Privacy Policy

1. Introduction

PraiseGuard("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at praiseguard.app and related services (collectively, the "Service").

By accessing or using the Service you agree to be bound by this policy. If you disagree with any part, please discontinue use immediately.

2. Information We Collect

2.1 Information You Provide

• Account information: name and email address provided through Google OAuth sign-in.
• Business information: business name, address, phone number, website, and Google Place ID entered during onboarding.
• Payment information: processed entirely by Lemon Squeezy — we receive only order confirmation data (order ID, customer ID). We never store your card details.
• Feedback and messages: content you enter when configuring review request templates.

2.2 Information Collected Automatically

• Usage data: pages visited, features used, and actions taken within the dashboard.
• Analytics events: QR code scans, review page views, review link clicks, and feedback submissions — including device type, browser, approximate geographic location (country and city), and referrer URL.
• Log data: IP addresses, browser type, operating system, and timestamps, stored in server logs for up to 30 days.
• Cookies: session cookies used solely for authentication (JWT). We do not use tracking or advertising cookies.

2.3 Customer Data You Process

When your customers interact with your PraiseGuard review page, they may optionally submit their name, email address, star rating, and written feedback. This data is stored on your behalf and is accessible only to you through your dashboard. You are the data controller for this customer data.

3. How We Use Your Information

• To create and maintain your account.
• To provide and operate the Service, including QR code generation, analytics, and review funnel features.
• To process payments and manage your business licenses via Lemon Squeezy webhooks.
• To send transactional emails (e.g. payment receipts) — we do not send marketing emails without your explicit consent.
• To monitor and improve the performance, security, and reliability of the Service.
• To comply with legal obligations.

4. Sharing of Information

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:

• Service providers: Supabase (database hosting), Vercel (hosting and edge functions), Lemon Squeezy (payment processing), Google (OAuth and Places API). Each provider processes data only as instructed and under their own privacy policies.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of our users.
• Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred. We will notify affected users beforehand.

5. Data Retention

• Account data is retained as long as your account is active.
• Analytics events are retained for 12 months, then aggregated and anonymised.
• Customer feedback is retained until you delete it from your dashboard or delete your account.
• Server logs are purged after 30 days.
• After account deletion, all personal data is removed within 30 days, except where retention is required by law.

6. Security

We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest via Supabase, HMAC-SHA256 webhook signature verification, and JWT-based session authentication. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but take every reasonable precaution.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Data portability — receive your data in a machine-readable format.

To exercise any of these rights, contact us at support@praiseguard.app. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Third-Party Links

The Service may contain links to third-party websites (e.g. Google My Business, Lemon Squeezy). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by email. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: