Rsreviewpro

Privacy Policy & Data Protection

Digital Personal Data Protection (DPDP) Act 2023 Compliance

We process personal data in line with India’s Digital Personal Data Protection Act 2023.

2.1 Notice & Informed Consent

  • Explicit Consent: Clear purpose and notice are presented before any consumer or business data is processed.
  • Data Minimization: When scanning QR codes, customer name and phone number are strictly optional. Customers provide details voluntarily solely for resolution follow-ups.

2.2 Rights of Data Principals

Under the DPDP Act 2023, every user and customer enjoys protected statutory rights:

  • Right to Access: The right to view copies of recorded personal information.
  • Right to Correction & Erasure: The right to correct inaccurate data or request permanent deletion of personal records.
  • Right to Withdraw Consent: The freedom to withdraw previously granted consent at any time.
  • Right of Grievance Redressal: Rapid redressal of concerns through the designated Data Protection Officer.

2.3 Data Fiduciary & Storage Security

  • Data is stored with Supabase (a managed PostgreSQL database), encrypted at rest (AES-256) and in transit (TLS).
  • Personal customer data is never sold, brokered, or shared with third-party advertisers.

2.4 Grievance Officer Contact

  • Data Protection & Grievance Officer: Mr. Ravi Yadav (Super Admin / Data Governance Lead)
  • Official Email: raviyadav45259@gmail.com
  • Resolution SLA: All requests or grievances under the DPDP Act 2023 are addressed within 7 business days.

Strict Multi-Tenant Data Isolation

Every business client operates within isolated tenant silos. Cross-access or unauthorized leakage between different businesses is technically barred.

3.1 End-to-End Security Architecture

  • Token Authentication: Signed-in requests are verified with Supabase Authentication tokens.
  • Row-Level Security: Supabase row-level security policies limit each business account to its own records, preventing cross-tenant access.
  • Super Admin Oversight: Administrative access is strictly logged for auditing and customer support assistance.

3.2 Real-Time Audit Logs

  • Key account events, such as account activations, plan changes and review status changes, are recorded in audit logs with a timestamp and the user who made the change.