What we store, and what we don't.

When you open an account we store your business name, email address and a one-way scrypt hash of your password. We never store your password in readable form and cannot recover it — we can only reset it.

We also store what you configure: store details, logo and cover images, brand colour, keywords, review guidance, your Google review link and, if you provide one, the WhatsApp number complaints should reach.

When someone opens one of your QR links we record the visit, the star rating, the keywords they tapped, any detail they typed, the draft that was generated, and which route they chose at the end — Google, WhatsApp or private feedback. This is what powers your dashboard.

We do not ask a customer for their name, phone number or email, and we do not set advertising or tracking cookies on the review page. To avoid double-counting a reload we store a short-lived random visit identifier and a truncated one-way hash derived from the request, which cannot be reversed into an IP address.

The application runs on Google Cloud Run. Data is stored in Supabase (PostgreSQL and file storage). Review drafts are generated by OpenRouter, which routes the request to the model your store selected. Only the prompt built from your settings and the customer's taps is sent — never your account details.

Account and review activity is kept while your account is open, because it is what your dashboard reports. Deleting a store removes its links and activity from your dashboard. AI usage records are retained for billing accuracy even if a store is deleted.

Ask us to delete your account and we will remove it and its data. Reviews already posted to Google belong to the customer who wrote them and to Google — we cannot remove those.

For a copy of your data, a correction, or deletion, message us on WhatsApp at +91 73840 93257. We will confirm the request with the account owner before acting on it.

If this policy changes in a way that affects you, we will tell you before it takes effect. This page is written to be read, not to be technically exhaustive — ask us anything it does not answer.