Privacy Policy

1. Introduction

Welcome to ReviewBot, a service provided by Noesis Infotech ("Company", "we", "our", or "us"). We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our ReviewBot application and services (collectively, the "Service"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Company Information

3. Information We Collect

3.1 Personal Information

When you use our Service, we may collect the following personal information:

• Name and email address (via Google Sign-In)
• Google account profile picture
• Google Business Profile information (business name, address, phone number)
• Google Business Profile reviews and review responses

3.2 Authentication Data

We use Google OAuth 2.0 for authentication. When you sign in, we receive:

• OAuth access tokens and refresh tokens (stored securely and encrypted)
• Google user ID
• Authorized scopes for Google Business Profile access

3.3 Usage Data

We automatically collect certain information when you access the Service:

• IP address
• Browser type and version
• Pages visited and time spent
• Device information
• Activity logs (actions performed within the application)

3.4 Third-Party API Keys

If you choose to use AI-powered features, you may provide your own OpenAI API key. This key is encrypted using AES-256 encryption before being stored in our database.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve our Service
• Review Management: To fetch, display, and help you respond to your Google Business reviews
• AI-Powered Replies: To generate automated review responses using AI (with your OpenAI API key)
• Analytics: To provide you with insights about your reviews (sentiment analysis, trends)
• Communication: To send you service-related notifications and updates
• Security: To detect, prevent, and address technical issues and security threats
• Legal Compliance: To comply with applicable laws and regulations

5. Data Storage and Security

5.1 Data Storage

Your data is stored on secure servers. We use PostgreSQL databases with encryption at rest for sensitive information such as OAuth tokens and API keys.

5.2 Security Measures

We implement appropriate technical and organizational security measures including:

• AES-256 encryption for sensitive data (API keys, tokens)
• HTTPS/TLS encryption for all data in transit
• Secure session management with HTTP-only cookies
• Regular security audits and updates
• Access controls and authentication requirements

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With Your Consent: When you have given us explicit permission
• Service Providers: With third-party services that help us operate (e.g., hosting providers)
• Google APIs: To interact with Google Business Profile on your behalf
• OpenAI: When you use AI features, your review data is sent to OpenAI for processing (using your API key)
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets

7. Third-Party Services

Our Service integrates with the following third-party services:

• Google: For authentication and Google Business Profile API access. See Google's Privacy Policy
• OpenAI: For AI-powered review responses (optional, uses your API key). See OpenAI's Privacy Policy

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Revoke Access: Disconnect your Google account at any time through your Google account settings
• Export: Request export of your data in a portable format

To exercise any of these rights, please contact us at prajesh@noesistech.com.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

10. Cookies and Tracking

We use essential cookies to maintain your session and provide the Service. These cookies are necessary for the Service to function and cannot be disabled. We do not use third-party tracking or advertising cookies.

11. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to such transfers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

15. Grievance Officer

In accordance with the Information Technology Act 2000 and rules made thereunder, the name and contact details of the Grievance Officer are provided below: