Privacy Policy

Who We Are

Revora ("we," "our," or "us") operates this review management platform for Indian small businesses. This Privacy Policy describes what personal data we collect, why we collect it, and your rights under applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act).

Data We Collect

• •Account data: Your name, email address, and hashed password when you register.
• •Business data: Business name, address, Google Maps place ID, category, brand colour, and the review tags you configure.
• •Review data: Star ratings, AI-assisted review text, and private feedback your customers submit through your review page.
• •Usage data: Browser type, device, pages visited, and feature usage — used to improve the product and diagnose issues.
• •Payment data: Razorpay processes all payments. We store only your subscription tier and billing status — never card or bank details.

How We Use Your Data

• •Operate and improve the Revora service.
• •Send transactional emails: OTP, password reset, review alerts, and weekly digests.
• •Generate AI-powered review suggestions — your business name, category, and keywords are sent to Groq AI for this purpose.
• •Process payments and manage subscriptions via Razorpay.
• •Comply with legal obligations and enforce our Terms of Service.

Third-Party Services We Use

• •Google Places API: Business search and location data.
• •Groq AI: Generating review suggestion text. Business context (name, category, keywords) is shared with Groq.
• •Firebase (Google): Google Sign-In authentication and push notifications.
• •Razorpay: Payment processing for paid plans.
• •Brevo: Transactional email delivery (OTP, alerts, digests).

Data Sharing & Sale

We do not sell, rent, or trade your personal data to any third party for marketing or advertising purposes. Data is shared only with the service providers listed above, and strictly to operate this product.

Cookies & Local Storage

We use browser localStorage to store your login session token and to cache business data for faster QR scan loads (cached for up to 24 hours). We do not use advertising or cross-site tracking cookies.

Data Retention

We retain your data for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Anonymised and aggregated analytics (e.g., monthly review counts) may be retained indefinitely.

Your Rights

• •Access a copy of the personal data we hold about you.
• •Request correction of inaccurate data.
• •Request deletion of your account and associated personal data.
• •Withdraw consent for marketing emails via the unsubscribe link in any email.

To exercise any of these rights, email us at support@revora.in. We aim to respond within 3 business days.

Security

Passwords are hashed using bcrypt. All data is transmitted over HTTPS. We use time-limited JWT tokens for sessions. While we take reasonable security precautions, no internet service is 100% secure — please use a strong, unique password.

Children

Revora is intended for business owners aged 18 and above. We do not knowingly collect data from minors. If you believe a minor has registered, contact us and we will delete the account promptly.

Changes to This Policy

We may update this policy periodically. We will notify you by email or in-app notice at least 7 days before any material change takes effect. Continued use of Revora after that date means you accept the updated policy.

Contact & Grievances

For privacy questions or grievance redressal (as required under the DPDP Act, 2023), contact us at support@revora.in. We respond within 3 business days.