Privacy Policy — GoReviewsPro

Effective Date: 08-09-2026

GoReviewsPro ("we", "our", "us") is a service of RestoPro Technologies Private Limited, a company registered in India. GoReviewsPro helps businesses manage Google Business Profile reviews, customer feedback, sentiment insights and AI-assisted response drafts across one or more locations.

This Privacy Policy applies to the web dashboard at app.goreviewspro.com, the GoReviewsPro mobile apps for iOS and Android (published by RestoPro Technologies Private Limited), our marketing website at goreviewspro.com, and the public feedback forms our customers publish through the Service. It explains what we collect, how we use it, who we share it with, how long we keep it and how you can delete it.

1. Information You Provide to Us

Account information

Name and email address
Password (stored only as a salted hash)
Profile photo, if you choose to add one
Phone number, if you choose to add one

Organization and location details

Organization name, team members and their roles
Business location details: name, address, phone, email, Google Place ID and review link
Billing details entered by organization owners (billing name, email, phone, GSTIN) and the GST invoices we issue

Content and communications

Team comments, notes and attachments on reviews and feedback
Reply drafts you write or edit before publishing to Google
Support and feature requests you send us, and any email you send to hello@restopro.tech

Usage data

Log data (IP address, browser or device type, timestamps)
Interaction data within the dashboard and the mobile app
Audit records of security-relevant actions in your organization

2. Signing In with Google or Apple

You can create and access your account with an email address and password, with Google Sign-In, or on iOS with Sign in with Apple.

Google Sign-In requests only the basic identity scopes openid, email and profile. We receive your Google account's email address, name and profile picture and use them solely to create and identify your GoReviewsPro account. Signing in with Google does not give GoReviewsPro any access to your Google Business Profile, Gmail, Drive, Contacts, Calendar or any other Google service.
Sign in with Apple requests your name and email address. If you use Apple's Hide My Email, we receive and store the private relay address Apple assigns, and all email to you goes through it.

You can stop using a sign-in provider at any time: revoke GoReviewsPro at myaccount.google.com/permissions or under Sign in with Apple in your Apple Account settings. Your GoReviewsPro account remains until you delete it (see section 11).

3. Connecting a Google Business Profile

An organization owner or admin can connect a location to a Google Business Profile from the web dashboard. This uses Google OAuth 2.0 with the scope https://www.googleapis.com/auth/business.manage together with the identity scopes openid, email and profile (used to show which Google account is connected). The connection is only available to the verified owner or an authorized manager of the profile, and only after explicit consent on Google's consent screen.

What we access through the Google Business Profile API

The list of Google Business Profile accounts and locations you manage
Location details: name, address and review link
Reviews: the reviewer's public display name and profile image, star rating, review text, review date and any attached media
Existing owner replies, and the replies you publish through GoReviewsPro
Near-real-time review notifications delivered by Google Cloud Pub/Sub when you enable them

What we do with it

Display and organise reviews for each of your locations
Produce sentiment analysis, insights and reports
Prepare AI-assisted reply drafts for your review and approval
Publish a reply to Google only when an authorized user chooses to

What we never do

Access Gmail, Google Drive, Contacts, Calendar or any other Google data
Post, edit or delete anything on your profile without a user action
Use review data to identify, contact, advertise to or profile reviewers
Sell Google user data or use it for advertising or generalized AI training

OAuth tokens. The access and refresh tokens Google issues are held only on our servers, in a database that is encrypted at rest, with access restricted to the systems that sync reviews. Tokens are never exposed to the browser or the mobile app.

Disconnecting. You can disconnect a Google Business Profile at any time from the location's settings in the dashboard ("Disconnect Google") or by revoking GoReviewsPro at myaccount.google.com/permissions. Disconnecting revokes the token with Google and immediately deletes that location's Google reviews, AI analyses, reply logs, Pub/Sub events and stored tokens from our active systems.

4. Data We Process on Behalf of Our Business Customers

Our customers are businesses. Some of the data in the Service is about their customers rather than about our users, and we process it as a service provider on the business's instructions:

Google reviewers — the public display name, profile image, rating and text of reviews left on the business's Google Business Profile. We show them to the business team and use them for analysis only; we never contact or profile reviewers.
Feedback-form respondents — answers, and where the business asks for them, contact email or phone number, submitted through feedback forms and QR codes the business publishes. One-time verification codes are stored only as hashes.
Other review platforms — review notifications (for example from Zomato) that a business chooses to forward to a GoReviewsPro inbound email address.
Business-configured tracking — a business may add its own analytics or advertising pixels to its public feedback forms. Those pixels belong to the business and are governed by its own privacy policy, not ours.

If you are a reviewer or form respondent and want to exercise your rights, please contact the business you interacted with; we will assist the business in responding. You can also write to us at hello@restopro.tech.

5. Mobile App Data

The GoReviewsPro apps for iOS and Android give you the same organizations, reviews and feedback as the web dashboard. In addition to the account data above, the apps process:

Push notifications — only if you turn them on. We store an Expo push token, a random installation identifier, the platform and the app version so we can deliver notifications to your device. Tokens are revoked when you log out, turn notifications off or delete your account.
Photos — the app asks for photo-library access only when you choose a profile photo or attach an image to a comment. The app does not use the camera, microphone, contacts or location.
Session storage — your sign-in session is kept in the device keychain (iOS) or keystore (Android) and is removed when you log out.
Crash diagnostics — production builds send crash reports to Sentry with personal identifiers stripped (no name, email, user ID, request bodies or headers). We use them only to fix defects.

