Privacy Policy

RevuBoosters is a product of ValuePitch. In this policy, "RevuBoosters", "we", "us" and "our" refer to the ValuePitch team that builds and operates it. RevuBoosters provides review management software for local businesses. This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. It applies to revuboosters.com, app.revuboosters.com, the public business pages and review-funnel pages we host on behalf of our customers, and to our advertising on Meta (Facebook and Instagram) and Google.

• 1. Who we are and who this policy covers
• 2. What we collect
• 3. How and why we use it
• 4. Cookies, pixels and advertising (including Meta Pixel)
• 5. AI-assisted reply drafting
• 6. Google user data and Limited Use
• 7. Who we share data with
• 8. Our role: processor vs. controller
• 9. How long we keep data
• 10. Security
• 11. Where your data is stored
• 12. Your rights and choices
• 13. Children
• 14. Changes to this policy
• 15. Contact and grievance redressal

1. Who we are and who this policy covers

RevuBoosters is a review management product built and operated from India by the ValuePitch team, serving small and medium businesses. Three different groups of people interact with us, and we treat their data differently:

• Business account holders — owners, managers and agency staff who sign in to app.revuboosters.com to manage reviews for their outlets.
• Customers of those businesses — people who scan a RevuBoosters QR code or open a review-funnel link at a shop, cafe, clinic or farm and either leave a public review or send private feedback.
• Website visitors — anyone browsing revuboosters.com, including people who arrive from a Facebook, Instagram or Google ad.

Where this policy says "you", read it as whichever of those groups applies to you.

2. What we collect

2.1 If you hold a RevuBoosters account

• Account details — your name, work email address and a securely hashed password; the role assigned to you (agency admin or business owner).
• Business details you enter — business and outlet names, postal addresses, phone and WhatsApp numbers, an "about" description, website and social media links (Instagram, Facebook, YouTube), your Google Place ID, Google and Facebook review links, and photographs you upload for your public business page.
• Usage records — replies you write or post, which reviews you showcase, settings you change, and basic sign-in activity.

2.2 If you are a customer of a business that uses RevuBoosters

• Your star rating when you tap a rating on a review-funnel page.
• Private feedback — if you rate the business below its happy-customer threshold, the message you write and, only if you choose to provide it, a phone number or email address so the business can get back to you. The contact field is optional and the page works without it.
• Public reviews — if you choose to post publicly, you are handed off to Google or Facebook and your review is governed by their terms and their privacy policies, not ours. We then read back the publicly visible review — reviewer name as displayed, star rating, review text and date — so the business can reply to it from our dashboard.

2.3 If you visit our website

• Technical data — IP address, browser and device type, operating system, referring URL, pages viewed and timestamps, collected in standard server logs.
• Advertising and analytics identifiers — cookies and pixels as described in section 4, including click identifiers such as fbclid and gclid appended by Meta and Google when you arrive from an ad.
• Anything you send us — the content of an email you write to us, or details you submit in a lead or contact form, including a form served inside a Facebook or Instagram ad.

We do not knowingly collect sensitive personal data — such as government identifiers, financial account numbers, health, biometric, caste, religious or sexual-orientation data — and we ask that you do not include it in review text, private feedback or uploaded photographs.

3. How and why we use it

We do not use private feedback, review content or customer contact details for our own marketing, and we do not upload them to advertising platforms as a custom or lookalike audience.

4. Cookies, pixels and advertising (including Meta Pixel)

We use a small number of cookies and similar technologies:

• Strictly necessary — our app stores a sign-in token in your browser's local storage so you stay logged in. Without it the dashboard cannot work. Clearing your browser storage or signing out removes it.
• Analytics — we measure aggregate traffic (pages viewed, referrers, approximate location by region) to understand what is useful on our site.
• Advertising — we advertise RevuBoosters on Meta (Facebook and Instagram) and on Google. To measure whether those ads work, our marketing site loads the Meta Pixel and Google's advertising tags. These set cookies and send Meta and Google a record of your visit — page URL, timestamp, IP address, browser and device information, and, when applicable, a hashed identifier — so that a sign-up can be attributed to an ad you saw and so that you may be shown RevuBoosters ads again on their platforms. Meta may also match this activity to a Facebook or Instagram account if you are logged in to one.

