Back to Home
Data Security & Trust

Privacy Policy

Last Updated: October 2026 · An OpenSoz Product (opensoz.com)

1. Overview & Commitment

OpenSoz (“we”, “us”) operates ReviewMitra at reviewmitra.opensoz.com. We respect your privacy and are committed to protecting the personally identifiable information of our business customers and their reviewers. We do not sell, rent, or trade customer data to any third-party advertisers.

2. Information We Collect

  • Account Credentials: Name, email address, business category, and contact details collected during registration or via Google Single Sign-On (SSO).
  • OAuth Access Tokens: Read and reply permissions granted by you to connect Google Business Profiles or Facebook Pages.
  • Public Review Data: Customer reviews, star ratings, reviewer names, and public timestamps retrieved via authorized APIs for aggregation and display.
  • Billing Information: Processed securely via Dodo Payments. We do not store raw credit card numbers or banking secrets on our servers.

3. Bank-Grade Security & AES-256 Encryption

Hardware-grade cryptographic storage

All external platform tokens (Google OAuth access and refresh tokens, Meta access keys) are encrypted before writing to our database using AES-256-GCM authenticated encryption with unique initialization vectors (IV). Decryption keys are stored in secure environment secrets separate from the database layer.

4. How We Use Collected Data

  • To provide the core unified inbox and sync customer reviews across your connected profiles.
  • To generate draft AI replies using secure LLM models with strict prompt encapsulation.
  • To provide customer review QR code landing pages for your physical business location.
  • To dispatch automated WhatsApp or email summary alerts configured by you.

5. Data Retention and Account Deletion

You maintain full ownership of your business data. You can disconnect platform integrations at any time via your dashboard, which immediately revokes and purges active tokens. If you delete your ReviewMitra account, all associated business records and review caches are permanently deleted from our primary databases within 30 days.

6. Contact our Privacy Office

If you have any questions or data requests under applicable privacy frameworks, please reach out to us directly:

Email: privacy@opensoz.com

Organization: OpenSoz Technologies (https://opensoz.com)