Privacy policy

• What we collect: your name, email, phone (if you give it), your business name and address, your club settings (logo, colors, prizes), and how you use the dashboard.
• Payment: your card is entered on Stripe's secure pages and stored by Stripe. We never see or store your card number. We keep your Stripe customer and subscription ids, your plan and its status, and invoice history through Stripe.
• Why: to run and bill your club, to send you your welcome packet, program reports and account notices, and to help you when you write in.

• When a guest joins a club we collect, on that club's behalf: phone number, name, birthday, email (optional), the plays and rewards on their account, and when and where they scanned a club QR code.
• We use it only to run that club: sign-in, one play per visit, prizes, redemptions, and the birthday, visit and reminder emails the club has turned on. Every program email has an unsubscribe link.
• The club owner can see their own members and rewards in the dashboard. Owners never see other clubs' data.
• We do not sell guest data, use it for our own advertising, or share it across clubs.

We use a small number of providers who process data for us under their own agreements: Stripe (payments), Supabase (database and file storage), Vercel (hosting), and Amazon Web Services (email delivery). We do not share data with anyone else except when the law requires it or to protect the service and its users.

The dashboard, staff portal and guest sign-in use a session cookie so you stay signed in. The site does not use advertising cookies or third-party trackers.

• A club's data is kept while the club is active and for at least 90 days after it closes, so it can come back. After that we may delete it. Owners can ask for earlier deletion.
• A guest can ask the club, or us, to delete their account. Write to mike@ohsweet-hospitality.com and we will handle it within 30 days.
• Billing records are kept as long as tax and accounting rules require.

The service is for businesses and for adult guests. Clubs require members to be at least 13, and we delete accounts we learn belong to younger children.

If we change this policy in a way that matters, we will email club owners before it takes effect. Questions go to mike@ohsweet-hospitality.com.