Privacy Policy

1. Scope of This Policy

This Privacy Policy applies to:

• Visitors to our website
• Businesses that create accounts (“Business Users”)
• End customers whose data is collected through the Service (e.g. via QR code loyalty check-in)

When we process customer contact information provided by or collected on behalf of Business Users, we act as a service provider processing data on their behalf.

2. Information We Collect

2.1 Information Provided by Business Users

When you create an account or use the Service, we may collect:

• Name
• Email address
• Business name
• Login credentials
• Billing information (processed securely by our payment provider)
• Communications you send to us

We do not store full payment card details.

2.2 Customer Data Collected Through the Service

End customers may provide the following when interacting with the Service (e.g. scanning a QR code to join a loyalty program):

• Name
• Email address
• Visit history and loyalty check-in activity
• Star ratings and feedback submitted

This data is collected on behalf of the Business User and used to operate their loyalty program, send promotional emails they authorize, and manage customer feedback.

We do not independently initiate communications to end customers. Emails are sent only at the direction of the Business User.

2.3 Automatically Collected Information

When you use our website or Service, we may automatically collect:

• IP address
• Device information
• Browser type
• Usage data
• Cookies and similar tracking technologies

We use cookies and similar technologies to improve functionality, analyze performance, and measure marketing effectiveness.

We use Meta (Facebook Pixel) to track events such as Lead and CompleteRegistration for advertising and analytics purposes.

3. How We Use Information

We use collected information to:

• Provide and operate the Service
• Manage loyalty programs on behalf of Business Users
• Send promotional emails on behalf of Business Users when authorized
• Capture and route customer feedback
• Generate AI-assisted response suggestions
• Provide analytics and reporting
• Improve our platform and develop new features
• Prevent fraud and enhance security
• Communicate with Business Users about accounts and updates

Business User Responsibility for Consent

Business Users are solely responsible for ensuring they have obtained all necessary rights and consents to:

• Collect customer contact information
• Send email communications to their customer list

Business Users represent and warrant that their use of the Service complies with applicable laws, including CAN-SPAM and other marketing and privacy regulations.

4. Unsubscribe and Opt-Out

• All promotional emails sent through the Service include an unsubscribe link allowing recipients to opt out of future communications.
• We honor opt-out requests in accordance with applicable law.
• End customers who wish to have their data removed from a Business User's loyalty program should contact the relevant business directly.

5. Third-Party Service Providers

We use trusted third-party service providers to operate our platform:

• Clerk — authentication and user account management
• Stripe — payment processing
• Resend — email delivery infrastructure
• OpenAI — AI-generated response assistance
• Supabase — database and backend services
• Vercel — hosting and deployment
• Meta (Facebook Pixel) — marketing analytics
• Inngest — background job processing and workflow automation

These providers process information only as necessary to provide services to us and are contractually obligated to safeguard data.

We do not sell, rent, or share customer data with third parties for their own marketing purposes.

6. Data Retention

We retain Business User account information for as long as the account remains active or as necessary to provide the Service.

Customer data is retained in accordance with the Business User's account settings and applicable contractual obligations, unless deletion is requested or required by law.

7. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction.

However, no method of transmission over the internet is completely secure.

8. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access personal information
• Correct inaccurate information
• Request deletion
• Object to or restrict certain processing

Requests may be submitted to: nile@evolvereview.com

If you are an end customer whose information was collected through a Business User's loyalty program, please direct your request to the relevant business. We will assist in responding as required by law.

9. International Data Transfers

Information may be processed and stored in the United States or other jurisdictions where our service providers operate.

By using the Service, you acknowledge that your information may be transferred to and processed in countries outside your own.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy periodically. The “Last Updated” date indicates when this Policy was most recently revised.

Continued use of the Service after changes constitutes acceptance of the updated Policy.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: nile@evolvereview.com