Privacy Notice

Promosify helps small businesses collect voluntary QR signups and send time-limited offers. This notice covers website visitors, business account holders, and people who subscribe to offers. Our initial launch is in the United States.

Promosify manages information needed to operate accounts, secure the platform, and provide support. The business you subscribe to decides which offers to send and receives your subscriber information. For those activities, Promosify processes subscriber data on that business’s behalf. The business may have its own privacy notice.

Business accounts: email address, authentication information, business name, industry, country, time zone, mailing address, banner content, and account activity. Authentication is handled by Firebase; we do not display passwords to businesses.

Subscribers: the email address or phone number you choose to provide, selected channel, business subscribed to, time zone where available, subscription status, verification records, and consent wording, version, and timestamps.

Operations and support: offer content, message provider identifiers and acceptance or failure records, security and rate-limit records, technical logs, and messages you send to support. Hosting and messaging providers may process IP addresses and device information to operate and secure their services.

When you use Google address search, Google processes your search text and technical information to return suggestions. You can enter your address manually instead. See the Google Privacy Policy.

We use information to create accounts, verify contact ownership, deliver requested offers, manage consent and opt-outs, provide support, prevent abuse, and meet legal obligations. Your contact details are not permission to send unrelated marketing.

Where a legal basis is required, processing may rely on your consent for marketing, performance of a service agreement for accounts, legal obligations, or legitimate interests in security and support, subject to applicable law. You can withdraw marketing consent at any time.

The business you join can access its subscriber list and manage offers. Service providers process data needed for hosting, authentication, storage, and delivery: Google/Firebase and Google Cloud, Resend for email, and Twilio for SMS. Providers may use subprocessors under their own service arrangements.

We do not sell or rent personal information, or share it for cross-context behavioral advertising. Mobile information, SMS opt-in records, and consent are not shared with third parties or affiliates for their own marketing or promotional purposes. They may be processed by providers solely to operate the service and by the business to which you explicitly subscribed.

Information may also be disclosed when lawfully required, to protect people or the service, or in a business transfer subject to applicable privacy obligations.

The current site uses storage needed for authentication and service operation. It does not initialize optional Firebase Analytics, advertising pixels, or cross-site advertising trackers. Essential storage may remain while you are signed in; blocking it can prevent account features from working.

If optional tracking is introduced, this notice and the available choices will be updated before it is activated, with consent where required. Browser privacy controls do not prevent necessary security processing or a subscription you explicitly request.

Active account and subscriber information is retained to provide the requested service. Retention after closure depends on the record’s purpose, outstanding requests, security needs, disputes, and legal requirements. Contact us for information about a particular record.

Opt-out suppression and evidence of consent may need to be retained after a contact is removed so that we can honor your choices and demonstrate what you agreed to. Expired verification codes cannot be used, but expiration is not itself a promise that all associated records have already been deleted.

Use the unsubscribe link in an email to stop that business’s email offers. For texts, reply STOP. A shared SMS sending service means STOP may stop texts from multiple participating businesses using that service. See the SMS Terms for details.

Email hello@promosify.com to request access, correction, deletion, or a copy of your information, or to appeal a privacy decision where applicable. You can also contact the business you joined. Tell us the business name, relevant channel, and request type. We may verify your identity or an authorized agent’s authority without asking for your password.

State privacy rights depend on your location and whether the relevant law applies. We respond within applicable legal deadlines and will explain any permitted exceptions. We do not discriminate against you for exercising applicable rights. You may complain to your state attorney general or other relevant authority.

We use access controls, contact verification, and provider security features to protect information. No service can guarantee absolute security. If you suspect misuse, contact hello@promosify.com.

Our providers may process information in the United States and other locations. The initial service is intended for US use. We will assess required contracts and transfer safeguards before expanding to other markets; this notice is not a promise of worldwide availability.

The service is not directed to children under 13 and is not designed to collect their information. Business accounts are for adults. If you believe a child under 13 supplied personal information, contact us so we can investigate and take appropriate action.

We will update the date on this notice when practices change and provide additional notice where required. A notice update does not create or expand marketing consent. Privacy questions and requests go to hello@promosify.com.