Our approach
We take the security of your data seriously and apply measures appropriate to its sensitivity. The marketing website self-hosts its fonts and installs no advertising or analytics trackers; "Remember my email" is an explicit, device-local choice and never stores a password.
Application security
The service uses access controls and role-based permissions, secure session handling, encryption of data in transit, encrypted storage of connected Google credentials, least-privilege access to third-party APIs, regular backups and an incident-response process.
Service providers
We rely on reputable providers for cloud hosting and database, AI drafting (where you enable it), payments (Razorpay) and Google services, each under appropriate agreements. We share only the data needed for them to perform their role.
Google account permissions
When you connect a Google Business Profile, we request only the permissions needed for the features you enable, and we handle Google data consistent with the Google API Services User Data Policy, including its limited-use requirements.
Reporting a concern
If you believe you have found a security issue, email support@topgenie.in. Please do not include customer data, passwords or credentials in your report.
Certifications
We describe our practices honestly and do not claim SOC 2, ISO 27001, GDPR or DPDP certification, or endorsement by Google. We are happy to discuss our controls with enterprise customers on request.