Privacy Policy

Khetvasi Engage ("we", "us") helps local businesses collect genuine customer feedback and lets customers post their own Google reviews. This policy explains what personal data we process and your rights under the Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. Who is responsible

For business accounts, Khetvasi Engage is the Data Fiduciary. For feedback that customers give to a business through our review page, the business is the Data Fiduciary and we act as its Data Processor.

2. What we collect

• Business owners: name, email, mobile number, business details fetched from your public Google Business Profile, and payment records (we never see or store card or UPI details; Razorpay processes payments).
• Customers using a review page: star rating, highlights tapped, optional note, the draft and final review text, preferred language, and basic technical data (browser type, language, referring page). We do not ask customers for their name, phone or email, and we never require them to sign in.
• Cookies: one strictly necessary cookie that keeps business owners signed in. We do not use advertising or cross-site tracking cookies.

3. Why we use it

• To generate a review draft from the customer's own input, using AI providers (Google Gemini, OpenAI, xAI or Meta) that receive only the text needed for the draft.
• To show businesses their feedback and analytics.
• To manage subscriptions, send renewal reminders by email and WhatsApp, and prevent fraud and abuse.

We never sell personal data and never use customer feedback to train AI models.

4. Retention

Customer notes, drafts and technical data are automatically erased after a fixed retention period (180 days by default). Aggregated, non-identifying statistics may be kept longer. Account and payment records are kept as long as required by law.

5. Your rights

Under the DPDP Act you may request access to, correction of, or erasure of your personal data, withdraw consent, and nominate another person to exercise your rights. Email khetvasi@gmail.com and we will respond within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

6. Security

Data is encrypted in transit (HTTPS) and stored with access controls. Payment and AI provider keys are encrypted at rest. Each business can only access its own data.

7. Grievance Officer

Khetvasi Engage, Grievance Officer · khetvasi@gmail.com

8. Changes

We will post updates here and notify business owners by email for material changes.