Privacy Policy

Findable is an unincorporated business operating as Findable. The business behind it has not been formally incorporated yet, so this policy is written on that basis and will be updated once it has — including with a proper registered name and address once one exists.

This policy covers the Findable review-collection product: the page a business sets up for its customers, the dashboard a business owner uses to manage it, and the systems behind both.

A business owner creates an account either with an email address and a password, or by signing in with Google, described below. For an email-and-password account, sign-in is handled by our authentication provider, Supabase — we never see or store the password itself, only Supabase does. Emails about the account, such as confirming an email address or resetting a password, are sent through Supabase.

Where Google sign-in is offered, an owner can sign in with their Google account instead of a password. Google then shares the account’s email address and basic profile details (such as name) with us, and the resulting account is held by Supabase in the same way. We do not receive the owner’s Google password.

An owner who starts a free trial, which includes up to 20 successful AI-assisted review drafts, also verifies a mobile number. The verification code is sent to that number by SMS, and checked, by our text-message provider, MSG91. Once MSG91 confirms the code, the number is held by Supabase as part of the owner’s account. It is used only to allow one free trial per phone number. To enforce that after an account or business is deleted, we keep a one-way, keyed fingerprint of the number — not the number itself — for as long as the trial rule applies.

An owner also enters details about their business to set up their review page: the business name and type, the Google review link customers can use to post a review, an optional logo (uploaded, or an image address), and the questions customers are asked. None of this is required to be about a real person, and it is used only to run that business’s review page.

An owner can also ask us to “Enhance my shop”. We then keep their verified phone number with that request, so we can call them to confirm details. Menus, brochures and other files an owner uploads are stored privately (not at a public address) and used only to prepare that business’s profile.

We use an owner’s email address and user ID for our own product analytics. When we record a step in an owner’s journey (such as creating an account, setting up a shop or starting checkout), we send the name of that step, the owner’s user ID and email address, any details recorded with that step, an event ID and the time to a Google Apps Script that we run. It is not sent to advertisers.

To prepare a shop’s profile and the background used for its draft reviews (when we set a shop up, or when the owner asks for it), we use public information about the business:

• Google Places, to find the business on Google and, for shops linked to a Google listing, to read the listing’s details (such as name, address, category, website, rating and review count)
• Serper, a web search service, to search the web for the business
• The shop’s own public website, which we read
• Menus and other files the owner uploads, described above

What is sent to these services is the business’s name, location and similar details, not information about its customers.

Filling in a Findable review page does not require a name, email address or phone number. We do not ask for a name or email address; a phone number is only ever optional, as described below.

What a customer does provide, only when they choose to answer:

• Answers to the business’s own questions (multiple-choice or a star rating)
• Optional free-text answers, in the customer’s own words

Customers who give a low rating may be offered a private message to the business instead, and can add a phone number if they would like the business to call them back. The phone number is optional. The message, and the number if given, are stored with the business’s account and shown only to that business. Posting a review on Google remains available to every customer.

If you join the Scale waitlist on our Pricing page, you give us your name, business name, business type, city or area, WhatsApp number and email address, and — only if you choose to — a note about what you would like Scale to help with. We use these details only to contact you about Scale. They are stored using Supabase, are not shown publicly, and are kept until deleted; contact us at the address below to have yours removed.

When someone joins, we send ourselves a short notice through our email provider, Resend, naming the business, its type and its city or area. It does not include your name, WhatsApp number, email address or note.

Findable uses a random browser session identifier during the customer review flow to help with abuse and rate limiting, and to associate certain actions within the review flow — such as continuing to Google — with the relevant submission. It is held in that browser tab’s temporary storage (sessionStorage) and disappears when the tab is closed. It is not a tracking cookie, it does not identify a customer by name, email or otherwise, it does not follow a customer across visits or devices, and it is never shown to the business owner.

