Privacy Policy

1. Introduction

Blackstar Media Pte Ltd ("Starviu", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital services platform.

This policy applies to all users of our services, including:

• Business Subscribers: Companies that subscribe to our review management, website development, and digital marketing solutions
• End Customers: Individuals who submit reviews, feedback, or contact information through our review collection forms on behalf of our business clients
• Website Visitors: Anyone who accesses our platform or business client websites

By using our services, you consent to the data practices described in this Privacy Policy.

2. Information We Collect

2.1 Business Subscriber Information

Information collected from businesses that subscribe to our services:

• Contact Information: Business name, contact person details, email addresses, and phone numbers
• Business Information: Business description, industry, location, postal codes, and operational details
• Service Preferences: Selected services, billing preferences, and configuration settings
• Content: Text, images, and other content you provide for websites and marketing materials
• Communication Data: Messages, support requests, and feedback during technical setup and ongoing support
• Payment Information: Billing details processed through Stripe (we do not store payment card information)

2.2 Customer Review and Feedback Information

Information collected from end customers who submit reviews or feedback through our review collection forms:

• Review Content: Star ratings, review titles, detailed feedback, comments, and testimonials
• Contact Details: Name, email address, and phone number (provided voluntarily for follow-up purposes)
• Media Content: Photos, videos, or other media files uploaded with reviews
• Interaction Data: Review submission timestamps, form completion patterns, and user preferences
• Technical Information: IP address, browser type, device information, and location data (for fraud prevention and analytics)
• Sentiment Analysis: AI-generated sentiment scores and categorization of feedback content

2.3 Information from Third-Party Platforms

When you connect your business accounts to our platform, we collect:

• Google Business Profile: Business information, reviews, ratings, customer interactions, and response history
• Facebook Pages: Page information, posts, comments, engagement metrics, and audience data
• Instagram Business: Profile information, posts, stories, comments, and engagement statistics
• Review Platforms: Customer reviews, ratings, and associated metadata from connected platforms

2.4 Analytics and Technical Information

• Analytics Access: Usage patterns when accessing your unique analytics URL
• Technical Data: IP address, browser type, device information, and operating system during onboarding and analytics access
• Service Performance: Platform performance metrics and service delivery statistics (via Vercel Analytics or PostHog)
• Log Data: Server logs, error reports, and system performance data for service optimization

3. How We Use Your Information

We use your information for the following purposes:

3.1 Service Delivery

• Providing review management and automated response services
• Creating and maintaining your business websites
• Managing social media accounts and posting content on your behalf
• Monitoring and analyzing your online presence and reputation
• Generating AI-powered responses to customer reviews and inquiries
• Facilitating communication between businesses and their customers for service recovery and follow-up

3.2 Customer Review Processing

• Review Collection: Collecting and storing customer feedback, ratings, and testimonials on behalf of our business clients
• Business Communication: Sharing customer contact information with the relevant business for follow-up and service improvement (only when consent is provided)
• Content Moderation: Reviewing submitted content for appropriateness and compliance with platform guidelines
• Analytics and Reporting: Providing businesses with aggregated insights about customer satisfaction and feedback trends
• Platform Sharing: Facilitating the sharing of positive reviews to external platforms (Google, Facebook, Instagram) when customers consent
• Service Recovery: Enabling businesses to address negative feedback and improve customer experiences

3.3 Fully Managed Service Operations

• Processing payments and managing subscriptions
• Coordinating technical setup and OAuth authentication
• Providing customer support and technical assistance
• Maintaining platform security and preventing fraud
• Generating and providing secure analytics URLs
• Improving our services through analytics and performance data
• Developing new features and functionality

3.4 AI and Machine Learning

• Training AI models to improve response quality and relevance
• Analyzing sentiment and trends in customer feedback
• Personalizing content and recommendations for your business
• Optimizing automated posting schedules and content strategies

3.5 Legal and Compliance

• Complying with legal obligations and regulatory requirements
• Protecting our rights and interests
• Investigating and preventing fraudulent or illegal activities
• Responding to legal requests and court orders

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

• Hosting Services: Vercel for platform hosting and content delivery
• Payment Processing: Stripe for secure payment processing
• Analytics: Vercel Analytics or PostHog for platform optimization
• AI Services: Third-party AI/ML providers for content generation and analysis
• Communication: Email and notification service providers

4.2 Business Client Sharing

We share customer review and contact information with our business clients in the following circumstances:

• Review Content: All review content (ratings, feedback, media) is shared with the relevant business for service improvement and response purposes
• Contact Information: Customer contact details are shared with businesses only when customers provide explicit consent for follow-up communication
• Analytics Data: Aggregated and anonymized customer feedback trends and satisfaction metrics
• Service Recovery: Negative feedback and associated contact information (when provided) to enable businesses to address customer concerns

4.2A Data Intermediary Role and Liability

Important Notice: For customer review data collection, Starviu acts as a data intermediary under Singapore's Personal Data Protection Act (PDPA), collecting personal information on behalf of our business clients.

• Limited Liability: We do not hold liability for how our business clients use customer personal information once it has been shared with them. Each business is responsible for their own compliance with data protection laws regarding customer information.
• Data Collection Role: We merely collect customer information on behalf of businesses and facilitate its transfer to the relevant business for their direct use and management.
• Business Responsibility: How businesses use, store, and manage customer personal information after receiving it from us is governed by their own privacy policies and data protection practices.
• Our Obligations: We will, whenever possible and in accordance with applicable law, fulfill our obligations regarding deletion requests and other data subject rights for information under our direct control.
• Customer Rights: For matters relating to how a business uses your personal information after receiving it from us, you should contact the business directly regarding your data protection rights.

