Privacy Policy

1Information We Collect

1.1 Information You Provide:

• Business information (name, registration number, GST, industry, years in operation)
• Contact information (owner/representative name, email, phone, address)
• Digital presence links (website, Google Business Profile, social media)
• Payment information (processed by Razorpay; we don't store full card numbers)

1.2 Information We Collect Automatically:

• Device information (IP address, browser, operating system)
• Usage data (pages visited, time spent, clicks)
• Cookies for preferences, analytics, and site functionality

1.3 Information from Public Sources: During evaluation, we analyze publicly available information:

• Your website (content, technical performance, SEO)
• Google Business Profile (reviews, ratings, photos, response times)
• Social media (posts, engagement, follower counts, profile completeness)
• Review platforms (Justdial, Zomato, etc.)
• Government databases (GST portal, MCA registry)

IMPORTANT: We only access public information. We never access private business data, internal systems, or financial records.

2How We Use Information

2.1 Primary Service:

• Evaluating TrustScore™
• Generating report
• Issuing verification badge
• Listing in public directory (unless opted out)
• Processing re-verifications

2.2 Communication:

• Sending reports
• Re-verification reminders
• Support responses
• Service announcements
• Marketing (you may opt out)

2.3 Improvement:

• Improving scoring algorithm (using anonymized data)
• Analyzing evaluation quality
• Fixing bugs

2.4 Legal & Compliance:

• Detecting fraud and manipulation
• Enforcing Terms
• Responding to legal requests
• Protecting Sevorse's rights

3How We Share Information

3.1 Public Sharing (With Your Consent):

• Public directory (businesses scoring 300+, unless opted out)
• Verification page (anyone with verification code can view)
• Marketing materials (with your explicit permission only)

3.2 Service Providers: We share limited information with trusted third parties who help operate TrustScore™:

• Payment processors (Razorpay)
• Cloud hosting (AWS, Google Cloud)
• Email service (SendGrid)
• SMS/WhatsApp (Twilio)
• Analytics (Google Analytics)

These providers are contractually obligated to protect data and use it only for specified purposes.

3.3 Business Transfers: If Sevorse is acquired or merges, your information may be transferred to successor entity. You'll be notified via email.

3.4 Legal Requirements: We disclose information if required by law, court order, or to protect Sevorse's legal rights and user safety.

3.5 What We Do NOT Share: We do NOT sell, rent, or trade your personal information or business data to third parties for marketing.

4Data Security

4.1 We implement 256-bit SSL encryption for data in transit, encrypted storage for data at rest, role-based access controls, strong authentication, and regular security audits.

4.2 Third-party service providers are vetted for security standards (PCI-DSS for payment, SOC 2 for hosting).

4.3 No system is 100% secure. By using TrustScore™, you acknowledge inherent internet transmission and electronic storage risks.

4.4 If a data breach occurs affecting your information, we'll notify you within 72 hours via email with a description of the breach, types of information affected, and steps to protect yourself.

5Data Retention

• Active accounts: Retained while account is active
• Reports and scores: Badge validity period + 2 years
• Transaction records: 7 years (legal requirement)
• Support communications: 3 years
• Anonymized analytics: Indefinitely (cannot identify individuals)

You may request data deletion (email privacy@sevorse.com) except transaction records (7-year legal retention) and anonymized aggregated data.

6Your Rights

6.1 Access: Request a copy of all personal data we hold (email privacy@sevorse.com).

6.2 Correction: Request update of inaccurate/incomplete information.

6.3 Deletion: Request data deletion (account closed, badge invalidated).

6.4 Object to Processing:

• Marketing: Opt out via link in emails
• Public directory: Opt out anytime (remain verified privately)

6.5 Data Portability: Request data in machine-readable format (JSON/CSV).

6.6 Complain: Contact privacy@sevorse.com first. If unsatisfied, lodge a complaint with Karnataka State Consumer Commission.

7Cookies & Tracking

7.1 We use cookies for session management, security, analytics (Google Analytics with anonymized IPs), and preferences.

7.2 Control Cookies:

• Browser settings (see browser help section)
• Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout

7.3 Essential cookies (session, security) cannot be disabled as they're necessary for service functionality.

8International Data Transfers

Your data may be processed/stored outside India (cloud servers in Singapore, US, Europe). We ensure adequate protection through contractual clauses and choosing certified service providers (ISO 27001, SOC 2, GDPR compliance). By using TrustScore™, you consent to international transfers.

9Children's Privacy

TrustScore™ is for businesses, not individuals under 18. We do not knowingly collect information from children. If we discover child data, we delete it immediately.

10Changes to Privacy Policy

We may update this Privacy Policy periodically. Material changes will be notified via email at least 15 days before the effective date. Continued use after the effective date constitutes acceptance.

11Contact — Privacy

Email: privacy@sevorse.com

Subject Lines for Faster Response:

• "Data Access Request"
• "Data Deletion Request"
• "Opt-Out Request"
• "Privacy Complaint"

Response Time: 30 days (15 days for urgent matters)