The apps contain no advertising, no third-party analytics or tracking SDKs, do not use the advertising identifier, and do not track you across other companies' apps or websites.

6. How We Use Data

We use the data described above strictly to provide the Service:

Creating and securing your account and organizations
Aggregating and displaying customer reviews and feedback
Performing sentiment analysis and generating insights and reports
Generating AI-assisted response drafts
Allowing users to manually review, edit, approve, and post responses to Google
Sending product notifications, scheduled reports and service emails you or your organization configure
Billing organizations and issuing GST invoices
Responding to support requests and keeping the Service secure

We do not sell or rent personal data, use it for advertising, or use it to train generalized AI models.

7. AI Processing

To provide insights and reply drafts:

Review and feedback text is sent to third-party AI providers — currently OpenAI, Together AI and Groq — through their business APIs, under terms that prohibit them from using our data to train or improve their models.
We minimise what we send: reviewer names are never sent to the model, and no account credentials or tokens are ever included.
AI output is a draft. Nothing is published to Google until an authorized user reviews and approves it.
Google Business Profile data is not used to train AI models, ours or anyone else's.

We do not sell or rent your data. We share it only with the service providers below, each bound by contract to protect it and to use it only to provide their service to us, and with legal or regulatory authorities where the law requires.

Supabase — database, authentication and file storage
Hetzner Online — application servers; Cloudflare — DNS, CDN and security in front of the dashboard; Netlify — hosting for the marketing site
Google — Business Profile API, OAuth and Sign-In, Places API and Cloud Pub/Sub; Apple — Sign in with Apple and App Store distribution
Resend — transactional email (invites, reports, password resets, invoices)
Razorpay — subscription payments for organizations, processed on the web dashboard
Expo — push notification delivery and mobile app updates; Sentry — mobile crash reporting
OpenAI, Together AI and Groq — AI processing as described in section 7
Internal support tooling — help requests you submit are relayed to our support team's messaging channel so we can respond

9. Compliance with Google API Services User Data Policy

GoReviewsPro's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, Google user data is:

used only to provide or improve user-facing features that are prominent in GoReviewsPro
never transferred to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition with prior notice
never used or transferred for serving advertisements
never used to train non-personalised or generalized AI or machine learning models
never read by a human except with your permission, for security purposes, to comply with law, or in aggregated, anonymised form

10. Data Retention

Account data is kept while your account exists.
Organization data (locations, reviews, feedback, comments, reports) is kept while the organization exists, including while a subscription is paused.
Google Business Profile data for a location is deleted immediately when that profile is disconnected.
Deleted organizations enter a 30-day recovery window during which an owner can restore them; after that window they are permanently purged.
Invoices and billing records are retained for the period required by Indian tax law even after an account or organization is deleted.
Security and audit logs are retained for up to 12 months.
Backups are cleared within 30 days of the underlying data being deleted and cannot be recovered after that.

11. Deleting Your Account

You can delete your GoReviewsPro account yourself, without contacting us, from Settings → Delete account in the iOS or Android app or in the web dashboard at app.goreviewspro.com. If you cannot sign in, email hello@restopro.tech from the address on the account with the subject "Account deletion request"; we verify your identity and complete the deletion within 7 days. Step-by-step instructions are on our account deletion page.

When your account is deleted we:

delete your sign-in credentials and authentication record
delete your name, email address, phone number and profile photo, and replace your name on past team comments with "Deleted team member"
revoke and delete your push notification tokens and preferences
end all your organization memberships
for each organization you are the sole owner of, either transfer it to the successor you choose or delete it (with the 30-day recovery window above)

Organization data that other members still need (locations, reviews, feedback) stays with the organization. Replies already published to Google remain on Google and can be removed there by the profile owner.

12. Data Security

We implement strong security measures:

Encryption in transit (TLS 1.2+) for every connection
Encryption at rest for our database and file storage
Restricted, role-based internal access and audit logging
Idempotent, audited deletion so that a deletion request is carried out exactly once and can be verified

13. User Rights (India — DPDPA 2023)

Pursuant to the Digital Personal Data Protection Act, 2023 (DPDPA), users acting as Data Principals may:

Request access to their personal data held by GoReviewsPro
Request correction of inaccurate data
Request erasure of their personal data
Withdraw consent to data processing at any time
Nominate another person to exercise these rights on their behalf
Raise a grievance and, if unresolved, approach the Data Protection Board of India

To exercise any of these rights, or to raise a grievance, contact our Grievance Officer:

Saatvik Arora, Grievance Officer
RestoPro Technologies Private Limited
E-573 T/F Greater Kailash-2, New Delhi, Delhi, India, 110048
Email: hello@restopro.tech

We acknowledge grievances within 72 hours and resolve them within 30 days.

14. Children

GoReviewsPro is a business service and is not directed at anyone under 18. We do not knowingly collect personal data from children; if you believe a child has provided data to us, contact hello@restopro.tech and we will delete it.

15. International Transfers

We are based in India. Some of the sub-processors in section 8 process data outside India (for example in the European Union or the United States). We transfer data only to providers that commit contractually to protect it to a standard equivalent to this policy.

16. Changes to This Policy

We may update this policy from time to time. The effective date at the top shows the current version, and we notify users of material changes in the dashboard or by email before they take effect.

17. Contact

RestoPro Technologies Private Limited (GSTIN 07AAPCR9141M1ZN)
E-573 T/F Greater Kailash-2,
New Delhi, Delhi, India, 110048
Email: hello@restopro.tech
Phone: +91 87005 87407