reviews.pov
Log inGet Started
Official Legal Document

Privacy Policy

How POV Digital Solutions collects, processes, and protects your information when using the reviews.pov platform.

Brand:reviews.pov
•
Operator:POV Digital Solutions
•
Effective Date:[EFFECTIVE DATE]
Privacy PolicyTerms & ConditionsRefund & Cancellation

1. Introduction & Overview

This Privacy Policy explains how POV Digital Solutions (“we”, “our”, or “us”), operating under the trade name reviews.pov (“the Service”), collects, uses, stores, and safeguards personal and technical data when business owners subscribe to our platform and when consumers interact with our QR code review assistance flows.

We operate from [BUSINESS POSTAL ADDRESS] and are registered as [LEGAL BUSINESS NAME] in India. If you have any inquiries regarding this policy, contact our Privacy and Grievance Officer at povdigitalsolutions@gmail.com or visit POV Digital Solutions.

Core Architectural Notice:

reviews.pov is an AI-assisted review drafting and QR feedback platform. We are entirely independent of Google LLC. We do not fetch, sync, or harvest private Google Business Profile reviews in this customer review generation flow, nor does our software publish reviews directly to Google on behalf of customers. End consumers retain complete autonomy over their feedback and independently publish reviews using their own personal Google accounts.

2. Information We Collect

We collect only the minimum data strictly necessary to deliver, protect, and bill for our software services. This data falls into three categories:

A. Business Subscriber Account Data

  • Contact & Credentials: Business owner name, email address, and cryptographically salted password hashes (processed via bcrypt; plain-text passwords are never stored).
  • Business Profile Details: Business trade name, URL slug, industry vertical, business address or service area, preferred brand tone of voice, and public Google review destination URL or Place ID.
  • Billing & Subscription Metadata: Cashfree Order IDs, Cashfree Payment IDs, active subscription tier (Basic ₹299/mo or Pro ₹799/mo), billing cycle timestamps, and payment verification statuses. We never receive, handle, or store raw credit/debit card numbers, CVVs, expiry dates, or UPI MPINs.

B. End-Customer Review Session Data

When a consumer scans a subscriber's physical QR code or opens a public review link:

  • Rating & Notes: The star rating chosen by the customer (1 to 5 stars) and any optional feedback notes, key highlights, or compliments provided.
  • AI Suggestions & Edits: The AI-drafted review suggestion generated by our serverless AI model and whether the customer modified or replaced the suggested text.
  • Telemetry & Conversion Milestones: Aggregated, anonymous interaction signals indicating whether a customer clicked “Copy Review” or clicked “Continue to Google”.

C. Technical, Security & Performance Telemetry

  • Privacy-Conscious Abuse Prevention: To prevent denial-of-service and fraudulent review spam without infringing consumer privacy, IP addresses are cryptographically hashed using SHA-256 with server-side salting. Raw IP addresses are not stored in review session records.
  • AI Compute Metrics: Token counts (input prompt tokens, completion tokens), inference latency, and Cloudflare Workers AI neuron consumption metrics for capacity planning and billing verification.
  • System Logs: Standard web server headers, user-agent metadata, and timestamps for platform reliability and security monitoring.

3. How We Use Your Information

We process information exclusively for the following legitimate business purposes:

  • Service Delivery: To generate branded QR codes, host dedicated mobile-responsive feedback interfaces, and produce AI-assisted review suggestions reflecting genuine customer experiences.
  • Zero-Hallucination Review Assistance: To convert a customer's raw ratings and bullet points into coherent review drafts while strictly forbidding the fabrication of facts, dates, or unmentioned experiences.
  • Subscriber Analytics: To provide business subscribers with aggregated overview metrics (e.g., total QR scans, conversion rates, completed review sessions) via their private dashboard.
  • Platform Security & Rate Limiting: To enforce tiered generation limits, prevent malicious scraping, block automated bots, and secure our API endpoints.
  • Billing Administration: To activate and maintain 30-day prepaid subscription access via our authorized payment partner, Cashfree.
  • Legal Compliance: To comply with applicable statutory obligations under Indian law, including the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 (DPDPA).

4. Third-Party Service Providers (Subprocessors)

We do not sell, rent, or trade your personal information. We partner exclusively with industry-leading infrastructure, security, and payment providers who adhere to rigorous data protection standards:

Cloudflare Workers AI

Executes inference for review suggestions using the benchmarked @cf/qwen/qwen3-30b-a3b-fp8 model. Input prompts and customer feedback are processed ephemerally in serverless environments and are not used to train or refine public foundational AI models.

Neon PostgreSQL

Cloud serverless PostgreSQL database holding subscriber accounts, encrypted password hashes, business settings, and session metrics with encryption at rest and in transit via TLS 1.3.

Upstash Redis

In-memory data store utilized strictly for atomic rate limiting, distributed concurrency locking, and fail-closed security gating. Holds short-lived cache keys with automatic TTL expiration.

Cashfree Payments

RBI-authorized payment aggregator processing Indian Rupee (INR) transactions. Cashfree complies with PCI-DSS standards. We receive only transaction confirmations and billing tokens; full card numbers or banking secrets never pass through our servers.

Vercel Inc.

Provides edge hosting, global content distribution network (CDN), and secure serverless execution environments for our Next.js web application.

5. Anti-Gating Policy & Consumer Sovereignty

POV Digital Solutions strictly adheres to consumer protection standards and the Indian Consumer Protection Act, 2019, as well as global regulatory guidelines concerning online consumer reviews:

  • No Negative Review Suppression: reviews.pov does not gate, trap, or filter reviews based on rating. Customers selecting 1, 2, or 3 stars have identical and uninhibited access to proceed directly to the business's public Google review listing.
  • Zero Artificial Fabrication: AI prompts are engineered to reflect strictly the customer's expressed sentiment and details. The model is barred from creating fictional praise or fabricating dates and services.
  • Consumer Independence: The generated review draft is solely a writing suggestion. The customer retains the absolute right to edit, completely alter, or discard the draft before deciding whether to submit it to Google.

6. Data Retention & Security Measures

We employ robust administrative, technical, and physical safeguards designed to protect personal and business data:

  • Encryption: All data transmitted between browsers, mobile devices, and our servers is secured using Transport Layer Security (TLS 1.3). Database storage is encrypted at rest using industry-standard AES-256.
  • Access Controls: Database and serverless environment keys are stored in encrypted environment secrets accessible only by authorized administrative infrastructure.
  • Retention Duration: Subscriber account data is retained for as long as the subscription remains registered or active. Inactive account data is pruned in accordance with statutory accounting obligations. Session logs are retained in aggregated or hashed formats for analytical continuity.

7. User Rights & Grievance Redressal

In accordance with the Digital Personal Data Protection Act, 2023 (India) and applicable regulations, you have the right to request access to your account data, correct inaccurate details, request account deletion, or withdraw consent for non-essential processing.

To exercise your rights or file a privacy inquiry, contact our designated Grievance Officer:

Grievance Officer: [GRIEVANCE OFFICER NAME]

Entity: POV Digital Solutions ([LEGAL BUSINESS NAME])

Address: [BUSINESS POSTAL ADDRESS]

Email: povdigitalsolutions@gmail.com

Website: povdigitalsolutions.vercel.app

Response Timeline: Within 30 calendar days of receiving a verified request.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational modifications, product enhancements, or statutory requirements. When updates occur, we will update the “Effective Date” at the top of this page. Continued use of reviews.pov following the posting of updates constitutes acceptance of the revised policy.