Welcome to ScanToReviewAI (hereinafter referred to as "the Platform," "we," "us," or "our"), a product proudly developed and operated by Cosolvix. We respect your privacy and are committed to protecting the personal data of our users, their clients, and website visitors.
This Privacy Policy details our data processing practices in compliance with the Digital Personal Data Protection (DPDP) Act, 2023 (India), the Information Technology Act, 2000 (SPDI Rules), the General Data Protection Regulation (GDPR), and other applicable global data privacy laws.
1. The Roles We Play in Data Processing
Depending on your interaction with ScanToReviewAI, our legal role regarding your data changes:
- Data Fiduciary / Data Controller: When you (a business owner) create an account on ScanToReviewAI, subscribe to our services, or contact us for support, we act as the Data Fiduciary/Controller of your business and billing information.
- Data Processor: When your end-customers interact with your ScanToReviewAI QR codes and submit drafts or feedback, we act as the Data Processor on your behalf. You (the business) are the Data Fiduciary/Controller for your own customers' data.
2. Data We Collect
2.1. From Business Users (Our Customers)
- Identity Data: Name, business name, and Google Business Profile links.
- Contact Data: Email address (e.g., used for Firebase Authentication), phone number.
- Financial Data: Subscription billing details (processed securely via our third-party payment gateways like Stripe/Razorpay; we do not store full credit card numbers).
- Technical Data: IP address, browser type, device information, and platform usage analytics.
2.2. From End-Customers (Your Patrons)
The core function of ScanToReviewAI is to facilitate frictionless Google reviews. Therefore, our data collection from end-customers is strictly minimized:
- Draft Data: The text inputted or voice-to-text converted by the user to generate an AI review draft.
- Technical & Analytical Data: Basic interaction metrics (e.g., scan origin, time of scan) to provide analytics to the Business User. We do not require end-customers to create accounts or log in to our platform.
3. How We Use Your Data & Purpose Limitation
Under the DPDP Act, 2023, we process personal data only for lawful purposes for which you have given consent, or for certain legitimate uses. We use your data to:
- Provide, operate, and maintain the ScanToReviewAI platform.
- Process AI text polishing via our LLM providers (Note: Inputs are sent via secure API and are not used to train public AI models).
- Send administrative notices, billing receipts, and product updates.
- Detect and prevent fraud, spam, or abuse of the review ecosystem.
- Comply with legal obligations under Indian and international laws.
4. Data Sharing and Third-Party Sub-Processors
We do not sell your personal data. We may share data strictly with trusted third-party service providers (Sub-processors) required to operate our platform, including:
- Cloud & Hosting: Firebase / Google Cloud (for database, authentication, and secure hosting).
- AI Processing: LLM APIs (e.g., OpenAI, Google Gemini) specifically for text enhancement.
- Payment Processors: Stripe or Razorpay for subscription billing.
All third-party processors are bound by strict data processing agreements ensuring compliance with the DPDP Act and GDPR.
5. Your Rights Under DPDP Act, 2023 & GDPR
As a Data Principal (Data Subject), you possess the following rights regarding your personal data:
- Right to Access & Information: Request a summary of the personal data being processed by us.
- Right to Correction & Erasure: Request correction of inaccurate data or erasure of your data (Right to be Forgotten) when it is no longer necessary for the purpose it was collected.
- Right to Grievance Redressal: The right to readily available means of grievance redressal provided by us.
- Right to Nominate: The right to nominate another individual to exercise your rights in the event of death or incapacity (under the DPDP Act).
- Right to Withdraw Consent: You may withdraw your consent for data processing at any time, acknowledging that this may prevent us from providing you with our services.
To exercise any of these rights, please email us at hello@cosolvix.com.
6. Security and Data Retention
We implement commercially reasonable technical and organizational measures (including encryption in transit and at rest) to secure your data against unauthorized access, loss, or alteration. We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.
7. Children's Privacy
ScanToReviewAI is a B2B SaaS platform intended for businesses and adults. We do not knowingly collect personal data from verifiable children under the age of 18 (or the applicable age of majority in your jurisdiction). If we learn we have collected data from a child without parental consent, we will delete it promptly.
8. Contact & Grievance Officer
In compliance with the Information Technology Act, 2000 and the DPDP Act, 2023, the details of the Grievance Officer are provided below. If you have any questions, concerns, or grievances regarding this Privacy Policy or your data, please contact us:
- Parent Company: Cosolvix
- Email: hello@cosolvix.com
- Address: Imperio Fitness, Ahilyanagar, Maharashtra, India