Introduction
Mohsin Designs (“we,” “our,” or “us”) operates the website https://mohsindesigns.com/ and provides web design, development, and reputation management services, including a Google reviews integration widget and a project-location-review SaaS platform (collectively, the “Services”).
This Privacy Policy explains how we collect, use, store, share, and protect information when you visit our website, use our Services, or connect your Google Business Profile to our platform.
By using our Services, you agree to the terms ofthis Privacy Policy.
Information We Collect
2.1 Information You Provide Directly
- Contact information: name, email address, phone number, business name when you contact us or sign up for our Services.
- Account information: login credentials and preferences for our dashboard.
- Communications: messages, support requests, and feedback you send us.
- Payment information: billing details for paid Services (processed by third-party payment providers; we do not store full card numbers).
2.2 Information from Google Services
When you authorize our platform to access your Google Business Profile via Google OAuth 2.0, we receive:
- Business Profile information: business name, address, phone, category, hours, and website
- Reviews: review text, reviewer display name, reviewer profile photo, star rating, publish date, and review responses
- Aggregate metrics: total review count and average rating
- OAuth refresh tokens: stored encrypted to enable scheduled review fetching on your behalf
We only access data within the scope you explicitly authorize during the Google consent flow. We do not modify your Business Profile, post on your behalf, or take any automated actions on your account.
2.3 Information Collected Automatically
- Usage data: pages visited, features used, timestamps, referring URLs
- Device data: browser type, operating system, IP address, screen resolution
- Cookies and similar technologies: see Section 8
How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the Services
- Display your authentic Google reviews on websites and dashboards you control or have authorized
- Refresh and cache your reviews on a scheduled basis (typically weekly)
- Communicate with you about your account, support requests, and Service updates
- Process payments and manage billing
- Improve our Services and develop new features
- Detect, prevent, and address fraud, security issues, and abuse
- Comply with legal obligations
Google API Services User Data Policy
Our use and transfer to any other app ofinformation received from Google APIs will adhere to the Googl e API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We use Google user data only to provide the features you authorized — primarily displaying your Google Business Profile reviews on websites you control
- We do not use Google user data for serving advertisements
- We do not allow humans to read Google user data unless we have obtained your explicit consent, it is required for security, to comply with applicable law, or for internal operations after data has been aggregated and anonymized
- We do not transfer Google user data to third parties except as necessary to provide the Services, comply with law, or as part ofa merger or acquisition with continued privacy protection
- We do not sell Google user data
How We Store and Protect Data
- Data is stored on secure servers with industry-standard encryption (TLS in transit, AES-256 at rest where applicable)
- Google OAuth refresh tokens are stored encrypted and accessed only by authorized server processes
- Access to production data is restricted to authorized personnel under strict need-to-know basis
- We maintain regular security reviews and follow best practices for vulnerability management
While we take reasonable measures to protect your information, no method oftransmission or
storage is 100% secure. We cannot guarantee absolute security.
Data Retention
- Account data: retained while your account is active and for up to 90 days after account closure for backup and dispute resolution
- Google Business Profile data and reviews: cached for the duration ofyour connection;
- deleted within 30 days ofyou disconnecting your Google account or closing your account
- OAuth refresh tokens: deleted immediately upon disconnection or revocation
- Billing records: retained as required by tax and accounting laws (typically 7 years)
- Logs and analytics: retained for up to 12 months
Sharing Your Information
We do not sell your personal information. We share data only in these circumstances:
- Service providers: trusted third parties who help us operate our Services (hosting, email delivery, payment processing, analytics) under confidentiality agreements
- Legal requirements: when required by law, court order, or government request
- Business transfers: in connection with a merger, acquisition, or sale ofassets, with continued privacy protection
- With your consent: when you explicitly authorize sharing
Cookies and Tracking
We use cookies and similar technologies to:
- Keep you signed in
- Remember your preferences
- Measure how the Services are used
- Improve security
You can control cookies through your browser settings. Disabling cookies may affect some Service functionality.
Your Rights and Choices
You have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your account and associated data
- Revoke Google access at any time from your Googl e Account permissions pag e. Once revoked, we will stop accessing your Google Business Profile and delete cached data within 30 days
- Export your data in a portable format
- Object to certain processing
- Withdraw consent for processing based on consent
To exercise these rights, email us at [email protected].
Children’s Privacy
Our Services are not intended for individuals under 18 years ofage. We do not knowingly collect personal information from children. Ifyou believe a child has provided us information, please contact us and we will delete it.
International Data Transfers
Our servers may be located in many countries, including the United States and Singapore. By using our Services, you consent to the transfer of your information to these locations, which may have different data protection laws than your country.
Third-Party Services
Our Services integrate with third-party services including Google (Business Profile, OAuth).
These services have their own privacy policies, which we encourage you to review:
- Googl e Privacy Policy
We are not responsible for the privacy practices ofthird-party services.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you ofmaterial changes by posting the new policy on this page and updating the “Last Updated” date. For significant changes, we may also notify you by email.
Your continued use ofthe Services after changes constitutes acceptance ofthe updated policy.
Contact Us
Ifyou have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Mohsin Designs Email: [email protected]
Website: https://mohsindesigns.com/
We aim to respond to all inquiries within 7 business days.