Your controls. You can block or delete cookies in your browser settings, and you can turn off personalised advertising directly at the source:

• Meta: Facebook Ad Preferences and the "Off-Facebook activity" controls in your account settings.
• Google: My Ad Center, or the Google Analytics opt-out add-on.

Turning off advertising cookies does not stop you from using our website; you will simply see less relevant ads. The review-funnel and public business pages we host for our customers do not carry our advertising pixels.

5. AI-assisted reply drafting

When an account holder clicks "Draft with AI", the text of that review and the business's name are sent to a third-party large language model provider to generate a suggested reply. The draft is a suggestion only — nothing is published until a human edits and approves it. We instruct our AI provider not to use this content to train their models, and we do not send them account passwords, customer contact details or private feedback contact fields.

6. Google user data and Limited Use

Where a business connects its Google Business Profile to RevuBoosters, we access Google data only to read that business's reviews and to post replies the business has approved. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not transfer Google user data to third parties except as necessary to provide the service, we do not use it for advertising, and we do not allow humans to read it except with your consent, for security purposes, to comply with law, or where the data has been aggregated and anonymised. You can disconnect the integration at any time from your Google Account's third-party access page or by writing to us.

7. Who we share data with

We share personal data only with the following categories of recipient, and only for the purposes described above:

We do not sell or rent personal data, and we do not share it with data brokers. Agency accounts can see the reviews and feedback of the client businesses they manage; individual business accounts can see only their own.

8. Our role: processor vs. controller

For data about our own account holders and website visitors, RevuBoosters is the controller (a "Data Fiduciary" under India's DPDP Act, 2023). For review and feedback data belonging to a business's own customers, the business is the controller and RevuBoosters acts as its processor (a "Data Processor"), handling that data on the business's documented instructions. If you left feedback for a shop, cafe or clinic and want it deleted, you may contact either that business or us — we will pass the request to them and support it.

9. How long we keep data

• Account and business profile data — for as long as the account is active, and up to 90 days after closure to allow reactivation, unless a longer period is legally required.
• Reviews, replies and private feedback — for as long as the business's account is active, or until the business or the individual asks us to delete it.
• Server and security logs — typically up to 12 months.
• Advertising and analytics data — as governed by Meta's and Google's own retention windows, generally up to 24 months.
• Invoices and tax records — for the period required by Indian law.

10. Security

Traffic to our sites is encrypted with TLS. Passwords are stored only as salted hashes, never in plain text. Access to production systems is limited to staff who need it and is protected by key-based authentication. We keep backups and apply security updates to our servers. No system is perfectly secure, so we also ask you to use a strong, unique password and not to share your login. If a personal data breach occurs, we will notify affected users and the relevant authority (including the Data Protection Board of India) as the law requires.

11. Where your data is stored

Our servers are hosted in India. Some of our service providers — advertising, AI, email and analytics platforms — process data outside India, including in the United States and the European Union. Where that happens we rely on the provider's contractual safeguards, such as standard contractual clauses, and transfer only what the service needs.

12. Your rights and choices

Subject to local law, you can ask us to:

• Access a copy of the personal data we hold about you, and a summary of how it is processed.
• Correct data that is inaccurate, incomplete or out of date.
• Delete data we no longer need, including your account and any feedback you submitted.
• Withdraw consent at any time, where we relied on consent — including unsubscribing from marketing using the link in any email.
• Object to or restrict processing, and request portability of data you gave us.
• Nominate another person to exercise these rights on your behalf in the event of death or incapacity, as provided under the DPDP Act, 2023.

Write to nitya@valuepitch.com and we will respond within 30 days. We may need to verify your identity first. If you are in the EU or UK you may also complain to your local supervisory authority; if you are in India you may complain to the Data Protection Board of India; residents of California and similar jurisdictions have equivalent rights to know, delete and opt out, and we will not discriminate against you for exercising them.

13. Children

RevuBoosters is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, write to us and we will delete it.

14. Changes to this policy

We may update this policy as the product or the law changes. The "Last updated" date at the top always reflects the current version. If a change materially affects how we use your personal data, we will notify account holders by email or an in-app notice before it takes effect.

15. Contact and grievance redressal