Privacy Policy

Last updated 29 September 2026. Witlabs Services Pvt Ltd, Unit No 806 A, 8th Floor, Levana Cyber Heights, Vibhuti Khand, Lucknow 226010, Uttar Pradesh, India.

This policy explains what personal data Testimonia processes and why. It is written to meet India's Digital Personal Data Protection Act, 2023 and, where it applies, the EU/UK GDPR.

What we collect

• Account data: your email address and name, and your Google account ID if you sign in with Google.
• Workspace content: your brand details, product description, forms, widgets, website research results and the reviews in your workspace.
• Reviewer data: when someone submits a review on your form: their name, rating, words, optional photo, video, role, company and links, and their consent. For this data, your business decides how it is used and we process it on your behalf.
• Connected social accounts: if you connect Instagram or Facebook, we store the name, username and picture of each Page and Instagram account you allow, and an access token (encrypted) that lets us publish the posts you ask us to publish. We do not read your messages, followers or other posts.
• Payment data: handled by Cashfree Payments. We receive the subscription status, never your full card, bank or UPI details.
• Technical data: a session cookie to keep you signed in, IP address for security and rate limiting, and server logs.

Why we use it

To provide the service you signed up for, to secure it, to bill you, to send service emails (sign-in links, new-review alerts), and to meet legal duties. We do not sell personal data and do not use it for third-party advertising.

Who we share it with

• Hosting and database: Railway (United States).
• File storage: Cloudflare R2.
• Email delivery: Resend.
• Payments: Cashfree Payments (India).
• Social publishing: Meta (Instagram and Facebook), only the media and captions you choose to post, sent to the accounts you connected.
• AI processing: OpenRouter and the model provider it routes to, only for the text you or your customers ask the AI to work on. They may process data outside India.

How long we keep it

For as long as your account exists. When you delete your account, your workspace, reviews, forms and media are deleted immediately from our database; backups roll off within 30 days. Payment records are kept as tax law requires.

Your rights

You can access and export your data (Settings → Account & data), correct it, and delete your account. Reviewers who want their review removed can ask the business that collected it, or write to us and we will pass it on. You may withdraw consent at any time.

Deleting Instagram and Facebook data

To remove what we hold from Meta, open Post → Connected accounts in the app and press the × next to each account: the stored token and any scheduled posts for it are deleted at once. You can also remove Testimonia in Facebook under Settings → Business integrations, or write to hello@testimonia.xyz and we will delete it within 7 days and confirm by email. Deleting your Testimonia account deletes all of it.

Cookies

We use one essential cookie to keep you signed in, and short-lived ones during Google sign-in and when you connect Facebook. No advertising or tracking cookies.

Security

Data is encrypted in transit. Sign-in links and sessions are stored only as hashes. Access to production data is limited to people who need it to run the service.

Children

The service is not meant for anyone under 18.

Grievance Officer

Grievance Officer, Testimonia, Witlabs Services Pvt Ltd, Unit No 806 A, 8th Floor, Levana Cyber Heights, Vibhuti Khand, Lucknow 226010, Uttar Pradesh, India. Email: hello@testimonia.xyz. We acknowledge complaints within 24 hours and resolve them within 15 days.

Questions: hello@testimonia.xyz · Terms · Privacy · Refunds