Privacy Policy
Last Updated: October 2026 · An OpenSoz Product (opensoz.com)
1. Overview & Commitment
OpenSoz (“we”, “us”) operates ReviewMitra at reviewmitra.opensoz.com. We respect your privacy and are committed to protecting the personally identifiable information of our business customers and their reviewers. We do not sell, rent, or trade customer data to any third-party advertisers.
2. Information We Collect
- Account Credentials: Name, email address, business category, and contact details collected during registration or via Google Single Sign-On (SSO).
- OAuth Access Tokens: Read and reply permissions granted by you to connect Google Business Profiles or Facebook Pages.
- Public Review Data: Customer reviews, star ratings, reviewer names, and public timestamps retrieved via authorized APIs for aggregation and display.
- Billing Information: Processed securely via Dodo Payments. We do not store raw credit card numbers or banking secrets on our servers.
3. Bank-Grade Security & AES-256 Encryption
All external platform tokens (Google OAuth access and refresh tokens, Meta access keys) are encrypted before writing to our database using AES-256-GCM authenticated encryption with unique initialization vectors (IV). Decryption keys are stored in secure environment secrets separate from the database layer.
4. How We Use Collected Data
- To provide the core unified inbox and sync customer reviews across your connected profiles.
- To generate draft AI replies using secure LLM models with strict prompt encapsulation.
- To provide customer review QR code landing pages for your physical business location.
- To dispatch automated WhatsApp or email summary alerts configured by you.
5. Data Retention and Account Deletion
You maintain full ownership of your business data. You can disconnect platform integrations at any time via your dashboard, which immediately revokes and purges active tokens. If you delete your ReviewMitra account, all associated business records and review caches are permanently deleted from our primary databases within 30 days.
6. Contact our Privacy Office
If you have any questions or data requests under applicable privacy frameworks, please reach out to us directly:
Email: privacy@opensoz.com
Organization: OpenSoz Technologies (https://opensoz.com)