personal Data Protection (DPDP) Act, 2023 (India), the General Data Protection Regulation (GDPR), and global privacy standards.
2. Principle of Data Minimization (No Unnecessary Data)
We adhere to strict data minimization principles. We do not collect, request, or store sensitive personal information, biometric data, precise location traces, or background device diagnostics.
- Merchant Account Data: When registering as a business user, we collect your name, business name, business email address, phone number (for WhatsApp alerts and support), category, and store slug.
- End-Customer / Consumer Data: When customers scan a QR code at your counter, they do not need to register, log in, or provide personal credentials. If an end-customer chooses to leave private feedback on a lower rating (1–3 stars), their mobile number is completely optional and collected solely so the merchant can contact them directly. We never collect customer credit card numbers, home addresses, or demographic markers.
- Review Analytics: We store aggregated scan counts, timestamp logs, and rating metrics solely to populate the merchant's internal performance dashboard.
3. Age Restriction & Protection of Children's Data
getReviews is an enterprise B2B service intended strictly for individuals aged 18 years or older who operate commercial storefronts. We do not knowingly solicit, collect, or store personal data from minors under the age of 18.
If we discover that personal data of a minor has been collected inadvertently, we will immediately delete that information from our active databases and server caches. If you suspect that a minor has provided information to our platform, please inform our Grievance Officer immediately.
4. Third-Party Service Providers & SDK Audit
We work with industry-standard, secure infrastructure partners to operate our service. We audit our SDK dependencies regularly to prevent rogue trackers or unconsented telemetry:
| Provider / SDK | Purpose | Data Shared |
|---|---|---|
| Supabase Inc. | Secure PostgreSQL cloud database & session tokens | Encrypted account credentials, business profiles, scan analytics |
| Razorpay Software Pvt. Ltd. | PCI-DSS certified payment processing & GST invoices | Billing details and transaction IDs (card/UPI info processed directly by Razorpay) |
| Google APIs & Places | Google Business Profile review sync and public place links | Public Google Place ID and cached public reviews |
| OpenAI LLC | Drafting customized customer review templates | Business category, selected review tags, language style (no PII shared) |
| Inngest Inc. | Reliable background worker orchestration & sync queues | Job execution IDs and business sync timestamps |
Purpose: Secure PostgreSQL cloud database & session tokens
Data: Encrypted account credentials, business profiles, scan analytics
Purpose: PCI-DSS certified payment processing & GST invoices
Data: Billing details and transaction IDs (card/UPI info processed directly by Razorpay)
Purpose: Google Business Profile review sync and public place links
Data: Public Google Place ID and cached public reviews
Purpose: Drafting customized customer review templates
Data: Business category, selected review tags, language style (no PII shared)
Purpose: Reliable background worker orchestration & sync queues
Data: Job execution IDs and business sync timestamps
5. Email Communications & Unsubscribe Mechanism
We send transactional emails related to account verification, billing receipts, and critical security notices. We may also send occasional merchant product update digests.
- Every non-transactional email contains a clear, one-click Unsubscribe link in the email footer.
- You may also manage or opt out of all promotional communications directly through our Unsubscribe Portal or by contacting support.
6. Data Retention & Right to Deletion (Item 20)
You retain full ownership of your data. You may request permanent deletion of your business profile, customer feedback logs, and scan statistics at any time:
- Self-Service & Web Request: Submit an instant data deletion request at our dedicated Data Deletion Request Page.
- Timeline: Deletion requests are processed and confirmed within 30 calendar days across all production databases, object storage, and backup caches in full compliance with DPDP Act 2023 and GDPR Article 17.
7. Your Legal Rights
Under applicable data privacy laws, you possess the right to:
- Request access to the personal data we store about your business.
- Rectify inaccurate or out-of-date information in your account settings.
- Revoke consent for data processing at any time.
- Nominate a representative in the event of death or incapacity (DPDP Act 2023).
8. Grievance Officer & Official Contact
Pursuant to Rule 3(11) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the DPDP Act, 2023, our designated Grievance Officer is:
Grievance & Privacy Officer: Parth Panjwani
Entity: Praxion Technologies (Sole Proprietorship)
GSTIN: 24FSUPP2056N1ZX
Registered Address: Praxion Technologies, Rajkot, Gujarat, India - 360006
Email: theparthpanjwani@gmail.com
Phone / WhatsApp: +91 99199 18374
SLA: All grievance complaints and data subject requests are acknowledged within 24 hours and addressed within 15 business days.