Privacy Policy
Last updated: 10 May 2026
This Privacy Policy explains how Eco Biznfc Solutions Private Limited(“we”, “us”, “our”), the operator of the ReviewStar platform (“ReviewStar”, the “Service”), collects, uses, stores, and shares information about you when you use the Service, visit our website, or otherwise interact with us. By using ReviewStar you confirm that you have read and understood this Policy.
1. Who we are
Eco Biznfc Solutions Private Limited is a company incorporated in India with its registered office at Shop No 7, Plot No 5, Manas CHS, Sector 6, Airoli, Navi Mumbai – 400708, Maharashtra, India. For privacy enquiries, contact us at hello@reviewstar.in.
2. Information we collect
We collect the following categories of information:
- Lead capture: shop name, owner name, mobile number, email, city, business category, and any message you submit through the “Get started” form. We log the IP address used to submit the form for fraud prevention.
- Account & subscription: name, email, phone, shop details, plan, and billing identifiers (e.g. Razorpay subscription / order IDs). We do not store full card numbers — those are handled by our payment processor.
- Reviews submitted by your customers: customer name, mobile number, star rating, optional written feedback, country, and the IP address used to submit the review. The customer name and mobile number from a review may also be used to administer the ReviewStar reward draw and contact winners — see Section 6.
- Operational data: device type, browser, log timestamps, and feature usage we need to operate and secure the Service.
3. How we use your information
- To provide, maintain, and improve the Service.
- To set up your account, deliver the smart standee onboarding pack, and send transactional notifications (e.g. new review alerts, billing receipts).
- To prevent spam, fraud, and abuse — including IP rate-limiting, phone validation, and dedup checks on lead and review submissions.
- To respond to support enquiries and product feedback you send us via WhatsApp, email, or in-app forms.
- To send occasional product announcements. You can opt out of marketing communication at any time.
- To operate the ReviewStar reward draw — selecting winners from eligible reviews, contacting them, fulfilling prizes, and meeting tax-deduction obligations. Full details in Section 6.
4. Lawful basis
We process personal data to perform the contract we have with you (the Terms of Service), to comply with our legal obligations, and on the basis of our legitimate interest in operating and protecting the Service. Where the law requires, we ask for your consent.
5. How we share information
We do not sell your personal data. We share information only with:
- Service providerswho help us run ReviewStar — including Supabase (database & auth), Resend (transactional email), and Razorpay (payments). They process data on our behalf under appropriate contractual safeguards.
- Shop ownersreceive the customer review data submitted through their own smart standee. Customer phone numbers are masked in the shop owner's dashboard except for the customer's own most recent submission.
- Authorities when required by law, valid legal process, or to protect the rights, property, or safety of users or third parties.
- Successors in the event of a merger, acquisition, or sale of all or part of our business — your data continues to be protected by a privacy policy at least as protective as this one.
- Public publication of reward-draw winners. If you win the ReviewStar reward draw, we publish your first name only, the last 4 digits of your mobile number (with preceding digits masked), the name and city of the shop you reviewed, the prize value, and the month of the draw — on our public /winners page. We do not publish your full name, full phone number, address, email, the content of your review, or your rating.
6. ReviewStar reward draw
ReviewStar runs a monthly customer reward draw (the “Draw”). Every non-hidden review submitted on a ReviewStar shop's review page during a draw period is automatically entered. The full rules — including eligibility (18+ India residents), tier weighting, prize structure, selection mechanics, and winner notification process — are in our Draw Terms & Conditions.
For the avoidance of doubt, the personal data we use specifically for the Draw is limited to:
- Customer name and mobile number from the review, used to identify and contact winners by SMS, WhatsApp, email (if volunteered), or phone call.
- Review timestamp and shop linkage, used to determine eligibility for the relevant draw period and tier weighting.
- PAN (Permanent Account Number), requested only from winners of prizes greater than ₹10,000 to comply with Section 194B of the Income Tax Act, 1961 (TDS deduction). PAN is not requested at the time of review submission.
- Government-issued identification, requested only during winner verification, retained only as long as needed to verify identity and confirm prize delivery.
We do not use review data for any draw-related marketing, do not sell or share it with prize-fulfilment partners beyond what is operationally necessary to deliver the prize (e.g. a gift-voucher code may need to be sent to your phone or email), and do not retain winner identity documents beyond the verification window.
You may at any time email support@reviewstar.in to opt your future reviews out of the Draw, request that an existing eligible review of yours not be considered, or — if you have already been published as a winner — request that your published name and masked phone be removed from /winners.
7. Data retention
We retain account, subscription, and review data for as long as your account is active and for a reasonable period afterwards to comply with legal, accounting, and dispute-resolution obligations. Lead submissions are retained for up to 24 months unless you ask us to delete them earlier. Reward-draw winner records (winner identifier, tier, prize value, payment reference, and the random seed of the pick) are retained for at least 7 years for tax and audit purposes.
8. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may withdraw any consent you have given. To exercise these rights, email us at hello@reviewstar.in from the email address associated with your account. We may need to verify your identity before acting on a request.
9. Security
We use industry-standard safeguards including TLS encryption in transit, role-based access controls, row-level security at the database layer, and audit logging. No system is perfectly secure, so we cannot guarantee absolute security — please use a strong, unique password and keep your login credentials confidential.
10. Children
ReviewStar is intended for use by businesses and adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has submitted information to us, contact us and we will delete it. Customers under 18 are excluded from the ReviewStar reward draw — see the Draw Terms & Conditions.
11. International users
Our infrastructure is primarily hosted in India. If you access ReviewStar from outside India, you understand that your information may be transferred to, stored, and processed in India.
12. Changes to this Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top and, where changes are material, notify you by email or via an in-app notice.
13. Contact
Questions about this Policy or our handling of your data? Write to:
Eco Biznfc Solutions Private Limited
Shop No 7, Plot No 5, Manas CHS, Sector 6,
Airoli, Navi Mumbai – 400708,
Maharashtra, India
hello@reviewstar.in