Privacy Policy — ReviewMonk

Effective Date: 27-04-2026

1. Data Collection

Through Google OAuth 2.0 using the Google Business Profile scope https://www.googleapis.com/auth/business.manage, we access Google Business Profile name, location details, reviews, ratings, and existing owner review responses. This is the only Google OAuth scope ReviewMonk requests. We do not access Gmail, Google Drive, Google Contacts, Google Calendar, or any other Google service or account data. This data is used solely to provide review management, sentiment analysis, reporting, and manual review response functionality.

We do not sell your data, use it for advertising, or use it to train generalized AI models.

User Account Information

• Name
• Email address
• Business details

Usage Data

• Log data (IP address, browser type, timestamps)
• Interaction data within the dashboard

2. How We Use Data

We use the collected data strictly to provide our core services:

• Aggregating and displaying customer reviews
• Performing sentiment analysis and generating insights
• Generating AI-assisted response drafts
• Allowing users to manually review, edit, approve, and post responses to Google
• Sending product-related notifications, reports, and service communications where configured by the user

We do not use this data for advertising or resale.

3. AI Processing

To provide insights and response drafts:

• Review content may be processed by secure third-party AI providers
• We implement data minimization and do not send unnecessary personal data
• Google Business Profile data is not used to train AI models, including the models of any third-party AI providers engaged by ReviewMonk
• ReviewMonk requires that third-party AI processors do not use submitted data for model training or fine-tuning purposes

4. Data Sharing

We do not sell or rent your data.

Data may be shared only with:

• Google APIs, to fetch or post data requested by authorized users
• Secure third-party processors, for AI processing, hosting, infrastructure, analytics, and service delivery
• Legal or regulatory authorities only if required by applicable law

5. Data Retention

You may disconnect your Google account or connected Google Business Profile at any time. When a Google Business Profile is disconnected, ReviewMonk immediately revokes access where applicable and deletes all related Google Business Profile data from active production systems. If your ReviewMonk user account is deleted, all Google Business Profile data, review data, OAuth tokens, and related account data associated with that user account are deleted from active production systems immediately. Backup copies, if any, are cleared within 2 weeks and cannot be recovered after backup clearance.

6. Data Security

We implement strong security measures:

• Encryption in transit (TLS 1.2+)
• Encryption at rest
• Restricted internal access

7. User Rights (India — DPDPA 2023)

Pursuant to the Digital Personal Data Protection Act, 2023 (DPDPA), users acting as Data Principals may:

• Request access to their personal data held by ReviewMonk
• Request correction of inaccurate data
• Request erasure of their personal data
• Withdraw consent to data processing at any time

To exercise any of these rights, contact hello@reviewmonk.in

8. Compliance with Google API Services User Data Policy

ReviewMonk complies with the Google API Services User Data Policy, including Limited Use requirements. Data accessed via Google APIs is used only to provide user-facing functionality requested by authorized users and is not used for advertising, resale, generalized AI model training, or any unrelated purpose.

9. Contact

For any queries: hello@reviewmonk.in