Privacy Policy

Welcome to sbizz ("we," "our," or "us"). We provide a multi-tenant customer loyalty, digital membership pass, and merchant POS platform (the "Platform" or "Service"), accessible via our mobile applications and websites.

Your privacy is critically important to us. This Privacy Policy outlines what personal information we collect, how we use it, how it is protected, and your rights regarding your personal data in compliance with applicable data privacy laws, the Apple App Store Review Guidelines, and the Google Play Developer Program Policies.

1. Information We Collect

Depending on whether you use sbizz as a customer or as an authorized merchant staff member, we may collect the following categories of information:

• Account & Profile Information: When you register an account, we may collect your name, email address, telephone number, and authentication credentials.
• Loyalty & Pass Information: We store your unique digital pass identifier, accrued loyalty points, loyalty tier levels, and records of unlocked or redeemed coupons.
• Transaction & Visit Records: When a cashier scans your pass or you make an in-app transaction, we record the participating business name, checkout timestamp, services or items purchased, discount applied, and points awarded or deducted.
• Vehicle Information (Optional): If you participate in car wash programs that offer drive-thru license plate recognition or express check-in, you may optionally register your vehicle make, model, and license plate.
• Camera Permission: Our mobile app requests access to the device camera solely for cashiers and staff to scan customer QR passes at the point of sale. We never record, stream, or store video feeds or photographs from your camera.
• Location Information (Optional): With your explicit consent, we may access coarse or precise device location to display participating stores near you and compute distance. You can revoke location access at any time in your device settings.

2. How We Use Your Information

We use the data collected strictly to operate, maintain, and enhance the sbizz platform, including:

• Generating and cryptographically validating your digital member QR passes.
• Accurately tracking points, tier progression, and discount eligibility.
• Enabling merchant cashiers to confirm valid customer offers in real time.
• Sending important account security notifications and transactional receipts.
• Preventing fraudulent pass sharing and ensuring platform integrity.

3. Data Sharing & Third-Party Service Providers

We do not sell, rent, or trade your personal information to third parties or advertisers. We only share information with trusted infrastructure service providers who assist us in operating our platform under strict confidentiality agreements:

• Cloud & Database Hosting: Supabase (PostgreSQL) and Railway for encrypted database storage and API execution.
• Payment Processing: Stripe for secure payment handling (payment card details are handled directly by Stripe and never touch our servers).
• Transactional Email: Resend for delivering secure authentication links and receipts.

4. Data Security & Storage

All communications between our mobile apps, websites, and APIs are encrypted in transit using industry-standard Transport Layer Security (HTTPS / TLS 1.3). Digital member passes are cryptographically signed using JSON Web Tokens (JWT) to protect against counterfeiting. Data stored in our database is secured with Row Level Security (RLS) ensuring strict tenant isolation.

5. Your Rights & Data Retention

You have the right to access, inspect, download, or correct your personal information at any time.

We retain your information only as long as your account remains active or as needed to provide loyalty services. If you wish to delete your account and all associated personal data:

• Send an email to support@sbizz.com with the subject line "Account Deletion Request" from your registered email address.
• Upon verification, your profile, pass tokens, and identifiers will be permanently removed or anonymized within 30 days.

6. Children's Privacy

Our Service is not directed to individuals under the age of 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal information, please contact us immediately at support@sbizz.com.

7. Changes to this Privacy Policy

We may update this policy periodically to reflect improvements in our platform or legal requirements. When changes are made, the "Last Updated" date at the top of this document will be updated.

8. Contact Us

If you have questions, feedback, or privacy-related requests regarding this Privacy Policy, please contact our data protection team:

sbizz Support Team
Email: support@sbizz.com
Website: https://sbizz.com