Privacy Policy

Tenvio is a customer retention and loyalty service for local businesses. A business signs up for Tenvio, and its customers join that business's loyalty program — usually by scanning a QR code at the counter. This policy explains what information Tenvio holds and what we do with it.

Two different groups of people appear here. A business is the merchant who has a Tenvio account. A customer is someone who joined that business's loyalty program. Tenvio processes customer information on behalf of the business.

Information we collect

Business account information

• Email address and a hashed password for each account holder
• Business name, location, time zone, industry, and language
• Loyalty program settings, rewards, and messaging preferences
• Billing status. Card details are handled by Stripe and are never stored by Tenvio.

Customer information

• Mobile phone number
• First name, if the customer provides one
• Birthday month and day, if the customer provides them. We do not collect a birth year.
• Email address, only if a business records one

Activity and loyalty data

• Visits, purchases, or check-ins recorded by the business
• Loyalty progress, rewards earned, and rewards redeemed
• Challenge progress where a business runs one

Messaging and consent records

• Whether a customer agreed to receive promotional text messages
• A dated record of each consent change, including opt-outs. These records are kept as a history and are not edited after the fact.
• Messages sent, their delivery status, and the reason they were sent

Connected services

A business may connect other services. Tenvio only receives data when a business chooses to connect one:

• Twilio delivers text messages and reports whether they were delivered.
• Stripe handles subscription payments for the business's own Tenvio subscription. Tenvio stores identifiers and subscription status, not card numbers.
• Square, if connected by the business, provides read-only payment, customer, and order records so the business can see purchase history alongside loyalty activity. Tenvio requests read access only and cannot take payments.
• Resend delivers account email such as password resets.

Support requests

When a business contacts us, we keep the request, our reply, and the account it relates to so we can follow up.

How we use information

• To operate the service and keep accounts secure
• To run the loyalty program: track progress, issue rewards, and show a business which customers have not returned
• To send messages a business asks us to send, subject to the consent rules below
• To answer support requests
• To bill businesses for their own subscription

We do not sell personal information, and we do not share customer contact information with third parties for their own marketing.

Text messaging and consent

This section describes how Tenvio handles SMS. It applies to every business using Tenvio.

• Phone numbers are collected to run the loyalty program — to identify a returning customer and, where the customer agreed, to send messages about that business.
• Agreeing to messages is not a condition of purchase. Nobody has to join a loyalty program to buy anything from a business. Joining a program through the QR sign-up form does currently require agreeing to receive its text messages, because the program is delivered by text. A business can also add a customer without that agreement, and Tenvio records such a customer as not opted in and sends them no promotional messages.
• Promotional messages require an explicit opt-in. A customer checks a box when joining. A phone number entered by staff alone does not count as consent, and Tenvio records such a customer as not opted in.
• Consent is never sold, rented, or shared with third parties for their marketing.
• Message frequency varies and depends on the business and on the customer's own activity.
• Message and data rates may apply.
• Reply STOP to any message to opt out. Tenvio also accepts STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT, REVOKE and OPTOUT, and the Spanish equivalents ALTO, PARAR, BAJA and CANCELAR. Opting out is recorded immediately and promotional messages stop.
• Reply HELP for help, or contact us at the address below.
• Re-joining is possible. A customer who opted out can opt in again by replying START to a business's own dedicated number, or by asking the business to enroll them again with a fresh opt-in.

Tenvio distinguishes promotional messages, which require an opt-in, from service messages directly related to activity the customer took, such as confirming a reward they earned. A customer who has opted out receives neither.

Security

Passwords are hashed and never stored in readable form. Access to a business's data requires signing in to that business's account, and each business's records are isolated from every other business at the database level. Connected-service credentials are encrypted. Traffic is served over HTTPS.

No service can promise perfect security, and we do not make that claim. If you believe an account has been accessed without permission, contact us.

Service providers

Tenvio runs on Railway and stores data in a PostgreSQL database. Backups are stored with Cloudflare R2. Messaging, payments, and email are handled by the providers named above. These providers process data so that Tenvio can operate; they are not permitted to use it for their own marketing.

How long we keep information

Account and loyalty records are kept while a business's account is active, so that customer progress and reward history remain intact. Consent records, including opt-outs, are kept as a durable history — deleting an opt-out would risk messaging someone who asked us to stop.

A business may ask us to delete its account data. A customer who wants their information removed should contact the business they joined, or contact us and we will work with that business.

Your choices

• Reply STOP to any message to stop promotional texts
• Ask the business to remove your details from their program
• Contact us using the address below

Children

Tenvio is for businesses and their adult customers. We do not knowingly collect information from children.

Contact

Questions about this policy: tenviosupport@gmail.com.

Changes

We will update this page when the service changes and will revise the date at the top. Continuing to use Tenvio after an update means the updated policy applies.