1. Introduction
Webteam Private Limited ("we", "us", "our") operates Review Ninja (https://www.reviewninja.in), a B2B software platform that helps businesses collect Google reviews, manage digital business cards, automate WhatsApp engagement, and related marketing tools. This Privacy Policy explains how we process personal data when you visit our website, create an account, use our dashboard, or interact with a review microsite or business card published by one of our customers.
We are committed to protecting your privacy and complying with applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023 ("DPDPA") and the Information Technology Act, 2000 and rules thereunder.
2. Data Controller
For data collected through Review Ninja, the data fiduciary is:
- Webteam Private Limited
- Registered office: 42, 2nd Floor, MG Road, Bengaluru 560001, Karnataka, India
- Email: support@reviewninja.in
- GSTIN: 27AABCU9603R1ZM
When a business customer ("Subscriber") uses Review Ninja to collect reviews or enquiries from their own customers ("End Users"), the Subscriber is generally the data fiduciary for End User data, and Webteam Private Limited acts as a data processor on the Subscriber's instructions. Subscribers are responsible for providing appropriate notices to their End Users.
3. Data We Collect
Depending on how you interact with the platform, we may collect:
- Account data: name, email address, phone number, password (stored hashed), business name, city, and profile details you provide during registration or onboarding.
- Billing data: billing address, GSTIN, payment transaction references, and invoice history. Card and UPI details are processed directly by Razorpay; we do not store full payment credentials.
- Business profile data: logo, address, category, Google Place ID, review URLs, working hours, and content you upload to your review microsite or digital business card.
- Usage and analytics data: pages viewed, feature usage, QR scan counts, review suggestion copies, session identifiers stored in local storage for analytics, IP address, browser type, device information, and referral source (e.g. QR scan vs. direct link).
- End User interaction data (via Subscriber microsites): star ratings, optional written feedback, enquiry form submissions (name, phone, email, message), and language preferences.
- Communications: support tickets, demo requests, emails, and WhatsApp messages you send to us or that we send with your consent.
- Reseller and partner data: company details, commission records, and branch information where applicable.
4. How We Use Your Data
We use personal data for the following lawful purposes:
- Providing, operating, and improving the platform and its features.
- Creating and managing your account, authenticating users, and enforcing security.
- Processing subscriptions, add-ons, invoices, and payments (including GST compliance).
- Generating AI-powered review suggestions based on your business profile and keywords.
- Operating the rating-gate feature: routing low ratings (typically 1–3 stars) to private in-platform feedback while directing higher ratings to Google review pages, as configured by the Subscriber.
- Sending transactional emails and notifications (account verification, billing, service updates).
- Providing customer support and responding to demo or contact requests.
- Analytics to understand product usage, diagnose errors, and prevent fraud or abuse.
- Complying with legal obligations, responding to lawful requests, and protecting our rights.
- Marketing communications only where you have given consent or where permitted by law; you may opt out at any time.
5. Legal Basis for Processing
Under the DPDPA and applicable law, we process personal data based on one or more of the following:
- Your consent (e.g. marketing emails, optional cookies beyond what is strictly necessary).
- Performance of a contract (providing the subscribed services to you).
- Compliance with legal obligations (tax, accounting, regulatory requirements).
- Legitimate uses permitted under the DPDPA, such as preventing fraud, ensuring network security, and improving our services in a manner that does not override your rights.
7. Data Retention
We retain personal data only for as long as necessary for the purposes described in this policy, including:
- Active account data: for the duration of your subscription and a reasonable period thereafter.
- Billing and tax records: as required under Indian tax and company law (typically up to eight years).
- Support and demo request records: up to three years unless a longer period is required for dispute resolution.
- Analytics session identifiers: until cleared from your browser or after a period of inactivity, as described in our Cookie Policy.
- End User feedback and enquiries: as configured by the Subscriber or until the Subscriber deletes them or closes their account.
8. Security
We implement technical and organisational measures appropriate to the nature of the data, including encryption in transit (HTTPS), access controls, hashed passwords, and regular security reviews. No method of transmission or storage is completely secure; please use a strong password and keep your credentials confidential.
9. Your Rights
Subject to applicable law, you may have the right to:
- Access personal data we hold about you.
- Correct inaccurate or incomplete data.
- Erase data where legally permitted (e.g. upon account closure, subject to retention obligations).
- Withdraw consent where processing is consent-based.
- Nominate another individual to exercise your rights in the event of death or incapacity, as provided under the DPDPA.
- Grievance redressal: raise a complaint with our Grievance Officer (see Section 12).
To exercise these rights, contact support@reviewninja.in. We will respond within timelines prescribed by applicable law. End Users who interacted with a Subscriber's microsite should contact that business directly; we will assist Subscribers in fulfilling valid requests where we act as processor.
10. Children
Review Ninja is a business platform not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.
11. Cross-Border Transfers
Your data is primarily processed in India. If we transfer data outside India, we will do so in compliance with applicable law and ensure appropriate safeguards are in place.
12. Grievance Officer
In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDPA, the Grievance Officer for privacy-related complaints is:
- Name: Grievance Officer, Webteam Private Limited
- Email: support@reviewninja.in
- Address: 42, 2nd Floor, MG Road, Bengaluru 560001, Karnataka, India
We aim to acknowledge complaints within 24 hours and resolve them within 15 days, or within such period as required by applicable law.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy where permitted by law.
14. Contact
For privacy questions: support@reviewninja.in. For general support: support@reviewninja.in.