Data usage

The engineering-level companion to the privacy policy: exactly what flows where.

Data you give us, and what it powers

• Business type chooses the writing style of review drafts and the choices customers tap.
• Mobile number appears in reply drafts you generate (so unhappy reviewers can call you) and is how our team reaches you about NFC card requests.
• Google Place ID is the key for everything read from Google: the direct review link, profile analysis, the reviews inbox, the widget, competitor tracking.
• Review page language sets the interface language your customers see.

Data created by customers on your review page

• Each visit records anonymous steps: page opened, stars tapped, help taken, Google opened, with the source (QR or which NFC card). No cookies identify the customer, no name or device fingerprinting.
• The review text a customer drafts is generated on our server from their taps, copied to their clipboard, and posted by them on Google. We keep the taps (as anonymous answers), not a per-customer record of who posted what.
• Private feedback (message, optional name and phone) is stored for the business and emailed to its owner.

Data read from Google's Places API

• For your profile: rating, review count, latest reviews, photo count, opening hours, website, phone, category. Refreshed on demand (cached one hour) and daily for the reviews inbox.
• For competitors you add: name, rating, and review count, refreshed daily.
• This is data Google already shows publicly on Maps. Google's terms govern it, and we do not resell or republish it beyond your dashboard and your own website widget.

Data that leaves TopGenie

• To Razorpay: the amount, plan, and your account id, when you pay. Your card or UPI details go to Razorpay directly, never through us.
• To Google: your Place ID and your competitors' Place IDs, in API lookups.
• To your own website: the widget serves your business name and your public 4 and 5 star reviews to any site where you paste the embed code.
• Nowhere else. No ad networks, no data brokers, no analytics companies.

Automatic cleanup

• Anonymous review-page activity older than six months is deleted every night.
• Expired paid plans are recorded and downgraded nightly, leaving a lifecycle trail rather than silent changes.
• Database backups rotate on a seven day cycle.

Staff access

Platform staff can view accounts to support them. Every privileged staff action, plan changes, suspensions, impersonated sign-ins, is written to an append-only, tamper-evident audit log. Support-level staff can read but cannot change anything.