Privacy Policy

RatifyAI (“RatifyAI”, “we”, “us”) is a review-management service operated by EESWEB, India, at ratify.eesweb.in. This policy explains what data we collect, why, how long we keep it, and the choices you have.

It covers two groups of people:

• Business customers: businesses that sign up for RatifyAI and use its dashboard.
• Visitors: people who scan a business's RatifyAI QR code and use its review page.

1. Data we collect

From business customers

• Account details: email address and a password, stored only as a one-way hash.
• Business details you enter: business name, type, city, branches, logo, review topics, Google review links and notes for review suggestions.
• Usage records: sign-in times and changes made to settings, kept for security and support.

From visitors to a review page

• Star rating and topics the visitor picks.
• Private feedback: if a visitor leaves feedback for the business, we collect the message, their name and their phone number, so the business can contact them.
• Technical data: device type, browser user agent, approximate country and IP address. IP addresses are used only to stop abuse (rate limiting); they are not kept with feedback records.
• Browser storage: the review page saves a short history of review suggestions in your own browser so it doesn't repeat them. We use no advertising or tracking cookies.

From a connected Google Business Profile

A business customer can choose to connect its Google Business Profile by signing in with Google and granting RatifyAI access. When they do, we access, through the Google Business Profile APIs:

• the list of business accounts and locations the Google account manages;
• location details, including name, address, Place ID and the link customers use to write a review;
• reviews of those locations: star rating, review text, reviewer display name and photo link, dates, and existing replies;
• the location's average rating and total review count.

We store an encrypted Google refresh token so these features keep working while the business owner isn't signed in.

2. How we use data

• To run the service: show the review page, send happy customers to Google, pass private feedback to the business, and show reports on the dashboard.
• To suggest review wording with AI. The topics a visitor picks are sent to our AI provider to draft a suggestion. The visitor can edit or discard the text, and nothing is posted for them.
• For connected Google Business Profiles:
  • to show the business its own Google reviews, rating and rating trend;
  • to fill in its Google review links;
  • to post a reply when the business owner writes or approves one. AI-drafted replies are never posted without the owner's approval.
• To keep accounts secure, prevent abuse and give support.

We do not sell data, use it for advertising, or show one business's data to another.

3. Google user data

• We use Google Business Profile data only to provide the features the business turned on, and only for that business.
• We don't transfer it to others, except as needed to run the service (for example our hosting and database providers), to comply with law, or as part of a merger or sale with notice to you.
• We don't use it to serve ads, and we don't use it to train AI models.
• People don't read it, except with the business's permission (for example for support), for security, or where the law requires.
• Disconnect any time: in RatifyAI Settings, or at myaccount.google.com/permissions. When you disconnect, we delete the stored token straight away and the cached Google reviews within 30 days.

4. Who we share data with

We use these service providers to run RatifyAI. Each one only processes data for us.

The business whose review page you used receives your rating and any private feedback, including your name and phone number. That business is responsible for how it uses your details once it has them.

5. How long we keep data

• Account and business data: while the account is open. We delete it within 30 days of the account being closed.
• Feedback and scan records: while the business's account is open, unless the business deletes them sooner.
• Google tokens and cached reviews: as described in section 3.
• Backups: deleted data can stay in encrypted backups for up to 30 more days before it is overwritten.

6. Security

We protect data in these ways:

• All traffic uses HTTPS.
• Passwords are hashed and Google tokens are encrypted.
• Each business can only see its own data.
• Sign-in attempts are rate-limited.

No system is perfectly secure. If a breach affects your data, we will tell you as the law requires.

7. Your rights

You can ask to see, correct or delete your personal data, or withdraw consent, under India's Digital Personal Data Protection Act, 2023 and other laws that apply to you.

• Business customers: email us, or change most details yourself in Settings.
• Visitors: contact the business you left feedback with, or email us and we'll help.

We reply within 30 days.

8. Children

RatifyAI is for businesses and adults. We don't knowingly collect data from children under 18.

9. Changes

If we change this policy, we.ll update this page. For important changes, we'll tell business customers by email or on the dashboard.

10. Contact

EESWEB (RatifyAI) · India · Email: support@eesweb.in