Privacy Statement

Introduction

Reviuly is a testimonial collection and display platform built for freelancers, coaches, and D2C brands etc.

We understand that you care about your own personal privacy interests, and we take that seriously. This Privacy Statement describes Reviuly's policies and practices regarding its collection and use of your personal data, and sets forth your privacy rights. We recognise that information privacy is an ongoing responsibility, and so we will update this Privacy Statement as we undertake new personal data practices or adopt new privacy policies.

Contacting Us About Data Protection

For any inquiries or concerns regarding our personal data policies, practices, or if you wish to exercise your privacy rights, please feel free to reach out directly to our Privacy Team. Our team is equipped and committed to assisting you with any questions you have and ensuring your data is handled with the utmost care and respect.

Privacy Team Contact Information:

Reviuly

How we collect and use your personal information

Reviuly collects personal information about its website visitors and customers. With a few exceptions, this information is generally limited to:

• Name
• Email address
• Business name and website URL
• Payment and billing information (processed via Razorpay — we do not store card details)
• Testimonials and reviews submitted by your customers
• Profile photos uploaded voluntarily by reviewers

We use this information to provide, operate, and improve the Service; process payments and manage billing; send transactional emails; and detect and prevent fraud or abuse.

We do not sell personal information to anyone and only share it with third parties who are facilitating the delivery of our services.

From time to time, Reviuly receives personal information about individuals from third parties, for example when you sign in via a third-party OAuth provider such as Google.

Use of the Reviuly Website

As is true of most other websites, Reviuly's website collects certain information automatically and stores it in log files. The information may include internet protocol (IP) addresses; the region or general location where your computer or device is accessing the internet; browser type; operating system; and other usage information about the use of Reviuly's website, including a history of the pages you view. We use this information to help us better suit our users' needs, to help diagnose problems with our server, and to administer our website, analyse trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences.

Reviewer Data & Your Responsibilities

When your customers submit testimonials through your Reviuly form, they become Reviewers. As an Account Holder, you are the data controller responsible for informing your customers that their testimonials will be collected and displayed, and for obtaining any necessary consent required under applicable law — including the Indian IT Act 2000 and Digital Personal Data Protection (DPDP) Act 2023.

Reviuly processes Reviewer data on your behalf as a data processor. We store testimonial content, names, and photos to enable you to display and manage them through the Service. Reviewers may request deletion of their testimonial by contacting the Account Holder or by emailing hello@reviuly.com.

Cookies and tracking technologies

Reviuly uses cookies and similar technologies to keep you logged in to your account, understand how the Service is used via aggregate analytics (Google Analytics), and remember your preferences. You can control cookie settings through your browser. Disabling essential cookies may affect Service functionality. We do not use cookies for behavioural advertising.

Sharing information with third parties

The personal information Reviuly collects from you is stored in databases hosted by trusted third-party providers. These third parties do not use or have access to your personal information for any purpose other than cloud storage and delivery of their services. Our key service providers include:

• Supabase — database and authentication
• Razorpay — payment processing (PCI-DSS compliant)
• Vercel — hosting and infrastructure
• Google Analytics — aggregate, anonymised usage analytics

We do not otherwise reveal your personal data to non-Reviuly persons or businesses for their independent use unless: (1) you request or authorise it; (2) it's required to comply with the law (for example, compelled by law enforcement with a valid warrant or court order); (3) it's necessary to protect our rights, property, or safety, or the rights, property, or safety of our employees or others; or (4) it's required to address disputes, claims, or to address emergencies or acts of God.

Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Account data is retained until you delete your account. Testimonial data is retained as long as your account is active. Billing records may be retained longer as required by applicable tax and financial laws. When you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law.

Your rights

You have the following rights regarding your personal data. These rights may vary depending on your jurisdiction:

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right of data portability
• Right to object

This Privacy Statement is intended to provide you with information about what personal data Reviuly collects about you and how it is used.

If you wish to confirm that Reviuly is processing your personal data, or to have access to the personal data Reviuly may have about you, please contact us at hello@reviuly.com.

Reasonable access to your personal data will be provided at no cost. If access cannot be provided within a reasonable time frame, Reviuly will provide you a date when the information will be provided. If for some reason access is denied, Reviuly will provide an explanation as to why access has been denied.

Data Security

We take reasonable technical and organisational measures to protect your data, including encrypted data transmission (HTTPS/TLS), secure database access controls via Supabase Row Level Security, and payment data handled exclusively by Razorpay. However, no method of transmission over the internet is 100% secure. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

Children's Privacy

Reviuly is not directed at children under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us at hello@reviuly.com and we will delete it promptly.

Changes to This Policy

We may update this Privacy Statement from time to time. When we make significant changes, we will update the "Last updated" date at the bottom of this page and notify registered users via email. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Statement or your personal data, please contact our Privacy Team:

Reviuly Privacy Team

We aim to respond to all enquiries within 2–3 business days.