Privacy Policy

1. Who we are

Recenzio is a dashboard for small businesses that use NFC "tap to review" cards to collect Google reviews and track customer engagement. Recenzio is operated by [legal entity name — PFA/SRL registration pending], registered address [address], registration number [CUI/registration number]. For any privacy question, contact [contact email].

2. What we collect

• Account data: the email address and password you sign in with. Passwords are hashed by our authentication provider (Supabase Auth) — we never see or store your password in plain text.
• Business data: your business name and, if you connect one, your Google Business Profile place ID.
• Card data: the NFC cards linked to your account and the destination (Google review link, Instagram, or Facebook) each one currently points to.
• Tap data: when a customer taps one of your NFC cards, we log the time and, where available, whether the device was iOS or Android. We do not ask that customer to identify themselves, and we do not collect their name, email, or any other personal data at the point of tap.
• Review data: if you connect a Google Business Profile, we periodically fetch your business's public reviews (rating, review text, and posting date) from Google so they appear in your dashboard and trigger notifications.
• Billing data: if you subscribe, Stripe (our payment processor) handles your card details directly — we never see or store your full card number. We store only your Stripe customer/subscription identifiers, plan, and status.
• Demo & sales request data: if you fill in the "Get a Demo" or "Request a Quote" form, we store your name, company name, company email, phone number (if provided), and any message you include, along with the time you agreed to be contacted. This is only collected with your explicit consent at the point you submit the form.

3. Why we collect it

We use this data to operate the service you signed up for: showing you tap and review analytics, letting you change where your cards point, notifying you of new reviews, and billing your subscription. Demo and quote request data is used only to follow up about the request you submitted — to contact you about setting up a demo or preparing a quote — and for basic internal sales tracking (e.g. how many requests come from a given page). We do not sell your data, and we do not use it for advertising.

4. Who we share it with

We share data only with the service providers that make Recenzio work:

• Supabase — hosts our database and handles authentication.
• Stripe — processes subscription payments.
• Google — the source of the review data we display, via the Google Places API, limited to the business you've connected.

We do not sell or rent your data to anyone else.

5. Cookies

We use one cookie, set by Supabase Auth, to keep you signed in. It is strictly necessary for the dashboard to function and isn't used for tracking or advertising. We don't currently use analytics or marketing cookies; if that changes, this policy and the site will be updated accordingly.

6. How long we keep it

We keep your account and business data for as long as your account is active. If you close your account, we delete your data within [X days — to be finalized], except where we're legally required to keep billing records longer. Demo and quote request data is kept only for as long as needed to follow up with you, and is deleted if no account is opened within a reasonable period afterward.

7. Your rights

Under GDPR, you can ask us to access, correct, delete, or export your data, or object to how we use it. To make a request, contact [contact email]. We'll respond within the timeframe required by law.

8. Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page and, where required, notify you directly.