This notice explains, in plain language, what personal data Ainygo Technologies (“we”, “us”) collects when you use ReviewPine, why we collect it, and the rights you have, including under the EU General Data Protection Regulation (GDPR), the UK GDPR and US state privacy laws such as the California Consumer Privacy Act (CCPA).
The short version: our widget collects nothing about the people who visit your website. We collect only what we need to run your account, bill you and keep the service secure. We never sell personal data or use it for advertising.
1. Who is responsible for your data
Ainygo Technologies is the controller of the personal data described here. We are a company based in India.
- Business
- Ainygo Technologies
- Address
- H. No. 140 Akodha, Karachhana
Prayagraj (U.P.) India - 212301 - [email protected]
For any privacy question or request, write to [email protected].
2. What we collect, why, and our legal basis
| Data | What exactly | Why, and the legal basis |
|---|---|---|
| Account | Your name and email address. | To create your account, sign you in and send service emails. Performance of our contract with you. |
| Sign-in | One-time sign-in codes (stored only as a scrambled hash, valid for 10 minutes) and the IP address a request came from. | Passwordless sign-in and protecting accounts from abuse. Contract, and our legitimate interest in keeping the service secure. |
| Billing | Name, business name, VAT or tax number (if you add one), billing address and country, phone (optional); subscription and payment references from PayPal. | To take payments, issue invoices and keep accounting records. Contract, and our legal obligations (tax and accounting law). |
| Your business | The Google Business Profile you connect (its place identifier and name) and the widget settings you choose. | To fetch and display your Google reviews on your website. Contract. |
| Support | What you write to us and our replies. | To answer your questions and improve the service. Contract and legitimate interests. |
| Security logs | Server logs with IP address, time and the page requested. | To keep the service secure and investigate incidents. Legitimate interests and legal obligations. |
We do not receive or store your card details: PayPal handles payments directly. We do not collect special-category data (such as health or biometric data), we make no automated decisions with legal effects about you, and we do not use your data for profiling or advertising.
3. Visitors to our customers’ websites
The ReviewPine widget sets no cookies, uses no local or session storage and sends no tracking or analytics data to us, so it needs no cookie consent under EU and UK rules. It downloads a small file containing the business’s reviews from a content delivery network and displays it; like any image or font, delivering that file involves the visitor’s IP address, which we do not use to identify or follow anyone. Reviewer profile pictures and the Google “G” logo are loaded from Google’s own servers, so Google may receive a visitor’s IP address, as it would for any image hosted by Google.
4. Reviews and the people who wrote them
Our widget shows reviews that reviewers chose to publish publicly on Google, with the reviewer’s public display name and profile picture. We show them as published, with attribution, and never edit their words. If you wrote a review and would like it removed from widgets we serve, email [email protected] with a link to the review. We honour these requests.
5. Who we share data with
We share personal data only with service providers that process it on our behalf under written data-processing terms, and only as needed for the purposes above:
- PayPal: payment processing and subscriptions (PayPal also acts as an independent controller under its own privacy statement).
- Our review data provider: fetches your public Google reviews. We send it your business’s place identifier, not your personal details.
- Cloudflare: content delivery and storage of the widget files (which contain your business name and public reviews).
- Hosting and email providers: to run our servers and deliver service emails.
We may disclose data when the law, a court order or a lawful request from a public authority requires it. We never sell personal data and never “share” it for cross-context behavioural advertising, as those terms are used in US state privacy laws.
6. International transfers
We are based in India and our providers may process data in other countries. When personal data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum), and apply the same protections wherever the data is processed. You can ask us for a copy of the safeguards.
7. How long we keep it
- Account and business data: while your account is active. After you close your account we delete it, or make it anonymous, within 90 days.
- Invoices and payment records: for as long as tax and accounting laws require (currently about eight years).
- Sign-in codes: 10 minutes, and deleted once used.
- Security logs: up to 180 days.
8. Your rights
Depending on where you live, you have the right to:
- Access your personal data and get a copy of it;
- Correct inaccurate or incomplete data (you can change your name and email yourself under Account);
- Delete your data, unless we must keep it by law;
- Restrict or object to processing based on our legitimate interests;
- Portability: receive the data you gave us in a machine-readable format;
- Withdraw consent where we rely on it, at any time;
- Know and opt out: under US state laws, know what we collect and opt out of any sale or sharing (we do neither), without being treated differently for using your rights;
- Complain to a data protection authority, for example your local EU supervisory authority or the UK Information Commissioner’s Office (ICO). We would appreciate the chance to help first.
To use any right, email [email protected] from your registered email address. We reply within one month (extendable by two further months for complex requests, in which case we will tell you why), and within the time your local law sets if that is shorter. We may need to confirm your identity first.
9. How we protect your data
Encryption in transit (HTTPS) everywhere, sign-in codes stored only as hashes, strict access controls, rate limiting and security logging. If a personal-data breach is likely to put your rights at risk, we will tell you without undue delay and notify the authorities as the law requires.
10. Children
ReviewPine is a service for businesses and is not meant for anyone under 18. We do not knowingly collect children’s personal data; if you believe we have, contact us and we will delete it.
11. Cookies
Our website sets no cookies. In your account we use only strictly necessary cookies, which need no consent. See our cookie policy.
12. Changes to this notice
If we change this notice in a way that matters, we will update the date above and email account holders before the change takes effect.
Customers in India are covered by our India privacy notice under the DPDP Act, shown when this page is visited from India.