Privacy Policy

This Privacy Policy explains what personal data Review Sync Manager collects, why, who we share it with, how long we keep it and the choices and rights you have. It applies to our website, the Review Sync Manager web app, the Review Sync Manager mobile app and the review pages, emails and widgets we provide on behalf of our customers.

1. Who we are

Review Sync Manager is operated by Bharat Developer Force Web Solutions, C-65 A, Kumawat Colony, Khatipura Puliya, Jothwara, Jaipur, Rajasthan, 302012 (“we”, “us”). For questions about this policy or your personal data, email reviewsyncmanager@gmail.com.

2. Our role: controller and processor

Review Sync Manager is used by businesses (“brands”) and by marketing agencies that manage brands for their clients (“agencies”). Together we call them “customers”.

• Controller. We decide how and why we use the personal data of our customers’ users (their name, email, login and billing details), of visitors to our website and of people who contact us. For this data we are the controller.
• Processor. Our customers use Review Sync Manager to manage reviews of their business and to contact their own customers — for example to ask for a review or to read private feedback. For that data (“Customer Data”) the customer is the controller and we process it only on their instructions and to provide the service.

If you received a review request or left feedback for a business, that business is responsible for your data. Please contact the business first; we will help them answer your request.

3. The personal data we collect

3.1 Your account and team

• Name, email address, company name and country you give when you sign up or accept an invitation.
• Your password, stored only as a one-way hash we cannot read.
• Your role (owner, admin, manager or staff), the brands or locations you can access, and the invitations you send or receive.
• If you turn on two-factor authentication: the secret for your authenticator app and your recovery codes, both stored encrypted.
• Your notification preferences and the time of your last sign-in.

3.2 Business and billing details

• Names, addresses, phone numbers, review links and settings of your agency, brands and locations, and your branding (logo, colours, sender and support details).
• Billing details: legal name, billing email, phone, address, state and, for Indian businesses, your GSTIN.
• Invoices, credit notes and payment records (amount, method, the transaction or bank/UPI reference) and any payment proof you upload for a bank transfer.
• We never receive or store your card or bank account numbers. Online payments are made on the payment provider’s own secure page.

3.3 Connected Google and Facebook accounts

When you connect a Google Business Profile or a Facebook Page, you sign in with that platform and grant Review Sync Manager permission to manage your business listings, read reviews and post replies. We receive:

• Access tokens for the connected account, stored encrypted. You can disconnect at any time in Review Sync Manager, or remove our access in your Google or Facebook account settings.
• Your business listings (names, addresses and identifiers of the locations or Pages you choose to connect) and their verification status.
• Reviews of those listings: the reviewer’s public name and profile picture link (Google’s anonymous reviewers stay anonymous), the rating or recommendation, the review text, dates, earlier versions of edited reviews and the replies posted.

If you use competitor tracking, we look up public business information (name, address, rating and number of reviews) from Google Maps. No personal data is sent for this.

3.4 Data about our customers’ customers (Customer Data)

• Review requests: the name and email address of each person a business asks for a review, an optional note, and the request status. When a business uploads a spreadsheet, we read the names and emails from it; the file itself is not kept.
• Email opens and clicks: review request emails contain a small image and tracked links, so the business can see whether a request was opened and which review site the person chose.
• Unsubscribes: if someone unsubscribes, we keep their email address on a do-not-email list so they are not contacted again by that business.
• Private feedback: the name, email, rating and message someone sends through a business’s feedback form.
• QR codes and tap cards: we count visits and button clicks on a location’s review page. We do not record who scanned the code.

3.5 Technical and usage data

• IP address and browser: when you use the app, sign in, or open a review or feedback page, we store your IP address and browser details with your session to keep you signed in and to protect the service from abuse. Sessions expire after a period of inactivity.
• Activity log: important actions (for example two-factor changes, team invitations, billing changes and review actions) are logged with the user who made them, so account owners and our support team can see what changed. These records do not include IP addresses.
• Mobile app: the device name and platform you sign in from, a random device identifier created by the app, and — if you allow notifications — a push notification token.
• Website contact form: your name, email, phone, company and message, together with your IP address and browser details to prevent spam.
• Cookies and similar technologies, described in our Cookie Policy.

4. How we use personal data and our legal bases

• To provide the service — create and secure accounts, sync reviews, post your replies, send review requests and notifications, show reports and run the mobile app. Basis: performance of our contract with you.
• To bill you — issue invoices, take payments, apply taxes and keep accounting records. Basis: contract and legal obligation.
• To keep the service secure — prevent fraud, spam and abuse, rate-limit requests and investigate incidents. Basis: our legitimate interests and legal obligation.
• To support you — answer questions and fix problems. With a customer’s request or permission, our support staff can view an account as its user sees it; every such session is logged. Basis: contract and legitimate interests.
• To send service emails — security alerts, trial and billing reminders, invoices and important changes. You can switch off optional alerts in your notification settings; security and billing emails cannot be switched off while you have an account. Basis: contract and legitimate interests.
• To improve the website — analytics or marketing tags on our website run only if you accept them in the cookie banner. Basis: consent, which you can withdraw at any time.

