Privacy Policy

Ventzon (“we,” “us,” “our”) operates a customer loyalty rewards platform that helps local businesses run loyalty programs. This includes our mobile apps and web-based check-in experience. This policy explains what data we collect, why we collect it, and how we protect it.

We collect the minimum data needed to operate the service:

• Email address — collected when you create an account or sign in via the iOS app or web platform. Used to identify your loyalty account and send account-related notifications.
• Name — optionally provided when signing in with Google. Used to personalize your experience.
• Date of birth — collected when you create an account, only to confirm you’re 13 or older. Used for the age gate and nothing else.
• Visit history — the number of check-ins per shop and the date of each visit. Used to track progress toward rewards.
• Phone number — optionally provided when checking in at a participating shop via QR code. Used to identify you across visits.
• 6-digit PIN — an optional PIN you set for quick re-check-ins on the web platform. Stored as a one-way hash (scrypt); we cannot read your PIN.
• Location — with your permission, your device’s approximate and precise coordinates are sent to our servers to work out how far away nearby places are and to center the map. They are used to answer that request and are not stored in our database. You can decline location and still browse.
• Push notification token — if you allow notifications, we store the device token your platform issues (APNs on iOS, FCM on Android) so we can deliver them. It is linked to your account and shared with our push provider, OneSignal. You can turn notifications off at any time.
• Content you post — the posts, photos, videos, and comments you create, plus the likes, saves, and follows you make. Posts you publish are public to other Ventzon users.

We do not collect or store your payment card details. Merchant subscription payments are handled entirely by Stripe.

You may create a Ventzon account with your email address and a password, or by signing in with Google or Apple via the app or website. You may also check in at a participating shop by scanning a QR code and entering your phone number.

• Push notifications — reward milestones and earned rewards delivered via push notification (app) or email.

You may delete your account at any time by contacting us at support@ventzon.com. Upon request, we will delete your account and associated data within 30 days.

You can disable push notifications at any time in your device’s Settings under Notifications. To unsubscribe from email notifications, use the unsubscribe link in any email or contact us.

• Authenticating your account and enabling app sign-in.
• Tracking visit progress toward each shop’s reward goal.
• Delivering check-in confirmations and reward notifications.
• Enabling merchants to send promotional messages to opted-in customers.
• Maintaining logs for delivery tracking and troubleshooting.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

A merchant sees summary figures for their own shop only — how many check-ins happened this week versus last, which day of the week is quietest, and how many customers have not been back in a while. These are counts and trends; a merchant cannot identify you from them.

When we generate a written insight or promotional copy for a merchant, those summary figures and the shop’s own name are sent to our AI provider, Anthropic. No customer names, email addresses, or phone numbers are included.

We do not sell or license your personal data, and we do not include it in anything a merchant sees.

We use the following processors to operate the platform. Each receives only what it needs to do its job, and none of them may use your data for their own marketing.

• Supabase — account authentication, database, and file storage. Data is encrypted at rest and in transit.
• Sentry — crash reporting and performance monitoring. Receives error details and the state of the page when an error happens, so we can diagnose it.
• OneSignal — push notification delivery. Receives your device token and the notification contents, solely to deliver them.
• Resend — transactional email. Receives the recipient address and the message we send.
• Google — for optional Sign in with Google authentication. If you choose it, your name and email address are shared with us by Google in accordance with Google’s Privacy Policy.
• Apple — for optional Sign in with Apple. If you choose it, Apple shares an account identifier and, on your first sign-in, your name and email address.
• Stripe — for processing merchant subscription payments. Ventzon does not handle or store merchant payment card data.
• Anthropic — generates merchant insights and promotional copy from the summary shop figures described above. No customer names, email addresses, or phone numbers are sent.
• CARTO and OpenStreetMap — map tiles and address lookup. These requests carry your IP address and the map area you are viewing, along with merchant addresses we look up.
• Upstash — rate limiting. Receives your IP address and the route being called, so we can block abuse.
• Vercel — hosting and delivery. Receives standard request information (including your IP address) as our infrastructure provider.

We retain your account data for as long as your account is active. When you delete your account from Settings, we remove your profile, posts, photos, comments, likes, and follows, and delete your stored media.

Email and push delivery logs are kept for up to 90 days for troubleshooting. Our hosting provider keeps standard server request logs, which can include the coordinates in a nearby or map request, for the period needed to run and secure the service.

Ventzon is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. We ask for your date of birth when you create an account to confirm you’re old enough to use Ventzon; if you tell us you’re under 13, we record only that the request was refused and do not keep the date you entered. If you believe a child has provided us personal information, please contact us and we will delete it promptly.

We protect your data with industry-standard measures including encrypted connections (TLS), hashed PINs (scrypt), and access-controlled databases. No system is perfectly secure, but we take reasonable steps to safeguard your information.

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of the service after changes constitutes acceptance of the revised policy.

Questions about this policy? Reach us at support@ventzon.com.