4.3 Platform Integrations

• Google: Posting responses and managing your Google Business Profile
• Facebook/Meta: Managing your Facebook Pages and Instagram business accounts
• Social Media Platforms: Publishing content and managing interactions on your behalf
• Review Platforms: Sharing positive customer reviews to external platforms when customers provide consent through our review suggestion system

4.4 Legal Requirements

• When required by law, regulation, or legal process
• To protect our rights, property, or safety
• To protect the rights, property, or safety of our users
• In connection with legal proceedings or investigations

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption: Data is encrypted in transit and at rest using industry-standard protocols
• Access Controls: Strict access controls and authentication mechanisms
• Regular Audits: Regular security assessments and vulnerability testing
• Secure Infrastructure: Hosting on secure, compliant cloud platforms
• Employee Training: Regular security training for all team members

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy:

• Business Account Data: Retained while the business account is active and for a reasonable period after cancellation
• Business Data: Retained for the duration of the business subscription and deleted upon cancellation
• Customer Review Data: Review content and associated metadata are retained for the duration of the business subscription. Customer contact information is retained only as long as necessary for follow-up purposes or until deletion is requested
• Analytics Data: Aggregated and anonymized data may be retained for longer periods for service improvement
• Legal Requirements: Some data may be retained longer to comply with legal obligations

Upon account cancellation, we will delete your data from our active systems. You may request immediate deletion of your data at any time.

7. Your Privacy Rights

You have the following rights regarding your personal information:

7.1 Access and Portability

• Request access to your personal information
• Receive a copy of your data in a portable format
• Request information about how your data is processed

7.2 Correction and Updates

• Correct inaccurate or incomplete information
• Update your account and business information
• Modify your communication preferences

7.3 Deletion and Restriction

• Request deletion of your personal information
• Restrict processing of your data in certain circumstances
• Object to processing based on legitimate interests

7.4 Customer Review Rights

If you have submitted a review or feedback through our platform, you have the following additional rights:

• Review Access: Request access to reviews and feedback you have submitted
• Contact Data Control: Request deletion of your contact information while keeping your review content anonymous
• Review Modification: Request updates or corrections to your submitted reviews
• Complete Deletion: Request complete removal of your review and all associated personal information
• Communication Opt-out: Withdraw consent for businesses to contact you for follow-up purposes
• Platform Sharing Control: Control whether your positive reviews are shared to external platforms

7.5 Business Analytics and Service Access

• Request a new analytics URL if your current one is compromised
• Revoke permissions granted to third-party platforms through their respective settings
• Disconnect integrated accounts at any time (may affect service functionality)
• Control what data is shared with our platform during OAuth setup

To exercise these rights, please contact us at admin@starviu.com. We will respond to your request within a reasonable timeframe.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

8.1 Types of Cookies

• Essential Cookies: Required for onboarding process and analytics page functionality
• Analytics Cookies: Help us understand usage patterns on analytics pages and onboarding flow
• Session Cookies: Maintain onboarding session state during signup process
• Performance Cookies: Monitor platform performance and service delivery experience

8.2 Managing Cookies

You can control cookies through your browser settings. However, disabling certain cookies may affect platform functionality.

9. International Data Transfers

Your information may be transferred to and processed in countries other than Singapore, including:

• United States (for cloud hosting and AI services)
• European Union (for certain service providers)
• Other countries where our service providers operate

We ensure that such transfers are subject to appropriate safeguards and comply with applicable data protection laws.

10. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Data Breach Response

In the event of a data breach that may affect your personal information:

• We will assess the scope and impact of the breach
• Affected users will be notified as soon as reasonably possible
• We will provide details about what information was involved
• We will explain the steps we are taking to address the breach
• We will provide recommendations for protecting your information
• We will cooperate with relevant authorities as required

12. Third-Party Services and Links

Our platform may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to these external services. We encourage you to review the privacy policies of any third-party services you use.

We are not responsible for the privacy practices or content of third-party websites or services.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes:

• We will update the "Last updated" date at the top of this policy
• For material changes, we will provide 30 days' notice via email or platform notification
• Continued use of our services after changes constitutes acceptance of the updated policy
• We will maintain previous versions for your reference

14. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract Performance: To provide the services you have subscribed to
• Legitimate Interests: To improve our services and prevent fraud
• Consent: Where you have provided explicit consent for specific processing, including customer review collection and business follow-up communication
• Legal Obligations: To comply with applicable laws and regulations

14.1 PDPA Compliance for Customer Data

In accordance with Singapore's Personal Data Protection Act (PDPA), we ensure that:

• Clear Consent: We obtain clear and specific consent from customers before collecting their personal information through review forms
• Purpose Limitation: Customer data is used only for the stated purposes of review collection, business communication, and service improvement
• Data Minimization: We collect only the minimum personal information necessary to fulfill the stated purposes
• Accuracy: We provide mechanisms for customers to correct or update their information
• Security: Customer personal data is protected with appropriate technical and organizational measures
• Access Rights: Customers can request access to, correction of, or deletion of their personal information
• Retention Limits: Customer data is retained only for as long as necessary for the stated purposes

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Company: Blackstar Media Pte Ltd
• Email: admin@starviu.com
• Website: https://starviu.com
• Subject Line: "Privacy Policy Inquiry" for faster processing

We will respond to your privacy-related inquiries within 30 days of receipt.

16. Governing Law

This Privacy Policy is governed by the laws of Singapore. Any disputes arising from this policy or our data practices shall be subject to the exclusive jurisdiction of the courts of Singapore.