Privacy Policy

Revix AI provides a QR + NFC “Smart Stand” and web platform that helps local businesses collect more Google reviews. The data controller is [Legal entity name], based in [City], India. For any privacy question, contact us at revixai.app@gmail.com.

Business account data. When an owner registers, we collect their email address, password (stored only as a secure hash by our authentication provider), and the business profile they enter: business name, category, city, Google Place ID, services, highlights, a thank-you message, an uploaded logo, and an optional website URL and screenshot.

Customer review-page activity. When a customer taps or scans a Smart Stand, we record anonymous, non-identifying analytics: the session source (QR or NFC), device type, which review suggestion was selected, whether the Google action was clicked, and Digital Hub link clicks. We do notcollect a customer’s name, email, the review text they ultimately post on Google, or any account identifier.

Payment data. Subscription payments are processed by Razorpay. We never receive or store card numbers; we store only the subscription status, plan, and invoice metadata returned by Razorpay.

Support and contact data. If you email us or submit the contact form, we process the name, email, optional business name, and message you provide.

Technical data. Server logs and security systems process IP address and request metadata for rate limiting, bot protection, and abuse prevention.

We use information to operate and secure the service, generate and manage AI review suggestions for the owner to approve, provide the owner with review-page analytics, process subscriptions and billing, respond to support requests, and improve the product. We rely on the performance of our contract with the business owner, our legitimate interest in operating a secure service, and — for optional analytics cookies — your consent.

We share data only with processors that help us run the service: Supabase (database, authentication, file storage), Razorpay (payments), Cloudflare Turnstile (bot protection), Upstash (rate limiting), our configured AI provider (to generate review suggestions from the business profile you enter), and, where enabled, Google Analytics and Vercel Analytics (website usage). Each processes data on our behalf under its own terms.

We use a strictly necessary cookie to remember your theme and consent choice, and — only with your consent — analytics cookies. You can accept or decline analytics from the banner shown on your first visit. See our Cookie Policy for details.

We keep business account data for as long as the account is active and for a reasonable period afterward to meet legal, tax, and dispute obligations. Anonymous analytics are retained in aggregate. An owner can request deletion of their account and associated personal data by emailing revixai.app@gmail.com; we will action verified requests within a reasonable time, subject to records we must retain by law.

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and withdraw analytics consent at any time. To exercise any right, contact revixai.app@gmail.com.

We apply a Zero Trust approach: server-side validation, row-level database security, encrypted transport (HTTPS), rate limiting, bot protection, and least-privilege access to secrets. No method of transmission or storage is perfectly secure, but we work to protect your data using industry-standard measures.

We may update this policy from time to time; material changes will be reflected by the “last updated” date above. Questions about this policy can be sent to revixai.app@gmail.com.