Privacy Policy & DPDP Protocol

Effective Date: September 15, 2026

1. Information We Collect

We collect information provided directly when subscribing to Review My Business Online services, including business name, email address, phone number, and location details.

2. End-User QR Scan & Zero-Knowledge Privacy

When customers scan your printable QR kits, no personally identifiable information (PII) is harvested unless explicitly submitted by the end-user in the feedback alert form. All public ledger records undergo Zero-Knowledge PII redaction.

3. Cryptographic Data Security

Feedback resolution records generate SHA-256 block hashes stored in our public proof ledger. We do not sell or monetize merchant feedback data to third parties.

4. Rights under Digital Personal Data Protection (DPDP) Act 2023

Under India's Digital Personal Data Protection (DPDP) Act 2023, data principals possess the statutory right to access summary information regarding personal data processed, request correction or completion of inaccurate data, request erasure of personal data that is no longer necessary for resolution auditing, and seek grievance redressal. For any privacy requests or questions, please contact our designated privacy desk via our Contact Support Desk.

5. Data Protection Grievance Redressal Officer

In compliance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Section 8 & 11 of the Digital Personal Data Protection Act, 2023, any data principal may direct inquiries, complaints, or consent revocation notices to our designated Data Grievance Officer via our Contact Support Desk. All statutory inquiries are formally acknowledged within 48 business hours and resolved within 30 days.