Privacy and your choices
Visits and feedback
We record the card and location visited, the time, and whether you chose to copy text or open Google. Visit activity is retained for 90 days.
When you submit feedback, we save your rating, the text you wrote, and any name or contact details you provide. Submitted feedback is retained for 90 days. Opening the direct Google link does not submit feedback to us.
Google reviews
You can choose to write on Google at any rating. We do not publish reviews for you, require positive ratings, or award loyalty stamps for reviews. Copying replaces your clipboard contents. If copying is blocked, you can copy manually or continue without copying.
Live Google Business Profile reviews are fetched when requested and are not stored in our review database. Business account owners can revoke the workspace's Google authorization in Settings.
Loyalty passes
Loyalty enrollment is independent of reviews. We store your pass name, optional contact details, membership code, balance, and staff-confirmed stamp and redemption records. Pass information expires after 365 days without a pass change. Staff transaction and security audit records are retained for up to 365 days.
Keep your pass link private: anyone with that link can view your pass. An email address alone does not grant access to an existing pass.
If you save a pass to Google Wallet, we send its name, membership code and balance to Google and keep the saved pass updated. Apple Wallet devices can register for updates; we retain device-registration information and protected delivery tokens until the registration or pass is removed. Wallet providers apply their own privacy terms.
Accounts, cookies and protection
We store business account details, workspace memberships, business configuration and security events. Google sign-in uses a verified Google identity; existing accounts must explicitly link it. First-party cookies maintain sign-in, form protection, visits and your loyalty session. Abuse controls store short-lived protected identifiers rather than raw network addresses.
Access and deletion
Contact the business named on your card or your workspace administrator for access, correction or deletion requests. Backups have a separate operator-approved expiry policy, and deleted information must not be restored to active use inadvertently.