StarReview is built around one core action: a customer scans a QR code and leaves a review for a business. That involves handling personal information on both sides — the business owner running the account, and the customer submitting feedback. This page explains what we collect, why, and what control you have over it.
1Who This Covers
This policy applies to two kinds of people: business owners who register an account to collect reviews, and customers who scan a business's QR code to leave one. Where the two differ, we've called it out below.
2What We Collect
From a business owner, at registration and while using the dashboard:
- Name, email address, mobile number, and password
- Business name, logo, website, and address
- Payment records for subscription plans, processed through Razorpay — we store the transaction reference, not your card or bank details
From a customer submitting a review through a QR code:
- Name, mobile number, and email address
- Star rating, any per-question ratings, and written feedback
- An optional profile photo, only if you choose to autofill the form using Google sign-in
- Approximate location (latitude/longitude) at the moment of submission, used solely to help confirm the review was left from near the business
Collected automatically from anyone visiting a review page: IP address and scan timestamp, used for rate-limiting and to enforce each business's daily scan limit.
3How We Use It
- To run the core service — showing your review page, recording submissions, and building your dashboard's reports
- To send transactional emails: a thank-you note after a review, a notification to the business owner when new feedback arrives, and a reminder a few days before a plan expires
- To detect and limit abuse — duplicate reviews, scan-limit bypass attempts, or fraudulent activity
- To respond when you contact support
We don't use customer review data for advertising, and we don't sell personal information to anyone.
4Cookies
The review page shows a cookie notice on first visit. Necessary cookies — the ones that keep your session logged in and protect the review form from being submitted twice — are always on, since the page can't function without them. We don't currently use optional analytics or advertising cookies; if that changes, the banner will ask for consent first.
5Third-Party Services
| Service | What it's for |
|---|---|
| RazorpayPayments | Processes subscription payments for business accounts. Card and bank details are handled entirely by Razorpay — we never see or store them. |
| Google Sign-InOptional | Lets a customer autofill their name, email, and photo on the review form. Only used if the customer clicks to enable it — never required. |
| Email deliverySMTP | Sends thank-you emails, new-review notifications, and plan-expiry reminders. |
6Public Visibility
A review's star rating, written feedback, first name, and (if provided) photo are shown publicly on the business's review page for other visitors to see — this is the point of the product. Your mobile number, full contact details, and the location used for verification are never shown publicly; they're visible only to the business owner and used only as described above.
7Data Retention
We keep review data for as long as the business account that collected it stays open, so owners retain their full review history. If a business owner closes their account, we delete their business data and associated reviews within a reasonable period, except where we're required to keep payment records for tax or legal purposes.
8Your Rights
You can ask us to access, correct, or delete personal information we hold about you — whether you're a business owner or a customer who left a review. Email support@starreview.app with your request and we'll respond within a reasonable timeframe.
Deleting a review you left as a customer may require the business owner's confirmation, since it's also their record of a completed transaction.
9Security
Passwords are hashed, never stored in plain text. API keys are stored as a one-way hash — only you see the plaintext key, once, at the moment it's generated. All traffic to StarReview is encrypted in transit, and access to business dashboards is scoped so one business owner can never see another's data.
10Children's Privacy
StarReview isn't directed at children, and the review form isn't intended to be filled out by anyone under 18 without a parent or guardian present.
11Changes to This Policy
If we make a material change to how we handle personal information, we'll notify active business owners by email before it takes effect. The "Last updated" date at the top of this page always reflects the current version.
12Contact
Questions about this policy, or a request about your data? Reach us at support@starreview.app or through our contact page. See also our Terms of Service.