Privacy Policy

Welcome to Beautimonial ("we," "our," "us"). Beautimonial is an independent software product providing smart testimonial widget solutions for brands and businesses worldwide.

We are committed to protecting the personal information of our users ("Brand Users") and their customers ("End Users") who interact with our testimonial widget.

This Privacy Policy explains:

• What information we collect
• How we use it
• How we protect it
• Your rights regarding your data

By using Beautimonial, you agree to the collection and use of information described in this policy.

• Service Name: Beautimonial
• Website: https://beautimonial.com
• Contact Email: support@beautimonial.com

This Privacy Policy is governed by applicable international privacy laws including GDPR, CCPA, and DPDP Act where applicable to the user.

3.1 Information From Brand Users

(Businesses/individuals who subscribe to Beautimonial)

When you create an account, we collect:

• Full name
• Email address
• Password (encrypted, never stored in plain text)
• Website domain (for widget activation)
• Payment information (processed by Razorpay — we do not store card details)
• Billing address
• Plan and subscription details

When you use the dashboard, we collect:

• Usage data (beautifications used)
• Login timestamps and IP addresses
• Device and browser information
• Feature usage patterns

3.2 Information From End Users

(Customers of Brand Users who submit testimonials via our widget)

When an end user submits a testimonial, we collect:

• Name (as entered by end user)
• Email address (optional, if provided)
• Review/feedback text (original)
• Beautified testimonial text (AI-processed)
• Star rating (1-5)
• IP address (for fraud prevention)
• Timestamp of submission
• Browser and device type

Important: We collect end user data on behalf of Brand Users. Brand Users are responsible for obtaining appropriate consent from their customers before deploying our widget.

3.3 Automatically Collected Information

When you visit beautimonial.com, we automatically collect:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent
• Referring URLs
• Cookie data (see Section 8)

4.1 For Brand Users:

• To create and manage your account
• To process payments and send receipts
• To provide customer support
• To send service notifications (subscription renewals, usage alerts)
• To send security alerts (password changes, new logins)
• To improve our service
• To prevent fraud and abuse
• To comply with legal obligations

4.2 For End Users:

• To process and store testimonials submitted through Brand User websites
• To beautify testimonials using our AI processing system
• To display approved testimonials on Brand User websites
• To prevent spam and fraudulent submissions

4.3 For All Users:

• To analyze usage patterns and improve the service
• To send important service updates
• To comply with applicable laws

For users in the European Union (GDPR) and other applicable jurisdictions, we process data on the following legal bases:

Contract Performance: Processing necessary to provide the Beautimonial service you subscribed to. (Account creation, payment processing, service delivery)

Legitimate Interests: Processing for fraud prevention, security, service improvement, and analytics where our interests don't override your rights.

Consent: Where required by law, we obtain your explicit consent before processing. (Marketing emails — you can opt out anytime)

Legal Obligation: Processing required by applicable law (tax records, compliance requirements).

We do NOT sell your personal information. We do NOT share your data for advertising.

We share data only with:

6.1 Service Providers (Subprocessors)

• Supabase (Database & Authentication)
  Purpose: Secure data storage and user auth · Location: USA (AWS infrastructure)
  Privacy: https://supabase.com/privacy
• Anthropic (AI Processing)
  Purpose: Testimonial beautification · Data shared: Testimonial text only (no personal identifiers)
  Privacy: https://www.anthropic.com/privacy
• Razorpay (Payment Processing)
  Purpose: Subscription and payment processing
  Privacy: https://razorpay.com/privacy/
• Resend (Email Delivery)
  Purpose: Transactional email delivery · Location: USA
  Privacy: https://resend.com/privacy
• Hostinger (Web Hosting)
  Purpose: Website and app hosting · Location: EU/USA
  Privacy: https://www.hostinger.com/privacy-policy

6.2 Legal Requirements

We may disclose your information when required by law, court order, or government authority, or when necessary to protect our legal rights.

6.3 Business Transfers

If Beautimonial is acquired or merged, your data may be transferred to the acquiring entity. We will notify you before this occurs.

• Brand User Account Data: Retained for the duration of your subscription plus 90 days after account deletion.
• Testimonial Data: Retained for as long as your account is active. Deleted within 30 days of account closure unless legally required to retain.
• Payment Records: Retained for 7 years to meet applicable tax and financial recordkeeping requirements.
• Login/Security Logs: Retained for 12 months.
• Usage Analytics: Retained for 24 months in aggregated (anonymized) form.
• End User Testimonial Data: Retained while the Brand User's account is active. Brand Users can delete individual testimonials from their dashboard at any time.

