Privacy Policy

1. Introduction

InstaReview ("we", "our", or "the Platform") is committed to protecting your personal data in accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and international data protection standards. This Privacy Policy explains how customer feedback, scan telemetry, and merchant account information are handled.

2. Customer Data & Feedback Interception

When customers scan a QR code or tap an NFC tag powered by InstaReview:

• Star Rating (4–5★): Customers are routed directly to the merchant's public Google Reviews page. No private personal data is stored by InstaReview during this redirection.
• Internal Feedback (1–3★): If a customer submits constructive feedback, their comments, optional name, and optional phone/email are captured strictly for the purpose of allowing the merchant to address the service defect privately.
• Zero Public Exposure: Private 1–3★ feedback is never published publicly, sold, or shared with third-party advertisers.

3. AI Review Assistance

When happy customers opt to use the AI-assisted review drafting feature, only selected service tags and the business category are sent to our language processing partner (Google Gemini API). No personally identifiable customer information (PII) is transmitted to or retained by AI models.

4. Merchant Account & Storage Security

All merchant credentials and operational records are encrypted in transit via TLS 1.3 and at rest utilizing Supabase PostgreSQL Row Level Security (RLS). Merchants can request total account and feedback data erasure at any time via their dashboard or by writing to support.

5. Your Data Rights

Under applicable laws, customers and merchants possess the right to:

• Request a copy of any feedback submitted containing their contact details.
• Request prompt deletion of feedback messages from our servers.
• Opt-out of email notifications or WhatsApp alerts.