We do not sell personal data, we do not use it for advertising profiles, and we do not use your data or Customer Data to train artificial intelligence models. Reply suggestions and auto-reply rules in Review Sync Manager work from templates you write; no review content is sent to an AI service.

5. Google and Meta data

Review Sync Manager’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use Google user data only to provide and improve the features you use in Review Sync Manager (syncing reviews, posting replies, checking listing status), we do not transfer it to others except as needed to provide those features, for security or to comply with law, we do not use it for advertising, and our staff do not read it unless you ask us to, it is needed for security, or the law requires it.

Data we receive from Facebook is used in the same limited way and in line with Meta’s Platform Terms. When you disconnect a platform, we stop syncing immediately; reviews already synced stay in your account until you delete them or close your account.

6. Who we share data with

We share personal data only with the service providers we need to run Review Sync Manager, under contracts that require them to protect it, and only as much as they need:

• Hosting and infrastructure — the cloud servers, databases and backups that run Review Sync Manager.
• Email delivery — the email service we use to send account emails and review requests.
• Google and Meta — to read reviews and listings and post replies on the accounts you connect, and Google Maps for competitor tracking.
• Payment providers — the provider you pay through (Stripe, Razorpay or Cashfree) receives the amount and invoice reference; Cashfree also receives the billing name, email and phone it requires. Their own privacy policies apply to the details you enter on their payment page.
• Expo push notifications — to deliver mobile app notifications. A notification contains a short summary, which can include a reviewer’s or feedback sender’s name and the first words of their message.

Within a customer’s account, data is visible to the people that customer gives access to. An agency can see the brands it manages, and our support staff can access accounts when needed to provide or secure the service. We may also disclose data when required by law or a valid request from authorities, to protect our rights or the safety of others, or to a buyer or successor if our business is sold or merged — in that case this policy continues to apply.

7. Reviews shown on websites

Customers can embed a review widget on their own website. The widget shows the reviewer’s first name and the first letter of their last name, their profile picture, rating, review text and date — information already public on Google or Facebook. The widget does not set cookies and we do not record who views it; profile pictures load directly from Google or Facebook.

8. International transfers

Our servers and service providers may be located in countries other than yours, including India, the United States and the European Union. When personal data moves between countries we take steps required by applicable law, such as standard contractual clauses, to keep it protected.

9. How long we keep data

• Account and Customer Data: for as long as the account is open. When an account, brand or location is deleted, its data is removed from use immediately but kept so it can be restored if the deletion was a mistake. We permanently erase it when you ask us to, after confirming the request.
• Invoices, credit notes and payment records: for as long as tax and accounting laws require (in India, up to eight years), even after an account is closed.
• Activity log: 30 days.
• Mobile app sign-ins: a device is signed out after 60 days without use; its push token is deleted with it.
• Notifications in the app: deleted 90 days after being read, and in any case after 180 days.
• Review exports: deleted 24 hours after they are prepared.
• Unused password reset links and expired invitations: deleted automatically shortly after they expire.
• Reviews removed from Google or Facebook: deleted from Review Sync Manager 90 days after the platform removed them.
• Do-not-email list: kept for as long as needed to respect the unsubscribe.
• Server logs and backups: kept for a short period (typically up to 30 days) and then overwritten.

10. How we protect data

We use HTTPS for all connections, hash passwords, encrypt platform tokens, payment provider credentials and two-factor secrets, limit sign-in attempts, support two-factor authentication (required for our own administrators), restrict staff access, and log important actions. No system is perfectly secure; if a breach affects your personal data we will notify you and the authorities as the law requires.

11. Your rights and choices

Depending on where you live (including under India’s Digital Personal Data Protection Act, 2023 and, in the EU and UK, the GDPR), you have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate or incomplete data;
• have your data erased;
• object to or restrict certain uses, and withdraw consent you gave;
• receive your data in a portable format;
• nominate another person to exercise your rights if you die or become unable to do so (India);
• complain to a data protection authority.

Many things you can do yourself in Review Sync Manager: update your profile, change your password, turn on two-factor authentication, sign out of devices, change notification settings and export reviews. Every review request email has an unsubscribe link. For anything else, email reviewsyncmanager@gmail.com. We will confirm your identity and respond within 30 days. If your request is about Customer Data, we will pass it to the business that controls it.

12. Grievance Officer

If you have a complaint about how we handle personal data, contact our Grievance Officer, Grievance Officer, at reviewsyncmanager@gmail.com, Bharat Developer Force Web Solutions, C-65 A, Kumawat Colony, Khatipura Puliya, Jothwara, Jaipur, Rajasthan, 302012. We will acknowledge your complaint promptly and resolve it within 30 days.

13. Children

Review Sync Manager is a business service and is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

14. Changes to this policy

We may update this policy when our service or the law changes. The date at the top shows the latest version. If a change materially affects how we use your personal data, we will tell account owners by email or in the app before it takes effect.

15. Contact us

Bharat Developer Force Web Solutions
C-65 A, Kumawat Colony, Khatipura Puliya, Jothwara, Jaipur, Rajasthan, 302012
Email: reviewsyncmanager@gmail.com