Last updated: July 2026
This Privacy Policy explains how AsliReview ("we", "us") collects, uses, stores, and protects your personal data when you use aslireview.com. It is published in accordance with the Information Technology Act, 2000, the IT Rules, 2021, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").
Account data: mobile number and/or email address (used for OTP login), display name, and city. Content you post: reviews, ratings, fraud reports, vendor listings, business replies, and any transaction proof you attach (UPI reference number, order ID, or receipt image). Technical data: device fingerprint and basic usage logs used to prevent spam and abuse.
We use your data to: authenticate you via OTP; display your reviews with your chosen display name; show relevant local content based on your city; verify good faith of reviews via transaction proof; prevent fraud, spam, and manipulation of ratings; respond to grievances and legal requests; and improve the Platform. We do not sell your personal data. We do not use your data for third-party advertising.
Receipt images are used only to check the vendor name and date of transaction. Receipt files are automatically deleted from our storage within 30 days of upload. UPI reference numbers are stored to prevent the same transaction being used for multiple reviews; they cannot be used by us or anyone else to access your bank account or payment apps. We never ask for card numbers, CVV, PINs, passwords, or OTPs of your payment apps.
Your display name, city, credibility score, and the content of your reviews are publicly visible alongside the vendor you reviewed. Your mobile number and email address are never displayed publicly. Please do not include personal contact details inside review text.
Your data is stored on Supabase infrastructure hosted in the Mumbai (India) region. Authentication and SMS/email delivery are performed by our service providers (currently Supabase, and SMS/email gateways) strictly to deliver Platform functionality.
We share personal data only: (a) with service providers who process it on our behalf under contract; (b) when required by law, court order, or lawful government request; and (c) to enforce our Terms or protect the rights and safety of users. We may share aggregated, anonymised statistics (for example, "₹X saved from fraud") that cannot identify you.
Under the DPDP Act you may: access a summary of your personal data; request correction of inaccurate data; request erasure of your account and personal data; and nominate a person to exercise your rights in case of death or incapacity. To exercise any right, contact our Grievance Officer (see our Grievance page). Note that reviews may be retained in anonymised form where required to preserve the integrity of the Platform, and some data may be retained where required by law.
We use essential cookies solely to keep you logged in (authentication session). We do not use third-party advertising or tracking cookies.
AsliReview is not intended for persons under 18. We do not knowingly collect data from children. If you believe a minor has created an account, contact our Grievance Officer and we will delete it.
We use industry-standard measures including encrypted connections (HTTPS), OTP-based authentication without passwords, row-level security on our database, and restricted admin access with an immutable audit log. No system is perfectly secure; please report suspected vulnerabilities to our Grievance Officer.
We may update this Policy from time to time. Material changes will be indicated by updating the date above.
For privacy questions, data requests, or complaints, contact our Grievance Officer — details on our Grievance page.