Privacy Policy

1. Introduction

RankReview Technologies Private Limited ("RankReview," "we," "us," or "our"), a company registered in India, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our review management platform at rankreview.in, including our website, mobile applications, and all related services (collectively, the "Service").

By accessing or using the Service, you consent to the practices described in this Privacy Policy. If you do not agree with our practices, please do not use the Service. This Privacy Policy should be read together with our Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

Account Information

• Full name and email address
• Phone number (for WhatsApp notifications)
• Password (stored in encrypted form)
• Profile picture (optional)

Business Information

• Business name, address, and category
• Google Business Profile information
• Business logo and photos
• Competitor information you choose to track

Payment Information

• Billing name and address
• Transaction records
• Note: Credit card details are processed directly by Razorpay and are not stored on our servers

2.2 Information from Google

When you connect your Google account, we collect the following with your authorization:

• Google Profile: Name, email address, and profile picture from your Google account
• Google Business Profile: Business listings you manage, including name, address, phone, hours, and categories
• Reviews: Customer reviews and ratings for your business listings
• Review Responses: Your responses to customer reviews

2.3 Automatically Collected Information

• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, pages viewed, referral URLs
• Usage Data: Features used, actions taken, interaction patterns
• Location Data: Approximate location based on IP address
• Cookies: Session identifiers, preferences, analytics data

3. How We Use Your Information

We use the information we collect to:

3.1 Provide and Operate the Service

• Create and manage your account
• Sync and display your Google Business reviews
• Generate AI-powered review response suggestions
• Post approved responses to Google on your behalf
• Track competitor reviews and performance
• Monitor keyword rankings and local SEO metrics
• Generate analytics and reports

3.2 Communicate With You

• Send new review notifications via WhatsApp and email
• Send weekly and monthly digest reports
• Provide customer support
• Send important service announcements
• Send marketing communications (with your consent)

3.3 Process Payments

• Process subscription payments through Razorpay
• Send invoices and payment confirmations
• Handle billing inquiries and disputes

3.4 Improve and Protect the Service

• Analyze usage patterns to improve features
• Train and improve our AI models (using anonymized data)
• Detect and prevent fraud, abuse, and security issues
• Debug and fix technical problems
• Comply with legal obligations

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

4.1 Service Providers

We share information with trusted third-party service providers who assist us in operating the Service:

• Microsoft Azure: Cloud infrastructure, hosting, and database services
• Razorpay: Payment processing
• OpenAI / Google AI: AI-powered response generation
• Resend: Email delivery
• Meta (WhatsApp): WhatsApp notifications

4.2 Google Services

To sync your reviews and post responses, we communicate with Google's APIs on your behalf. This involves transmitting your Google authentication tokens and business profile information.

4.3 Legal Requirements

We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in Transit: All data is transmitted using TLS/SSL encryption (HTTPS)
• Encryption at Rest: Sensitive data is encrypted using AES-256
• Password Security: Passwords are hashed using bcrypt with salt
• Access Controls: Strict role-based access controls for our team
• Token Security: Google OAuth tokens are encrypted and stored securely
• Regular Audits: We conduct regular security assessments
• Monitoring: Continuous monitoring for suspicious activity

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Cookies and Tracking Technologies

We use cookies and similar technologies for:

6.1 Essential Cookies

Required for the Service to function. These include session cookies and authentication cookies. You cannot opt out of essential cookies while using the Service.

6.2 Functional Cookies

Remember your preferences and settings to provide a personalized experience.

6.3 Analytics Cookies

Help us understand how you use the Service so we can improve it. We use privacy-focused analytics that do not track you across websites.

6.4 Managing Cookies

You can control cookies through your browser settings. Note that blocking certain cookies may affect the functionality of the Service.

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access and Portability

You can request a copy of your personal data in a structured, commonly used format.

7.2 Correction

You can update or correct your account information at any time through your account settings.

7.3 Deletion

You can request deletion of your account and associated data. Some information may be retained as required by law or for legitimate business purposes (e.g., fraud prevention).

7.4 Revoke Google Access

You can disconnect your Google account at any time through your RankReview settings or via Google Account permissions.

7.5 Opt-Out of Marketing

You can unsubscribe from marketing emails using the link in any email, or through your notification settings.

7.6 How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@rankreview.in. We will respond to your request within 30 days.

8. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy:

• Account Data: Retained while your account is active, plus 90 days after deletion
• Review Data: Retained as long as corresponding reviews exist on Google
• Payment Records: Retained for 7 years as required by Indian tax laws
• Log Data: Retained for 12 months for security and debugging purposes
• Analytics Data: Aggregated and anonymized data may be retained indefinitely

9. International Data Transfers

Your information may be transferred to and processed in countries outside India, including:

• United States (cloud infrastructure, AI services)
• European Union (some service providers)

When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your information in accordance with applicable data protection laws.

10. Children's Privacy

RankReview is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected such information, please contact us immediately at privacy@rankreview.in, and we will promptly delete it.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website, updating the "Last Updated" date, and sending you an email notification. Your continued use of the Service after changes become effective constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Compliance

RankReview is committed to complying with applicable data protection laws, including:

• Information Technology Act, 2000 (India)
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Digital Personal Data Protection Act, 2023 (as applicable)
• Google API Services User Data Policy