Grahak legal
Privacy Policy
1. About this Privacy Policy
This Privacy Policy explains how Grahak Digital Pvt. Ltd. collects, uses, stores, shares and protects information when people use Grahak.
Grahak is a Nepal-focused business discovery, review and trust platform operated by Grahak Digital Pvt. Ltd., Nepal.
This policy applies to Grahak's public website, reviewer accounts, business accounts, review and moderation features, business tools and related services.
2. Information you provide
Depending on how you use Grahak, you may provide information such as:
- name and email address
- account and authentication information
- profile information
- reviews, ratings, photos and other submitted content
- business account and business profile information
- business-claim or verification information
- suggested business edits
- offers, events, notices or other business submissions
- communications with support
- information supplied when reporting content, appealing a decision or participating in moderation
- billing or transaction-related information if paid services are introduced
Grahak asks users not to provide sensitive or unnecessary personal information unless it is genuinely needed for the feature or request.
3. Public reviews and public information
Reviews, ratings, photos, business responses, business information and some profile information are intended to be public.
Public content may be viewed, indexed, shared or quoted by other users or search services. Grahak may also display public content elsewhere within Grahak where relevant to search, discovery, summaries or business profiles.
Do not include private, confidential or sensitive information in a public submission unless disclosure is lawful, relevant and you have the right to disclose it.
4. Information collected when you use Grahak
Grahak may collect technical and usage information such as:
- IP address
- browser, device and operating-system information
- session and login information
- pages, searches and features used
- interactions with businesses, reviews and platform features
- referral or source information
- security, fraud-prevention and anti-abuse signals
- diagnostic, error and performance information
This information may be collected through server logs, cookies, local storage and similar technologies where applicable.
5. Location information
Grahak may use location information to help users discover relevant businesses and improve location-based search.
Location information may come from a place entered by the user, an approximate location inferred from technical information such as IP address, or precise device location when the user explicitly grants browser or device permission.
Grahak does not represent that it continuously tracks a user's precise location. Precise location permission can be controlled through browser or device settings.
7. Why Grahak uses information
Grahak collects and uses personal information only for identified service, security, integrity, communication, improvement or legal purposes and seeks consent where required by applicable law.
Grahak may use information to:
- create, authenticate and manage accounts
- publish reviews, ratings and other public content
- operate and verify business profiles and claims
- process suggested edits and business responses
- provide search, discovery, location and recommendation features
- provide business analytics and activity information
- send account, security, review, moderation, support and service communications
- detect spam, fraud, abuse, manipulation and security threats
- moderate content and investigate reports
- improve reliability, usability and performance
- develop and test new features
- administer paid services if introduced
- comply with legal obligations and respond to lawful requests
Where information was collected for a particular purpose, Grahak will not use it for an unrelated purpose in a manner that is inconsistent with applicable law without an appropriate basis or additional consent where required.
8. Review integrity, automated analysis and AI-assisted tools
Grahak may use automated systems, including machine-learning or AI-assisted analysis, to identify patterns or signals associated with spam, abuse, duplicate content, unusual review activity, coordinated behaviour or possible manipulation.
Analysis may consider combinations of content and behavioural signals, such as semantic similarity, timing, frequency, review-volume changes and account activity.
Automated signals may support moderation, security or integrity processes. An anomaly is not automatically treated as proof that a review is false or that a person acted improperly.
Where appropriate, suspicious activity may be assessed further by moderation or other review processes.
If Grahak introduces an AI feature that materially changes how personal information is used, Grahak will provide appropriate information and update this policy where necessary.
9. Authentication and connected services
If you choose a third-party sign-in provider, Grahak may receive information that provider makes available for authentication, such as an account identifier, name, email address or profile image.
The provider processes information under its own terms and privacy practices. Grahak aims to request only the information reasonably necessary for the authentication feature being used.
11. Service providers and processing outside Nepal
Some technology providers used by Grahak may store or process information outside Nepal.
When Grahak uses an external provider, it will seek to limit access to what is reasonably necessary for the service and select or manage providers with appropriate attention to privacy, security and confidentiality.
