Privacy Policy

Welcome to Vinitech Solutions ("we," "our," or "us"). We provide digital marketing, web engineering, and automated reputation management applications, including our multi-client Google Business Profile Review Management System.

This Privacy Policy details how we collect, store, process, and protect your information when you access https://vinitech.in and use our customer reputation software.

1. Information We Collect

When you register as an agency client or connect your digital marketing profiles, we collect:

• Account & Business Information: Client name, company legal/trade name, official email address, telephone contact number, physical office address, and website URL.
• Google Account & OAuth Data: When you connect your Google Business Profile via OAuth 2.0, we receive authorization credentials (access tokens and refresh tokens), authorized Google Account IDs, business location IDs, and associated public business listings.
• Google Reviews Content: Public reviews, reviewer names, public profile image links, star ratings (1 to 5), customer comments, timestamp of review submission, and owner response logs.

2. How We Use Your Information

We strictly utilize the information collected for the following operational purposes:

• To sync public customer reviews from your authorized Google Business Profile locations into your agency management console.
• To analyze review sentiment and star ratings to formulate relevant, helpful review responses using generative AI technologies.
• To publish approved or automated review responses back to Google Business Profile via official Google APIs.
• To send administrative notices, sync updates, and performance analytics reports.

3. Data Protection and Encryption

We implement industry-standard administrative, physical, and technical security safeguards:

• All OAuth tokens (Access Tokens and Refresh Tokens) and API credentials are stored encrypted in our databases using AES-256-CBC encryption.
• All network communication occurs exclusively over encrypted Secure Sockets Layer (SSL/TLS) connections via HTTPS.
• Strict role-based access control (RBAC) ensures multi-tenant isolation, meaning one client cannot inspect, query, or modify another client's Google account or reviews.

4. Third-Party Disclosures & Data Sharing

We do not sell, rent, lease, or trade your personal or business data to any third party for marketing or advertising purposes.

Data is shared solely with the following processing infrastructure providers strictly necessary for application functionality:

• Google APIs: For token validation, listing retrieval, review reading, and reply publishing under the official Google Business Profile API terms.
• AI Infrastructure Providers (e.g., OpenAI API): Review text and star ratings are transmitted via encrypted API endpoints solely to generate natural language replies. Data passed to the API is not used to train public machine learning models.

5. Data Retention and Revocation

We retain synced review records and logs as long as your service subscription remains active. You maintain full ownership and control over your accounts:

• You may disconnect your Google Business Profile at any moment directly from your client console.
• You can revoke our app's access at any time via your Google Account Security Permissions.
• Upon written request to connect@vinitech.in, we will permanently purge all stored tokens, credentials, and cached review logs within 7 business days.

6. Cookies and Tracking

Our application uses essential session cookies solely to preserve user authentication state, session security, and cross-site request forgery (CSRF) tokens. We do not deploy third-party advertising trackers.

7. Contact Us

If you have any questions, inquiries, or privacy-related requests regarding this Privacy Policy, please contact our Data Governance Officer: