Privacy Policy

Last updated: 15 Nov 2026

This policy explains what information My Smart GMB ("we", "us"), operated by My Smart GMB, collects, why we collect it, and the choices you have. It applies to our website, the business dashboard, and the customer review pages opened by QR code.

1. Information we collect

Business owners (account holders):

• Name, email, mobile number and password (stored encrypted).
• Business details: name, category, address, logo, brand colour and Google review link.
• Billing details such as plan, subscription status and payment reference. Card and UPI details are handled by our payment partner, never stored by us.
• If you connect Google Business Profile: the access token (stored encrypted), and profile data such as reviews, review replies, posts, and performance numbers (calls, direction requests, website clicks, search keywords).

Customers who leave a review using our QR page:

• We do not ask for a name, phone or email.
• If the customer uses the microphone, the audio is sent only to turn speech into text. Audio is never saved by us, and we request deletion from our speech provider right after.
• The review text stays on the customer's device. The customer copies it and posts it on Google from their own Google account. We do not store the review text.
• We only count events: page scans, star rating chosen, voice or typed use, and "copy to Google" clicks. These counts are not linked to any person. To prevent abuse we keep a one-way hash of the IP address for a short time, not the IP itself.

2. How we use information

• To run the service: create your account, show your QR and review page, and display reports.
• To show and reply to your Google reviews, schedule Google posts and send review alerts, when you ask us to.
• To process subscription payments and send invoices and important account emails.
• To keep the service secure and prevent misuse.

We do not sell personal data. We do not use your data for advertising.

3. Google user data

When you connect your Google Business Profile, we request the business.manage permission only to read your profile information, reviews and performance data, reply to reviews, and publish posts that you create or approve.

• Google data is used only to provide features you can see in your dashboard.
• We do not transfer it to others except the service providers listed below, as needed to run those features.
• We do not use it for advertising and humans do not read it, unless you ask for support, it is needed for security, or the law requires it.
• You can disconnect Google any time from Dashboard, then Google. You can also remove access at myaccount.google.com/permissions.

4. Service providers we use

5. Cookies

We use only necessary cookies for login and security. We do not use advertising cookies.

6. How long we keep data

• Account and business data: while your account is active.
• After you delete your account: removed within 30 days, except invoices and payment records we must keep under Indian tax law.
• Google tokens: deleted as soon as you disconnect Google.
• Backups are overwritten in regular cycles.

7. Security

We use HTTPS, encrypted storage for tokens and keys, access controls and regular backups. No system is fully secure, but we work to protect your data.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 and other applicable law, you can ask to access, correct or delete your data, or withdraw consent. See Delete my data or email us.

9. Children

The service is meant for businesses. We do not knowingly collect data from children.

10. Grievance Officer

Email: help@mysmartgmb.com | Phone: +91 62603 93516
We reply within 7 days and resolve complaints within 30 days.

11. Changes

We may update this policy. We will change the date above and email account holders about important changes.