Grahak remains responsible for its own handling of personal information to the extent required by applicable law.
12. Business analytics and aggregated information
Grahak may provide businesses with analytics such as profile visits, review activity, clicks, interactions, source categories or similar product metrics.
Grahak aims to provide these analytics without exposing private reviewer-account information unless a user has intentionally shared information through a feature that requires it.
Grahak may use aggregated or de-identified information for analytics, research, service improvement and business planning where the information no longer reasonably identifies an individual.
13. Data retention
Grahak keeps personal information only for as long as reasonably necessary for the purposes described in this policy, including operating accounts, maintaining public review history, resolving disputes, enforcing platform rules, preventing fraud or manipulation, meeting legal obligations, maintaining security and keeping appropriate business records.
Retention periods vary by category of information. Public content may remain available until it is deleted, removed or otherwise no longer appropriate to display. Security, moderation and transaction records may be retained for a reasonable period after account closure where needed to prevent abuse, resolve disputes or comply with law.
Backups and logs may persist for a limited period after deletion before normal rotation removes them. Information may be anonymised instead of deleted where lawful and appropriate.
14. Security
Grahak uses technical and organisational measures intended to protect information against unauthorised access, loss, misuse, alteration or disclosure.
No internet service can guarantee absolute security. Users should protect their login credentials and notify Grahak if they believe an account has been compromised.
If Grahak becomes aware of a material security incident affecting personal information, it will take reasonable steps to contain and investigate the incident and provide notifications where required by applicable law.
15. Your choices and privacy requests
Depending on the feature and applicable law, you may be able to:
- access or update account information
- correct profile or business information
- manage precise-location permission through browser or device settings
- control optional communications
- request information about personal information Grahak holds about you
- request correction or deletion where applicable
- withdraw consent for a use that depends on consent, subject to the consequences explained for that feature
- close your account where the product provides that ability
- contact Grahak with a privacy complaint or request
Grahak may need to verify the identity or authority of a person making a privacy request. Some information may be retained where reasonably necessary for legal, security, anti-abuse, dispute-resolution, record-keeping or platform-integrity purposes.
Deleting a Reviewer Account removes or anonymises its private profile and authentication information. Published reviews remain visible as Guest user so public review history and business context are preserved.
Deleting a Business Account removes its authentication access and private account information. Managed profiles become unclaimed, while public business profiles, reviews and public responses remain available.
Full deletion details and the in-product deletion paths are available on Grahak's Account deletion page.
16. Communications
Grahak may send service messages that are necessary for account operation, authentication, security, review activity, moderation, business verification, support or other requested features.
Promotional or optional marketing communications, if introduced, will be handled separately and will include any choice or consent required by applicable law.
17. Children's privacy
Grahak reviewer and business accounts are intended for people aged 18 or older.
Grahak does not knowingly seek to create reviewer or business accounts for children under 18. If Grahak learns that an under-18 person created an account contrary to this policy, Grahak may restrict or close the account and take reasonable steps regarding associated personal information.
Public business information may be browsed by younger users where the service is publicly accessible, but account features remain subject to the minimum age rule.
18. Legal requests and protection of rights
Grahak may preserve or disclose information where reasonably necessary to comply with a lawful court order, request from a competent authority, legal obligation, or to establish, exercise or defend legal rights.
Grahak may also use or preserve information where reasonably necessary and lawful to investigate fraud, security incidents, abuse, threats or manipulation.
Grahak will not voluntarily disclose private reviewer information to a business merely because the business disagrees with a review.
19. Future features and paid services
Grahak may introduce transaction-verified review invitations, Premium business tools, promotional services, conversion tracking, payment functionality or other features.
If a future feature requires additional categories of personal information or a materially different use of information, Grahak will provide appropriate notice, obtain consent where required and update this Privacy Policy where necessary.
20. Changes to this Privacy Policy
Grahak may update this Privacy Policy as the service, technology, business model or legal requirements change.
The current version and effective date will be published on Grahak. For material changes, Grahak may provide additional notice where appropriate.
21. Contact
Privacy questions, requests or complaints may be sent to:
Grahak Digital Pvt. Ltd.Nepal[email protected]