1. Introduction & Overview
Welcome to DigiEngage.in ("DigiEngage", "we", "our", or "us"). DigiEngage operates business productivity, customer engagement, and online visibility software platforms, including our Google Business Profile (GMB) Management Suite, Smart QR Reviews & Feedback Shield, Meta Social Hub, Customer Loyalty Card Engine, Digital Restaurant Menu, and Educational ERP tools (collectively, the "Services").
This Privacy Policy governs the manner in which DigiEngage collects, uses, maintains, and discloses information collected from users (each, a "User", "Merchant", or "Customer") of the https://digiengage.in website and all related subdomains including https://gmb.digiengage.in and https://meta.digiengage.in.
2. Information We Collect
We collect information in the following categories when you interact with our Services:
A. Information You Provide to Us Directly
- Account & Registration Details: Name, business name, phone number, email address, password hashes, and physical business location when creating an account or subscribing to a plan.
- Billing & Payment Information: Transaction identifiers, billing contact, plan tier, and payment timestamps (handled via secure RBI-compliant payment gateways; DigiEngage does not store complete debit/credit card numbers).
- Business Profile Content: Operating hours, category tags, logos, product catalogs, customer service phone numbers, and WhatsApp numbers configured for customer deep-links.
B. Customer Feedback Collected via Smart QR Funnel
When your end customers scan your Smart QR counter standees:
- Public Routing (4–5 Stars): Customers are forwarded to official Google Maps review pages. No private complaint data is stored.
- Private Grievance Shield (1–3 Stars): Review rating, customer name, phone number or email, complaint category tag, and message are collected solely for the merchant's internal customer service dashboard to resolve complaints privately.
C. Technical & Diagnostic Information
IP addresses, browser user agent, operating system, timestamp of access, and referral URLs collected automatically through server logs for load balancing, abuse prevention, and rate limiting.
3. Google User Data & OAuth Limited Use Policy
DigiEngage offers optional integration with Google APIs (via Google Sign-In and Google Business Profile API) to allow merchants to synchronize and manage their business listings directly from https://gmb.digiengage.in.
What Google Permissions We Request:
openid,email,profile: Used strictly to authenticate your identity, display your avatar/name, and securely sign you into your merchant dashboard.https://www.googleapis.com/auth/business.manage: Requested only when you explicitly connect your Google Business Profile to view verified locations, sync business information (hours, categories, description), and retrieve review lists for AI response generation.
Google API Services User Data Policy Compliance
DigiEngage’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements:
- We only use access to Google user data to provide or improve user-facing features that are prominent in the DigiEngage GMB application interface.
- We do not transfer Google user data to third parties unless necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger/acquisition.
- We do not use or transfer Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
- We do not permit humans to read Google user data unless we have obtained your affirmative agreement for specific messages, doing so is necessary for security reasons, or to comply with applicable law.
You can revoke DigiEngage’s access to your Google Account at any time through your Google Security Settings at https://myaccount.google.com/permissions or by clicking "Disconnect Profile" inside your GMB Dashboard.
4. Meta Platform, Facebook & Instagram User Data Policy
DigiEngage provides social media automation and omnichannel publishing via our Meta Social Hub at https://meta.digiengage.in (Meta App ID: 1488997996373584). This section outlines our strict adherence to the Meta Platform Terms and Developer Policies.
Meta Permissions & Purpose of Data Collection:
public_profile&email: Used exclusively to identify and authenticate your merchant profile and create a secure session.pages_show_list: Used to retrieve the official Facebook Pages you administer so you can select which page to link in your workspace.pages_read_engagement: Used to fetch publishing statuses and post engagement metrics for your dashboard reporting.pages_manage_posts: Used strictly upon your explicit instruction to publish marketing posts, photos, and updates directly to your Facebook Page feed.instagram_basic&instagram_content_publish: Used solely to link your verified Instagram Professional / Business account and publish scheduled creatives composed in your hub.
Meta Platform Terms & Data Protection Compliance
- Zero Ad Targeting or Data Brokering: We strictly do not sell, rent, license, or transfer any data received from the Meta Graph API to third-party ad networks, data brokers, or search engines.
- Token Encryption & Security: Meta User Access Tokens and Page Access Tokens are stored securely using industry-standard cryptographic encryption. Plaintext tokens are never exposed.
