Last updated: 23 October 2026
This Privacy Policy explains how EpicStarz collects, uses and protects personal data, in line with India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
1. Data we collect
- Account data: name, email, mobile number, business name, address and GSTIN you provide.
- Business data: branch details, services, keywords, logos, staff names and Google Business Profile data you connect.
- Your customers' data: star ratings, private feedback and optional name/phone that your customers choose to share on your review page.
- Usage data: pages visited, device and browser type, approximate location from IP, QR scan counts.
- Payment data: payment status and transaction references. Card/UPI details are handled by our payment partners and never stored by us.
2. How we use it
- To run the Service: generate review drafts and replies, show analytics, send alerts.
- To process payments, issue invoices and comply with tax law.
- To provide support and send important account emails.
- To improve the product using aggregated, non-identifying statistics.
3. AI processing
To generate drafts, relevant business details (such as business name, area, services and the selected star rating) are sent to our AI providers. We do not send your customers' phone numbers or emails to AI providers, and we do not allow providers to use this data to train their models where such an option is available.
4. Google data
When you connect Google Business Profile, we access only the data needed to read reviews, post replies and publish updates you approve. You can disconnect at any time from your dashboard or your Google account settings. Our use of Google data follows the Google API Services User Data Policy, including the Limited Use requirements.
5. Sharing
We do not sell personal data. We share it only with service providers (hosting, email, AI, payments) under confidentiality obligations, or when required by law.
6. Storage and security
Data is stored on secure servers. Passwords are hashed, secrets are encrypted and access is restricted to authorised staff. No system is 100% secure, but we take reasonable steps to protect your data.
7. Retention
We keep account data while your account is active and for up to 180 days after closure (longer where tax law requires), after which it is deleted or anonymised.
8. Your rights
You can access, correct, export or delete your data, and withdraw consent, by emailing support@epicstarz.com or using Settings → Danger zone in your dashboard.
9. Cookies
We use essential cookies to keep you logged in and remember preferences such as dark mode. We do not use advertising cookies on the dashboard.
10. Grievance officer
For any privacy concern, contact our Grievance Officer at support@epicstarz.com. We respond within 30 days.