To spot automated misuse of review pages, we also count requests for a short time: per shop, per page visit, and per internet address. The internet address is stored only as a one-way fingerprint, never as itself, and these counts are deleted after about three days. When a count looks unusual, we send ourselves an email through Resend naming the shop and the numbers; it contains nothing about the customers.

A customer’s answers and any free text are used to write a draft review in their own voice, which is then shown back to them to copy and post themselves if they choose to. The business owner can see the answers, any free text and the draft review that were generated for their own business, so they can understand their customers’ feedback — never a customer’s session identifier.

Generating a draft review means sending the customer’s answers and free text, together with basic context about the business (its name, type, and any background the owner has written), to the AI providers we use to draft reviews. Which provider and model are used is set in our configuration and may change as the product develops. The same AI providers are used to prepare a shop’s profile from the sources listed above. The question helper in the owner dashboard likewise sends what an owner types into it, together with the business’s name, type, background and current questions, to a third-party AI service to suggest questions.

We have not independently verified, and do not claim to know, how long that provider retains a request or whether it is used to improve its underlying models. If that matters to you, please contact us before submitting sensitive information, and see that provider’s own published terms for anything we have not stated here.

Supabase is our database and authentication provider: accounts, authentication, and the information we keep ourselves — business details, questions, customer answers and draft reviews, plan and subscription records, and the trial fingerprint described above — are stored using it. Information held by the other providers named in this policy — payment details entered into Razorpay’s checkout, the verification code MSG91 sends, and whatever the AI providers, Google, Serper and Google Apps Script themselves keep of a request — is held by those providers, not in Supabase. The application is hosted on infrastructure provided by our hosting platform; we have not made specific claims about that platform’s own log-retention practices in this policy, because we have not independently verified them.

Paid plans are billed through Razorpay, our payment provider. Card, UPI and other payment details are entered into Razorpay’s own checkout and handled by Razorpay; we do not see or store them. We keep a record of each business’s plan and subscription status, along with the reference numbers Razorpay provides, so we know which plan a business is on.

Apart from Google sign-in, Google Places and Google Apps Script, described above, Google is involved only as the destination a business chooses for its own Google review link, and as the site a customer may separately choose to open and post to in their own words. Findable does not send a customer’s answers, free text or draft review to Google, and does not post anything to Google on anyone’s behalf.

There is currently no automatic expiry for review or feedback data. It remains stored until a business owner deletes it — either one submission at a time or all of a business’s submissions at once — or until the business itself is removed from Findable.

Deleting a submission from Findable is permanent and cannot be undone. It only affects what is stored in Findable — it has no effect on a review a customer separately posted on Google. We do not control Google’s own systems and cannot remove, edit or request removal of anything already posted there.

A customer who gives a low rating may be offered a private message to the business, with an optional phone number for a call back. It is stored in Findable and shown only to that business, in the Reviews section of its Findable dashboard. Business owners can delete review data, including private feedback, from Findable at any time. Deleting it from Findable does not delete anything from Google.

Because some customer submissions are anonymous, we may not be able to identify or locate a particular submission from a request alone. If you believe a specific submission relates to you and would like it reviewed or removed, contact us at legal@truvoca.in with as much detail as you can give us — the business, roughly when you submitted it, and what it said. We will assess each request based on the information available to us and our ability to identify the relevant data, but we cannot promise that every anonymous submission can be located or matched with certainty.

There is currently no self-service way to export or delete your own data through the product itself. A business owner can delete their business’s review data at any time through their dashboard; there is not yet a self-service way for an owner to delete their own account, and one does not exist for a customer either. Use the contact address above for either of those in the meantime.

We take reasonable, ordinary precautions to protect the information described in this policy — access controls that keep one business’s data separate from another’s, and passwords that we never store ourselves. No online service can guarantee complete security, and we do not claim to.

This is an early-stage product and this policy will change as it develops — including once the business behind it is formally incorporated. We will update the date at the top of this page whenever the wording changes.

Questions about this policy, or about your information, can be sent to legal@truvoca.in.