- Limited Use for User-Facing Features: All Meta data retrieved is utilized exclusively to provide social scheduling, caption drafting, and post-publishing functionality on https://meta.digiengage.in.
- No Model Training on Private Content: Private client media, customer comments, and confidential post drafts are never used to train public machine learning foundation models.
Revocation & User Data Deletion:
You maintain full sovereignty over your Meta accounts. You can revoke access at any time through your Facebook Account Settings (Facebook Apps & Websites) or by visiting our dedicated User Data Deletion Instructions page at https://meta.digiengage.in/data-deletion.
5. How We Use Your Information
We use collected data strictly for lawful business purposes, including:
To Deliver Services
Generating branded QR codes, rendering merchant landing pages, managing review response drafts, and displaying analytics.
Account & Communication
Sending plan activation details, transaction receipts, security notices, and answering support requests.
AI Reply Generation
Generating high-quality 2-line positive review templates and automated reply drafts based on context. Your private customer data is never used to train public AI foundation models.
Security & Integrity
Preventing fraudulent sign-ups, bot traffic, automated abuse of review funnels, and ensuring session authorization.
5. Data Sharing & Third-Party Service Providers
We do not sell, rent, or trade your personal or business data. We only share information with trusted third-party service providers who assist us in operating our platform, subject to strict confidentiality agreements:
- Cloud Infrastructure: Managed server infrastructure and high-availability PostgreSQL databases hosted in secure Tier-3/Tier-4 data centers with enterprise firewalls.
- Media Storage: Encrypted cloud storage for storing merchant-uploaded profile photos, business logos, and printable standee assets over HTTPS.
- Payment Gateways: Regulated payment processors for handling subscription renewals securely via UPI, cards, and net banking under PCI-DSS compliance.
- Legal Requirements: We may disclose information if required to do so by applicable Indian law, regulation, subpoena, or government authority inquiry.
6. Data Security & Encryption
We implement comprehensive organizational and technical security measures to protect your data:
- Encryption in Transit: All data transmitted between your browser and our servers is encrypted using modern TLS 1.3 cryptographic protocols with HSTS enforcement.
- Password Protection: Passwords are cryptographically salted and hashed prior to database storage; plaintext passwords are never saved.
- Access Controls: Strict role-based internal access permissions limiting database access exclusively to authorized technical personnel.
- Session Security: HTTP-Only, Secure, SameSite session cookies preventing Cross-Site Scripting (XSS) and token theft.
7. Data Retention & Deletion
We retain your account and business profile data for as long as your DigiEngage subscription remains active. If you cancel your account or request data deletion:
- You may request complete account and data removal at any time by emailing support@digiengage.in.
- Upon receiving a verified deletion request, all personal identifiers, GMB access tokens, and private grievance logs are purged from our live database within thirty (30) business days, retaining only minimal records required by financial and tax regulations.
8. Your Rights (DPDP Act India & Global Standards)
Under the Digital Personal Data Protection (DPDP) Act, 2023 of India and international standards, you have the following rights regarding your personal data:
- Right to Access: You can request a summary of the personal data we hold about you and the processing activities undertaken.
- Right to Correction: You can update inaccurate or incomplete information directly via your dashboard or by notifying our support desk.
- Right to Erasure: You can request the removal of personal data that is no longer necessary for the purpose it was collected.
- Right to Withdraw Consent: Where processing is based on consent (such as Google OAuth sync), you may withdraw consent at any time without affecting past lawful processing.
9. Cookies & Tracking Technologies
We use essential session cookies and local storage to maintain your logged-in session, remember workspace preferences, and ensure quick page loads across our subdomains. We do not use third-party invasive tracking pixels or cross-site behavioral ad trackers.
10. Grievance Officer & Contact Information
If you have any questions, concerns, or grievances regarding this Privacy Policy, our data practices, or compliance with Google API policies, please reach out to our designated Grievance & Compliance Desk:
Entity Name: DigiEngage.in
Registered Address: 259, New Elite Home, Mohali, Chandigarh, 160055
Primary Support Email: support@digiengage.in
Technical Compliance Desk: digiengage.in@gmail.com
Official Website: https://digiengage.in
Meta Social Hub: https://meta.digiengage.in
GMB Portal: https://gmb.digiengage.in
Operating Hours: Monday – Saturday, 10:00 AM – 7:00 PM IST