Privacy Policy
Last updated: 20 October 2026
We collect only what we need to run Monsoom. We do not sell your data and we do not use advertising trackers.
1. Who we are
Monsoom is a product of Ovviously ("we", "us"), registered in Guwahati, Assam, India. This policy explains what personal data we handle, why, and what your choices are.
2. Who this policy covers
It covers Owners, the businesses that have a Monsoom account, and Reviewers, the customers who leave a review through an Owner's form. It applies to everyone, wherever you are, including in the United States, the United Kingdom, Canada, Australia and India.
For the reviews themselves, the business you reviewed decides why and how your review is used, and we handle it for them. For Owners' own accounts, we decide.
3. What we collect
From Owners: name, email, password (stored scrambled, never in plain text), business name, logo and brand colour, profile picture, and billing records. Card payments are handled by Razorpay. We never see or store your full card number.
From Reviewers: name, email, role or company (optional), star rating, answers, written review, and optional video, photos and a profile picture. A Reviewer's email is used only to send the confirmation code. It is never shown on the embed or the Wall of Love. If a Reviewer continues with Google, we receive their Google name, email and profile photo.
Technical data: IP address, browser type and basic request details, used to keep the Service secure and to stop spam and abuse.
4. How we use it
To run the Service, sign you in, send confirmation codes and service emails, show approved reviews where the Owner chooses, take payments, keep the Service safe, answer your messages, and meet legal duties. We do not sell personal data. We do not use it to train AI models, and we do not run advertising.
5. Legal bases
Where the law asks for a legal basis, we use: contract (to give you the Service), consent (for example, a Reviewer agreeing to show their review publicly), legitimate interests (security, preventing fraud, improving the Service), and legal obligation (tax and accounting records).
6. Who we share it with
Only the companies that help us run the Service, each under its own terms:
- Cloudflare: stores reviews, videos, photos and account data.
- Supabase: handles login.
- Vercel: hosts the website.
- Resend: sends emails.
- Razorpay: processes payments.
- Google: only if a Reviewer or Owner chooses to sign in with Google.
We may also share data when the law requires it, or to protect our rights or the safety of others.
7. Cookies
We use only the cookies and browser storage needed to keep you signed in and the Service working. We do not use advertising, tracking or analytics cookies.
8. International transfers
Ovviously is based in India, and our providers run servers in several countries. Your data may be processed outside your own country. Where the law requires it, we use safeguards such as standard contractual clauses.
9. How long we keep it
We keep your data while your account is open. When you delete a review or a form, it is removed for good straight away, together with its videos and photos. When you delete your account, everything is removed. Reviews that were never confirmed by email are removed after 7 days. Billing records are kept for up to 7 years where tax and accounting laws require it. We keep daily backups to protect against loss, and we use them for nothing else. A copy of deleted data may stay in a backup until that backup is cleared out.
10. Security
We use encrypted connections, scrambled passwords, private file storage and access limits. No online system is perfectly safe. If a breach puts your rights at real risk, we will tell you and the right authorities within the time the law sets.
11. Your rights
Depending on where you live, you may have the right to see, correct, export or delete your data, to object to or limit some uses, and to withdraw consent. This includes rights under the GDPR and UK GDPR, the California privacy laws, Canada's PIPEDA, Australia's Privacy Act and India's Digital Personal Data Protection Act. We honour the broadest of these for everyone.
Owners can export everything from Settings and delete their data from the Account page. Reviewers can ask the business that collected the review, or us, to remove it. Write to hello@ovviously.com. We will check who you are and reply within 30 days. You can also complain to the data protection authority where you live.
12. Children
Monsoom is not meant for children under 18, and we do not knowingly collect their data. If you think a child has given us data, write to us and we will delete it.
13. Complaints
Write to hello@ovviously.com. We aim to acknowledge complaints within 48 hours and resolve them within 30 days.
Ovviously
Registered address: Guwahati, Assam, India
14. Governing law
This policy is governed by the laws of India. Disputes are handled as set out in our Terms and Conditions. Your rights under the law where you live are not affected.
15. Changes
If we change this policy in a way that matters, we will update the date at the top and tell you by email or on the site.