Privacy notice

Loculens is run by Hemant Sain, trading as Braivex, a sole proprietor in India.Braivex is the controller of the personal data described in this notice, unless it says otherwise.

• Legal name: Hemant Sain, trading as Braivex.
• Address: Yog Nagar, 60 Feet Road, Alwar, Rajasthan 301001, India.
• Email: [email protected], with "Privacy" in the subject line.
• Customer care phone: +91 80585 89200.

• Account: your email address, the Braivex account you sign in with, and your role in the workspace.Loculens does not store a password for you.
• Workspace: the business name and description, its locations, the team members you add to the roster, and your settings.
• Invitations: the email addresses of colleagues you invite.
• Reviews: Google reviews of your locations, with the reviewer's public name, rating, text, date and link, and your public reply.
• What Loculens works out from reviews: sentiment, topics and which team members a review mentions.
• Reply drafts: the drafts you ask for and the reviews they answer.
• Connected accounts: Google Business Profile access, if a workspace admin connects it, and an Apify API token, if you add one.
• Demo requests: your name, email address, message and IP address.
• Billing: your plan, subscription status, credit balance and the credits each sync or draft used.
• Device and usage: your IP address and browser details, which our host logs and which we use to limit misuse, and a record of changes made in the workspace.

Loculens collects Google reviews of your own business locations, through Apify, the Google Places API and, where connected, the Google Business Profile API.A review includes the reviewer's public name and what they wrote.We use reviews only to show them in your dashboard, analyse them and draft replies.We do not sell this data.

For the reviews and team-member mentions your workspace tracks, your business is the controller and we act as its processor.Your business must have a lawful basis for that data and must tell the people concerned, including the team members on its roster.If you are a reviewer or a team member, please contact the business first.You can also email [email protected] with "Public data" in the subject line, and we will pass your request on and help the business reply.Business customers can ask for our data processing terms at [email protected].

• To run your workspace and sign you in: contract.
• To sync, analyse and show your reviews, and to draft replies: contract.
• To send invitations to the colleagues you invite: contract.
• To take payments, handle refunds and keep billing records: contract and legal obligation.
• To reply to demo requests: legitimate interests, or contract where you ask about buying.
• To keep Loculens secure and prevent misuse: legitimate interests.

Section 4 of the Braivex Privacy Policy explains each lawful basis, and you can ask us how we balanced our interests against yours.

Loculens uses AI models from Anthropic to draft replies in your business's voice.We send the model the review, the reviewer's public name, any team member the review names, your business name and description, and examples of your past reviews and public replies.We do not use your content to train AI models.AI drafts can be wrong, so read each one before you post it.

We do not sell your personal data.These providers process it for us, only to run Loculens:

• Railway: hosts Loculens and its data.
• Cloudflare: delivers loculens.braivex.com to your browser, so it receives your IP address.
• Braivex Accounts and Shopify: sign you in with Braivex.
• Braivex billing and Dodo Payments: plans, payments, refunds and invoices.
• Apify: collects Google reviews.
• Google: the Places API, the Business Profile API and Google sign-in for connecting a Business Profile.
• Anthropic: AI models for reply drafts.
• Resend: sends invitation emails and passes demo requests to us.

We also share data with authorities where the law requires it, and with our professional advisers.

Dodo Payments is the merchant of record for Loculens plans and credit packs.It takes the payment, issues the invoice and handles VAT or sales tax.It is a separate controller for the payment data it collects, under its own privacy policy.Loculens gets your plan, subscription status and credit balance from the Braivex billing service at billing.braivex.com.We never see or store your full card number.

Loculens uses encrypted connections (HTTPS).A workspace's Apify API token is stored encrypted.Google Business Profile access is kept in an encrypted cookie in the browser of the admin who connected it.Only the people who need it can use our admin tools.No system is completely secure, and if a breach affects your data we will tell you without undue delay.

Loculens sets the cookies it needs to keep you signed in and to protect sign-in with Braivex and the Google connection.It also keeps your theme and dashboard view settings in your browser's local storage.Loculens uses no advertising cookies and no analytics tags.You can block or delete cookies in your browser settings, but you will not be able to sign in without them.

Braivex is based in India, and Railway hosts Loculens in the United States.Our other providers may also process data in other countries.Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses.Section 14 of the Braivex Privacy Policy explains this in more detail.

• Workspace, reviews, roster, reply drafts and settings: while your account is open.After you close it, we keep data only as long as we need to settle final payments, questions or claims, or as the law requires.
• Google Business Profile access: until the cookie that holds it expires or you clear it from your browser.You can also remove Loculens' access in your Google Account settings.
• Payment, invoice and refund records: as long as Indian tax and accounting law requires.
• Demo requests: until we have dealt with them, then only as long as the law requires.

To close your account, email [email protected] with "Close my account" in the subject line.

Depending on where you live, you can ask for a copy of your data, or ask us to correct or delete it.You can also ask us to restrict how we use it, or to send you the data you gave us in a machine-readable format.You can withdraw a consent you gave us at any time.To make a request, email [email protected] with "Privacy request" in the subject line.We may ask you to confirm your identity.We reply within one month of receiving your request.Section 16 of the Braivex Privacy Policy explains each right.

To complain, email [email protected] with "Data protection complaint" in the subject line, or write to the address above.We acknowledge your complaint within 48 hours and give you our answer within one month.

• Grievance officer: Hemant Sain, Proprietor.
• Email: [email protected].
• Phone: +91 80585 89200.
• Address: as in "Who we are" above.

The grievance officer acknowledges each complaint within 48 hours and resolves it within one month.

• UK: you can complain to the Information Commission, still known as the ICO, at ico.org.uk.
• EU and EEA: you can complain to the data protection authority in the country where you live or work.
• India: once you have used our grievance process, you can complain to the Data Protection Board of India.

When we change this notice, we update the date at the top.If a change materially affects you, we email account holders before it takes effect.