Privacy policy

DineSight (“DineSight”, “we”, “us”) helps restaurants reply to their guests' online reviews. This policy explains what information we collect, how we use it, and the choices you have. It applies to our website at www.dinesight.in and the DineSight owner app. Questions about it go to hello@dinesight.in.

What we collect

When you join the waitlist

Your name, restaurant name, city, email address, and, if you choose to give them, your WhatsApp number, the review platforms you use and how many outlets you run.

When you sign in

You sign in with your Google account through our authentication provider, Clerk. We receive your name, email address and profile picture from Google. We never see or store your Google password.

When you use the owner app

• Your restaurant's profile and brand voice: its name, city, cuisine, a description, your preferred tone and sign-off, sample replies you choose to share, and things replies should avoid.
• Reviews you paste in, and the replies drafted for them, edited by you, or posted.
• Your alert settings, such as the email address alerts go to.

When you connect Google Business Profile

If you connect your Google Business Profile, you grant DineSight access through Google's consent screen (the “business.manage” permission). We then receive:

• The names and addresses of the business locations your Google account manages, so you can pick your restaurant's listing.
• That listing's reviews: each reviewer's public display name, star rating, review text, dates, and any existing reply.
• An access token that lets DineSight read those reviews and post replies on your behalf. We store it encrypted.

When you visit our website

Simple, first-party usage events, such as page views, film plays and form starts, with the page path and referring page. These are not linked to your name or email. We also keep your light or dark theme choice in your browser's local storage.

On our public pages (not inside the owner app), we use Microsoft Clarity to see how visitors use the site: clicks, scrolling and mouse movement, shown to us as heatmaps and session replays. Clarity uses cookies and collects details such as your device, browser and approximate location. It masks text you type, and we don't use it to identify you. Microsoft processes this data under its privacy statement. You can block it with your browser's cookie or tracker settings.

How we use it

• To run the service: show your reviews in one inbox, draft replies in your restaurant's voice, and post the replies you approve, or replies to 4–5 star reviews automatically if you switch that on.
• To sync your Google reviews about once an hour while your Business Profile is connected.
• To email you alerts about reviews that need your attention, and messages about your waitlist place or account.
• To keep the service secure and working, and to understand which parts of the website are used.

We do not sell your information, and we do not use it for advertising.

Google user data

DineSight's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide and improve the user-facing features described above: reading your listing's reviews, drafting replies and posting replies you approve.
• We do not sell Google user data, use it for advertising, or use it to train generalized AI or machine learning models.
• We transfer it only as needed to provide those features (for example, sending a review's text to our AI provider to draft a reply), to comply with law, or with your consent.
• People at DineSight do not read your Google user data unless you ask us to (for support), it is needed for security or to comply with the law.

Who we share it with

We use trusted service providers who process information on our behalf, only to run DineSight:

• Vercel, to host the website and app.
• Supabase, to store data in our database.
• Clerk, to handle sign-in.
• An AI provider, to draft replies. The review text, rating, reviewer's display name and your brand-voice settings are sent to draft each reply.
• Resend, to send emails.
• Microsoft Clarity, to understand how visitors use our public pages.
• Google, when you connect your Business Profile, to read reviews and post replies.

We may also disclose information if required by law, or to protect DineSight, our users or the public.

How long we keep it

We keep your information while your account is active. If you disconnect Google Business Profile, we delete the stored access token immediately and ask Google to revoke it; reviews already in your inbox stay until you delete your account. If you ask us to delete your account, we delete your restaurant, reviews and settings within 30 days, except where the law requires us to keep something longer.

Security

Access to the database is restricted so that each owner can only reach their own restaurant's data. Google access tokens are encrypted before they are stored. Data travels over encrypted connections (HTTPS).

Your choices

• You can edit your restaurant's settings at any time in the app.
• You can disconnect Google Business Profile in Settings, or remove DineSight's access from your Google account at myaccount.google.com/permissions.
• You can ask us for a copy of your information, to correct it, or to delete your account, by emailing hello@dinesight.in.

Children

DineSight is a tool for businesses and is not intended for anyone under 18.

Changes

If we change this policy, we will update the date at the top, and for significant changes we will let account holders know by email.

Contact

Questions or requests about your privacy: hello@dinesight.in.