1. Scope of this policy
Revynto ("Revynto", "we", "us") is a product owned and operated by Grow Tech Pvt. Ltd., a company registered in Nepal (growtech.com.np). This policy explains how we collect, use, and protect information across our website (revynto.com) and web application (app.revynto.com). It applies to every visitor and account holder, and it specifically describes how we handle data we receive through Google APIs, as required by the Google API Services User Data Policy.
2. Information we collect
| Category | What it includes |
|---|---|
| Account information | Your name, email address, hashed password (we never store passwords in plain text), and, optionally, phone number and business location. |
| Google user data | When you connect a Google Business Profile, we request the business.manage scope to read your business locations and their reviews (reviewer name, star rating, and review text) and to publish, on your explicit approval, the replies you write or accept. When you sign in with Google, we request the openid email profile scopes to read only your name and email address. We do not request or access anything beyond these scopes. |
| Content you create | Reply drafts, saved reply templates, support messages, and any files you attach to a support ticket. |
| Billing data | Subscription plan, invoices, and payment status. Card and bank details are collected and processed directly by Paddle, our Merchant of Record; they never reach our servers. |
| Usage & log data | Feature usage (e.g. number of AI replies generated this month), sign-in timestamps, and IP address, used to enforce plan limits, secure accounts, and diagnose issues. |
| Cookies | Strictly functional, first-party session cookies that keep you signed in. No third-party advertising or cross-site tracking cookies. |
3. How we use information
- To sync your Google Business Profile reviews into your inbox and let you search and filter them.
- To draft AI-generated reply suggestions based on the review's text and rating, for your review before anything is sent.
- To publish, to Google, only the exact reply text you approve or write yourself.
- To let you sign in securely with Google instead of (or alongside) a password.
- To send transactional email — verification codes, billing receipts, support replies, and optional product updates you can opt out of.
- To bill your subscription through Paddle and enforce the usage limits of your plan.
- To secure the service: detect abuse, rate-limit requests, and investigate fraud.
4. Google user data & Limited Use
Revynto's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:
- We only use Google user data to provide or improve the user-facing features described in this policy — syncing reviews, drafting replies, publishing the replies you approve, and Google Sign-In.
- We do not use Google user data to serve advertisements of any kind, including personalised, retargeted, or interest-based ads.
- We do not allow anyone to read Google user data except: (a) with your affirmative consent, for a specific purpose you requested; (b) when necessary for security purposes, such as investigating abuse or a breach; (c) to comply with applicable law; or (d) where the data has been aggregated and anonymised.
- We do not sell Google user data.
- We do not transfer Google user data to third parties, except to the sub-processors listed in Section 8 who help us operate the service under confidentiality obligations, to comply with the law, or as part of a merger or acquisition, in each case only in a manner consistent with this policy.
5. AI processing
When you request an AI-drafted reply, the review's text, star rating, and your business name are sent to our AI provider (OpenRouter) solely to generate that draft. The draft is shown to you for approval or editing — nothing is posted to Google without your action. We do not use your data to train our own models, and this data is not used for advertising.
7. Storage & security
Data is stored in a managed, encrypted PostgreSQL database. Uploaded files (profile photos, support attachments) live in private cloud storage (Amazon S3) and are only ever served through short-lived, signed links — never a public bucket. Passwords are hashed with bcrypt and never stored or logged in plain text. Sessions use short-lived, httpOnly tokens so they can't be read by client-side scripts.
9. Data retention & deletion
You control your data and your Google connection independently, in three ways:
- Delete your account — from Settings, at any time. It's deactivated immediately and permanently deleted, along with associated Google review and reply data, after a 30-day window in which you can restore access by simply logging back in.
- Disconnect one location — remove a single Google Business Profile at any time without deleting your whole account.
- Revoke Google access — at any time from your Google Account permissions page. This immediately stops any further access to your Google data, independent of whether you also delete your Revynto account.
10. Your rights
You can access, correct, export, or delete your personal data at any time from Settings, or by emailing support@revynto.com. We'll respond to verified requests within a reasonable time.
11. International data transfer
Revynto is operated using cloud infrastructure that may process and store data outside your country of residence. Wherever your data is processed, we require our sub-processors to protect it consistently with this policy.
12. Children's privacy
Revynto is a business tool and is not directed at, or knowingly used to collect data from, children. If you believe a child has provided us with personal data, contact us and we'll delete it.
13. Changes to this policy
We may update this policy as the product changes. Material changes will be announced by email or in-app notice before they take effect. The "Last updated" date above always reflects the current version.
14. Contact
Questions about this policy or how we handle your data? Email us at support@revynto.com, or write to Grow Tech Pvt. Ltd. (growtech.com.np), the company that owns and operates Revynto.