01Scope
This policy explains how NearbyReview Technologies Pvt. Ltd. processes personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000. It covers visitors, reviewers, business owners and the customers whose details owners store in the POS and quotation tools.
02What we collect
We collect only what a feature needs.
- Account: email, password hash, name, and the role we assign (customer, owner, admin).
- Listings: business contact details, address, timings, photos and documents submitted for verification.
- Reviews and questions: the text, rating and the account that posted it.
- Enquiries: the name, phone or email and message a visitor sends to a business.
- Owner tools: products, sales, quotations and the customer names and numbers an owner enters.
- Technical: IP address, browser type and pages viewed, used for rate limiting, security and aggregate analytics.
03Why we use it
To run the directory, publish listings and reviews, deliver enquiries to the business they were sent to, operate the owner tools, bill paid plans, prevent abuse, and send service messages. We do not sell personal data and we do not use it for third-party advertising.
04Consent and lawful basis
Where the DPDP Act requires consent we ask for it at the point of collection, in plain language, and you may withdraw it as easily as you gave it. Certain processing is for legitimate uses recognised by the Act, such as responding to an enquiry you voluntarily sent or complying with law.
05Data owners store about their customers
When an owner records a customer's name or phone number in a sale or quotation, the owner decides the purpose and NearbyReview processes it on their behalf. Owners are responsible for informing their customers and for honouring their requests; we provide export and deletion so they can.
07Retention
Account data is kept while the account is active and for up to 90 days after deletion for abuse prevention. Enquiries are kept while the listing is live. Billing records are kept for eight years as required by tax law. Rate-limit logs are purged automatically within hours.
08Your rights
Under the DPDP Act you may:
- Access a summary of the personal data we hold about you.
- Correct or complete inaccurate data.
- Erase data we no longer need for the purpose it was collected.
- Nominate someone to exercise these rights if you are unable to.
- Withdraw consent and complain to us, and then to the Data Protection Board of India.
09Security
Data is encrypted in transit and at rest. Access is scoped per account by row-level security in the database, so an owner can read only their own leads and sales. Staff access is role-based and logged.
11Grievance Officer
Write to legal@nearbyreview.in or to the Grievance Officer at NearbyReview Technologies Pvt. Ltd., Lower Parel, Mumbai 400013. We acknowledge within 24 hours and respond within 15 days.