Privacy Policy

Creator Canvas("we", "us") operates reputation and feedback tools for local businesses in India (including coaching centres, clinics, salons, and gyms). This policy explains how we handle personal data under applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Data we collect

• Business owners: account email, business name, city, Google review URL, optional phone number.
• Customers/parents: name, phone number (entered by the business), and any feedback text submitted via review links.
• Technical: invite open/click events, subscription status, payment metadata via Razorpay (we do not store card numbers).

2. Purpose of processing

Data is used solely to: deliver review-request links, route feedback to the correct business owner, generate optional AI draft replies, process subscriptions, and improve service quality. We do not sell personal data.

3. Legal basis & consent

Business owners consent when creating an account. End customers are invited by the business via WhatsApp; feedback submission is voluntary. Businesses are responsible for having a lawful basis to contact their customers.

4. Data retention

We retain account and feedback data while the business subscription is active and for a reasonable period thereafter for legal and support purposes. Owners may request deletion by contacting us.

5. Processors & security

We use Supabase (hosting/database), Vercel (application hosting), Groq (optional AI text generation), Razorpay (payments), and SMTP providers (email alerts). Data is accessed only as needed to operate the service.

6. Your rights (DPDP)

Indian data principals may request access, correction, or erasure of personal data, and may withdraw consent where applicable. Contact us at the email on our website. You may also lodge a complaint with the Data Protection Board of India when constituted.

7. Contact

For privacy requests: privacy@commendly.in