Help center
Privacy and security: what a business sees
A business sees what it needs to do its job. Who the customer is, their phone and their activity at other businesses are not revealed to you, and your customer data is never shared with other businesses.
What you see about a customer
| You see | You don't see |
|---|---|
| A masked name: Maya A. For a private profile, AdsPog member. | Full name, phone, email |
| AdsPog level | AdsPog points balance |
| A customer number that exists only for your business | Offers, stamps and purchases at other businesses |
| Purchases, stamps, points and offers at your business | Scan history and location |
The customer number is different for every business, so two businesses can't merge their lists to find the same person. Phone and email exist only for customers you entered or imported yourself. Roles without the See contacts permission (marketing, analyst, viewer) see even those contacts masked.
How the card is protected
- The card's QR code contains no name, phone or user ID.
- The code keeps changing: every minute in the app, and after each use and every night in Wallet. A code read at one business doesn't work at another.
- The customer sees every use in the app and can freeze the card and get a new one if a use looks wrong.
- After 30 failed look-ups in 10 minutes at one business, the till pauses for a while.
In reports
- Audience reports hide groups of fewer than 5 people.
- A placement report doesn't show unique viewers below 5.
- Broadcast results show counts only, not who opened them.
Messages and consent
Business messages only go to customers who follow your business or joined through the join QR. A card scan is not consent. Push notifications are capped at one a day and three a week and aren't sent at night. A customer can stop a business's messages at any time. More: Who you can message.
Access, roles and audit
- Permissions are enforced on the server. A cashier sees only the till; other roles see what their permissions allow. Roles: Team and roles.
- Each team member can turn on two-step sign-in for their own account: 2FA.
- Contact exports, refunds, revoked stamps, deletions, role changes and billing changes are written to the audit log.
- All traffic goes over HTTPS and the database is backed up daily.
The full text on data processing is in the privacy policy. For questions, write to [email protected].