Privacy policy

Last updated: 9 November 2026

Branditude Growth Plan ("the app") is run by Branditude (Kunal Ahuja), India. It helps local businesses collect feedback, manage loyalty cards and offers, and reply to their Google reviews. This page explains what we collect and how we use it.

Who uses the app

• Businesses (our clients) and their staff, who sign in with email and password.
• Their customers, who may rate a visit on a feedback page or sign in with their phone number to see loyalty cards.

What we collect

• Business account details: business name, owner name, phone, email, city, address and plan/payment records (UPI transaction ID).
• Customer details entered by a business: name, phone number, birthday (optional), visits, bill amounts, coupons and loyalty stamps.
• Feedback: star rating, comments, and optional name and phone number that a customer chooses to share.
• Review text a customer writes on our feedback page to post on Google. If the business has AI tidying switched on, this text is sent to our AI provider (Anthropic) only to fix spelling and grammar, and is not used for anything else.

Google Business Profile data

If a business chooses to connect its Google Business Profile, it signs in with Google and grants the business.manage permission. We then:

• read the business's locations and the reviews left on its Business Profile;
• post replies to those reviews, either automatically or after the owner approves them, according to the setting the owner chooses;
• store a refresh token so replies can continue without signing in again. The token is stored on our server only and is never shown in the browser.

We use Google data only to show reviews to the business that owns them and to post that business's replies. We do not sell it, use it for advertising, or share it with anyone except our AI provider (Anthropic), which receives a review's text only to draft that business's reply. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

A business can disconnect Google at any time from Google replies → Disconnect. This deletes the stored token immediately. It can also remove our access from its Google Account at myaccount.google.com/permissions.

Where data is stored

Data is stored with Supabase (database hosting, Mumbai region). Access is limited by role: each business sees only its own data, customers see only records matching their own verified phone number, and Branditude staff see client accounts to provide support.

WhatsApp messages

If a business turns on the WhatsApp add-on, customer phone numbers and first names are sent to Meta's WhatsApp Business Platform to deliver the business's messages.

How long we keep data

We keep data while the business uses the app. A business can delete its customers, feedback and Google connection at any time. When a business closes its account, we delete its data within 30 days, except payment records we must keep by law.

Your choices

Customers who want their data removed can ask the business they visited, or write to us. Businesses can export or delete their data, or ask us to.

Contact

Branditude · Kunal Ahuja · kunalahuja392@gmail.com · +91 93700 77727