We use cookies and similar technologies to operate and improve Beautimonial.

Essential Cookies (Required)

• Session management (keep you logged in)
• Security tokens (CSRF protection)
• User preferences (dark/light mode)

Cannot be disabled — necessary for the service to function.

Analytics Cookies (Optional)

• Usage patterns and feature adoption
• Performance monitoring
• Error tracking

Can be disabled — does not affect service functionality.

Managing Cookies

You can control cookies through your browser settings. Disabling essential cookies may affect service functionality.

We do NOT use advertising or tracking cookies.

9.1 For All Users

• Right to Access: Request a copy of all personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Deletion: Request deletion of your personal data ("right to be forgotten"). Note: Some data may be retained for legal compliance (e.g., financial records).
• Right to Portability: Request your data in a portable format (JSON/CSV).
• Right to Object: Object to processing of your data for specific purposes (e.g., analytics).
• Right to Restrict Processing: Request that we limit how we use your data.

9.2 For EU/UK Users (GDPR)

All rights listed above apply. You may also lodge a complaint with your local data protection authority.

9.3 Under the DPDP Act 2023

• Right to access your personal data
• Right to correct inaccurate data
• Right to erasure of your personal data
• Right to grievance redressal
• Right to nominate (in case of death or incapacity)

9.4 For California Users (CCPA/CPRA)

• Right to know what data is collected
• Right to delete your data
• Right to opt-out of sale (we do not sell data)
• Right to non-discrimination

To Exercise Your Rights

Email: support@beautimonial.com
Subject: "Privacy Rights Request"
Response time: Within 30 days

We implement industry-standard security:

Technical Measures

• All data encrypted in transit (TLS 1.3)
• All data encrypted at rest (AES-256)
• Password hashing (bcrypt)
• Two-factor authentication available
• Regular security monitoring
• Automated threat detection

Organizational Measures

• Minimal data access principle
• Regular security reviews
• Incident response procedures
• Vendor security assessments

Payment Security

We do not store payment card details. All payment processing handled by Razorpay (PCI-DSS compliant).

Despite our best efforts, no system is 100% secure. In the event of a data breach that affects your rights, we will notify you within 72 hours as required by law.

Beautimonial uses service providers located in the USA and EU.

Your data may be transferred to and processed in countries outside your country of residence.

We ensure appropriate safeguards:

• Standard contractual clauses (SCCs) for EU data transfers
• Service providers comply with their applicable privacy laws
• We only use reputable, compliant third-party services

Beautimonial is not intended for children under 18 years of age.

We do not knowingly collect personal data from children under 18.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@beautimonial.com and we will promptly delete such data.

Beautimonial uses artificial intelligence (powered by Anthropic's Claude) to beautify customer testimonials.

What the AI Processes

• Original testimonial text
• Customer name (for personalization)

What the AI Does Not Process

• Payment information
• Email addresses
• IP addresses
• Any other personal identifiers

Anthropic's Privacy Policy: https://www.anthropic.com/privacy

AI-Generated Content

Beautified testimonials are generated by AI based on the original customer feedback. Brand Users and their customers retain full ownership of the original content and the final published testimonial.

By using Beautimonial, Brand Users agree to:

• Obtain appropriate consent from their website visitors before deploying our widget
• Include Beautimonial in their own privacy policy as a third-party processor
• Not use Beautimonial to collect data from children under 18
• Not use collected testimonials in a misleading or deceptive manner
• Inform end users that their testimonials may be processed by AI
• Comply with applicable privacy laws in their jurisdiction

Sample Disclosure for Brand User Websites

"We use Beautimonial to collect and display customer testimonials. Reviews may be polished using AI. See Beautimonial's privacy policy at beautimonial.com/privacy"

Our website may contain links to third-party websites.

We are not responsible for the privacy practices of these websites.

We encourage you to read the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time.

When we make significant changes:

• We will update the "Last Updated" date
• We will notify active users via email
• We will post a notice on our website

Continued use of Beautimonial after changes constitutes acceptance of the updated policy.

We encourage you to review this policy periodically.

As required by the Digital Personal Data Protection Act, 2023:

Grievance Officer: Beautimonial Support Team
Email: support@beautimonial.com
Response time: Within 30 days

For grievances related to data processing, please email us with subject line: "Privacy Grievance - [Your Issue]"

For any privacy-related questions, requests, or concerns:

Email: support@beautimonial.com
Subject: Privacy Policy Inquiry
Response time: Within 24-48 hours

For urgent security concerns:
Email: support@beautimonial.com
Mark as: URGENT - Security