Privacy Policy

1. Information We Collect

From customers:

• Phone number (required — this is how you sign in and how we identify you)
• Name and email address (optional, added from your profile)
• Visit history, amount spent (when a business logs it), tier progress, and perks you've redeemed at each business you join
• Location (only if you grant permission in your browser, used to show nearby businesses and sort by distance — never collected without that permission)

From business owners:

• Name, email address, and optionally a phone number (used to sign in)
• Business details you provide: name, category, address, hours, photos

Collected automatically:

• A session cookie that keeps you signed in. Used only for authentication — not advertising or cross-site tracking.

2. How We Use Information

• To operate your loyalty membership: tracking visits, spend, and tier progress at each business you join
• To sign you in securely (one-time codes sent by text or email)
• To show you nearby participating businesses, if you've shared your location
• To let a business see and manage the customers enrolled in its own program (a business cannot see your activity at other businesses)
• To send account-related messages — sign-in codes, confirmation of a check-in or redemption. We do not send marketing text messages or emails without separate, explicit consent, and any such message will always include a way to opt out.

3. What We Don't Do

We do not sell your personal information to third parties, and we do not share your individual activity with a business you haven't joined. If this ever changes — for example, an anonymized or aggregated feature — we'll update this policy first and, where required by law, provide a way to opt out.

4. Text Messages

Signing in sends a one-time verification code by text message. Message and data rates may apply. These messages are transactional (verifying your identity), not marketing. If Commons ever offers optional marketing texts in the future, they will require your separate opt-in consent, and every message will include instructions to reply STOP to opt out at any time.

5. Who We Share Information With

• The business you join: that business can see your name (if provided), phone number, visit history, and redemption history with them — this is how the program works, similar to any loyalty card.
• Service providers who help us operate Commons: hosting and database providers, our SMS provider (for sign-in codes), our email provider (for sign-in links), and our AI provider (for features like AI-assisted reward setup). These providers only receive what's needed to perform their specific function.
• If required by law, or to protect the rights, safety, or property of Commons, our users, or the public.

6. Your Choices

• Leave any business's loyalty program at any time from that business's page — your visit history is retained in case you rejoin later.
• Update or remove your name and email from your profile at any time.
• Ask us to delete your account and associated data by contacting us below, subject to reasonable retention needs.

7. Children's Privacy

Commons is not directed at children under 13, and we do not knowingly collect information from anyone under 13.

8. Security

We use reasonable technical measures to protect your information, including encrypted connections and hashed/signed credentials. No system is completely secure, and we can't guarantee absolute security.

9. Changes to This Policy

We may update this policy as Commons changes. We'll update the date at the top, and for material changes, make a reasonable effort to notify you directly.

10. Contact Us

Questions about this policy or your data: hello@commonsrewards.com