PRIVACY POLICY

Effective Date: January 1, 2026
Last Updated: January 1, 2026

BookAndReview, Inc. (BookAndReview, we, our, or us) respects your privacy and is committed to protecting personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website, use our software platform, hardware products, mobile experiences, or related services (collectively, the Services).

This policy applies to business owners, merchants, customers of merchants, website visitors, and any individual whose information is processed through BookAndReview.

By accessing or using the Services, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide Directly

We may collect information you provide directly to us, including:

Merchant and Account Information

• Business name, business address, and business category
• Owner or authorized user name
• Email address and phone number
• Login credentials and authentication data
• Billing information and subscription details
• Hardware order and shipping details

Customer and End-User Information

• Customer name (if provided)
• Phone number or email address used for check-in or feedback
• Review responses, ratings, comments, and feedback
• Reward participation and redemption history

Communications

• Messages sent to us via email, contact forms, or support channels
• Customer service interactions and support tickets

1.2 Information Collected Automatically

When you use the Services, we may automatically collect:

• IP address
• Device type, browser type, and operating system
• Date and time of access
• Pages viewed and actions taken
• Referring URLs
• Approximate location derived from IP address
• Cookies and similar tracking technologies

1.3 Information from Third Parties

We may receive information from third-party services, including:

• Payment processors for billing confirmation
• SMS and communication providers for message delivery status
• Analytics providers
• Google and other review platforms when users interact through our tools

2. How We Use Information

We use information for the following purposes:

• To provide, operate, and maintain the Services
• To create and manage merchant accounts
• To enable customer check-ins, feedback collection, and review requests
• To send transactional messages, service notifications, and reminders
• To deliver SMS or email communications on behalf of merchants
• To process payments and manage subscriptions
• To provide rewards, promotions, and loyalty features
• To improve product functionality, performance, and user experience
• To monitor usage, prevent fraud, and enforce policies
• To comply with legal obligations and regulations

3. SMS and Communication Privacy

BookAndReview facilitates SMS and email communications on behalf of merchants.

3.1 Consent and Opt-In

• Customers receive messages only after providing consent through check-in, QR/NFC interaction, or other compliant opt-in methods
• Merchants are responsible for ensuring proper consent collection in their business environment

3.2 Opt-Out

• All SMS messages include opt-out instructions such as replying STOP
• Opt-out requests are honored automatically and immediately

3.3 Message Content

• Messages may include review requests, feedback requests, rewards, promotions, or service notifications
• BookAndReview does not sell or reuse customer contact data for unrelated marketing

4. Cookies and Tracking Technologies

We use cookies, pixels, and similar technologies to:

• Enable core functionality
• Remember preferences
• Analyze usage and performance
• Improve security and reliability

You may control cookies through your browser settings. Disabling cookies may affect certain features of the Services.

5. How We Share Information

We do not sell personal information.

We may share information only in the following circumstances:

5.1 Service Providers

With trusted third-party vendors who perform services on our behalf, such as:

• Payment processing
• SMS and email delivery
• Cloud hosting and infrastructure
• Analytics and monitoring

These providers are contractually required to protect information and use it only for authorized purposes.

5.2 Merchants

Customer information collected through check-ins and feedback is shared with the merchant that collected it. Merchants control how they use their customer data within the platform.

5.3 Legal and Compliance

We may disclose information if required to do so by law, regulation, legal process, or governmental request.

5.4 Business Transfers

If BookAndReview is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

6. Data Ownership and Control

6.1 Merchant Data Ownership

Merchants own their customer data. BookAndReview acts as a data processor for customer information collected on behalf of merchants.

6.2 Access and Export

Merchants may access, export, and delete their data through the dashboard, subject to legal and contractual obligations.

7. Data Retention

We retain information only as long as necessary to:

• Provide the Services
• Fulfill contractual obligations
• Comply with legal requirements
• Resolve disputes and enforce agreements

Customer communication records may be retained for compliance, auditing, and dispute resolution purposes.

8. Data Security

We implement administrative, technical, and physical safeguards designed to protect information, including:

• Encrypted data transmission
• Access controls and role-based permissions
• Secure cloud infrastructure
• Monitoring and logging

No system is 100 percent secure. You use the Services at your own risk.

9. Your Privacy Rights

Depending on your location, you may have rights including:

• Right to access personal information
• Right to correct inaccurate information
• Right to request deletion
• Right to restrict or object to processing
• Right to data portability
• Right to opt out of certain data uses

Requests may be submitted using the contact information below. We may verify identity before fulfilling requests.

10. California Privacy Rights (CCPA/CPRA)

California residents have additional rights, including:

• Right to know what personal information is collected
• Right to request deletion
• Right to opt out of sale or sharing (we do not sell data)
• Right to non-discrimination for exercising privacy rights

11. International Data Transfers

If you access the Services from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where we operate. We take steps to ensure appropriate safeguards are in place.

12. Children’s Privacy

The Services are not intended for children under 13. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us to request deletion.

13. Third-Party Links and Services

The Services may contain links to third-party websites or platforms, including Google review pages. We are not responsible for the privacy practices of third parties.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date. Continued use of the Services constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

BookAndReview, Inc.
Massachusetts, United States
Website: https://bookandreview.com
Email: contact@bookandreview.com