Privacy Policy
Last updated: 20 October 2026
This policy explains what information Trustcomm handles, why, who it goes to, and what you can ask us to do with it. It is written for two groups of people:
- Shop owners who use Trustcomm for their business, and
- Customers who scan a shop's Trustcomm QR code and leave a rating or a message.
Who is responsible
- For shop owners' account information, we (Mohamed Baqur, trading as GoDevLevel) decide what is collected and why. We are the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023.
- For what customers share with a shop, the shop decides to collect feedback, and we handle it on the shop's behalf. You can ask either the shop or us about it; we will help either way.
What customers share, and what we keep
When you scan a shop's QR code, you do not create an account and we do not set cookies. Here is what is stored:
| What | When | Why |
|---|---|---|
| Your two star ratings, and the topics or items you tapped | Every visit | So the shop learns how the visit went, and to write a review draft for you |
| The language you used | Every visit | To show the page in it |
| The review draft we wrote, and the text you kept when you copied it | Only if you chose Google | So the shop's dashboard and our quality checks reflect what you actually used |
| Your private message to the shop | Only if you chose to message the owner | So the owner can read it |
| Your phone number | Only if you chose to leave it with a private message | Only so the owner can reply to you. Not used for marketing. |
| How long each screen took to load or respond | Every visit | To find and fix slowness. Not linked to your identity. |
We do not ask for your number for offers, and Trustcomm does not send marketing messages. We do not collect your name, email, location, or contacts. We do not store your IP address. To stop abuse (for example, one device sending hundreds of messages) we keep a scrambled code made from your IP address inside a counter. It is not your address itself, and we use it for nothing else.
Your progress through the page is kept in your browser tab only (so a reload does not lose it) and disappears when you close the tab.
If you post on Google: you copy your words and post them yourself, on Google's own page, under your own Google account. Trustcomm never posts anything for you and cannot see whether you posted. Google's privacy policy applies to what you do on Google.
Children. Trustcomm is not meant for children. If you are under 18, please do not leave your phone number.
What shop owners share
| What | Why |
|---|---|
| Your email address | To sign you in (we email you a 6-digit code — there is no password) and to email you when a customer sends a private message |
| Your shop's details: name, web address, type of business, area and city, logo, brand colour, languages, the things customers come for, your Google review link | To run your shop's customer page and dashboard |
| Your dashboard language | Stored in a cookie so the dashboard opens in your language |
| A record of important events (for example, that an alert email was sent) | To troubleshoot and to prove what the system did |
Signing in sets a cookie that keeps you signed in. That, and the language cookie, are the only cookies Trustcomm sets. We use no advertising or tracking cookies, so we show no cookie banner. If we ever add analytics that stores anything on your device, we will ask for your consent first.
Who receives information, and where
We use a small number of service providers. A customer's phone number, if they choose to leave one with a message to the owner, is stored in Supabase and shown to that shop's owner; no other provider receives it from us. A customer can also type a number into the message itself — the alert email to the owner carries the message as it was written.
| Provider | What they receive | Where |
|---|---|---|
| Supabase (database, sign-in, file storage) | Everything above — it is where Trustcomm's data lives | Mumbai, India |
| Vercel (hosting) | Page requests, which include your IP address, handled briefly to serve the page | Our servers run in Mumbai; pages are delivered through Vercel's global network |
| Google (Gemini) — writes review drafts | The shop's name, area, city and type of business, its tone and highlights, your two ratings and the topics or items you tapped. Never your phone number, never a private message. | Outside India |
| Resend (email) | Shop owners' email addresses, and the content of alert emails (which include the customer's private message, as written) | Outside India |
| Razorpay (payments) | Shop owners' payment details, entered on Razorpay's own checkout. Trustcomm never sees card or bank details; we receive only whether a subscription is active | India |
About the review drafts. Under the Google Gemini terms we currently use, Google may use what we send to improve its products, and people at Google may review it. That is why we send only ratings, tapped topics and shop details — never what a customer writes, and never a phone number.
When you open WhatsApp from our Contact page, WhatsApp's own terms apply to that chat.
We do not sell personal data, and we do not use it for advertising.
How long we keep it
We keep a shop's data, including its customers' feedback, for as long as the shop's account exists. If a shop stops paying and stays paused for 90 days, we automatically delete its customers' personal information — phone numbers, names and messages — after emailing the owner at 60 and 85 days. Ratings and counts stay, not linked to any person. If a shop closes its account, or you ask us to delete your information, we delete it within 30 days, except where the law requires us to keep something (for example, records of payments).
Your rights
Under India's Digital Personal Data Protection Act you can ask us:
- for a summary of the personal data we hold about you and who we have shared it with;
- to correct or complete it;
- to delete it;
- to withdraw consent you gave (for example, to offers) — it stops future use, not what already happened;
- to nominate someone to exercise these rights if you die or cannot;
- to resolve a complaint through our Grievance Officer.
Email hello@trustcomm.app from any address and tell us which shop and roughly when, or give the phone number you used. We may ask you to confirm it is your data before we act. We reply within 7 days and resolve within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India.
Security
All traffic is encrypted (HTTPS). Data is encrypted at rest by our database provider. Each shop can see only its own data — this is enforced in the database itself, not just in the app. Secret keys never reach your browser; we check every release for this automatically.
If a breach affects your personal data, we will tell you and the Data Protection Board of India, as the law requires.
Changes
If we change this policy in a way that matters, we will update the date above and, for shop owners, tell you by email before it takes effect.