Privacy policy

How Vazagency collects, uses, and protects personal data across our website, dashboard, and the review/loyalty pages we build for businesses.

Effective September 28, 2026

Who we are

  • Vazagency (KVK 92699235), a Gappsy company, based in Maastricht, The Netherlands.
  • Questions about this policy or your data: contact@vazagency.com.

What we collect

  • From business owners: name, email, phone number, and business details you provide when signing up for the system or contacting us.
  • From a business's customers: only what a business chooses to collect through its own review/loyalty page — typically a phone number, used to track loyalty stamps and send push notifications on that business's behalf.
  • Usage data: pages visited, device/browser type, and approximate location, collected via standard analytics to understand how the site and dashboard are used.
  • Wallet pass data: the information shown on an Apple Wallet or Google Wallet pass (business name, stamp count, loyalty status) is generated by us and stored by Apple/Google on the customer's own device once added.

How we use it

  • To provide the system: create and run a business's review page, loyalty card, bookings, and push notifications.
  • To communicate: respond to support requests and send account-related messages.
  • To improve the product: understand usage patterns and fix problems.
  • We do not sell personal data to third parties.

Who we share it with

  • Supabase, our database and hosting provider, which stores account and business data on our behalf.
  • Apple and Google, when a customer adds a loyalty pass to Apple Wallet or Google Wallet.
  • Netlify, which hosts this website.
  • We share data with these providers only as needed to run the service — never for their own marketing purposes.

Data retention

  • Business account data is kept for as long as the account is active, plus a reasonable period afterward for legal and accounting purposes.
  • A business's customer data (e.g. phone numbers used for loyalty) is controlled by that business and is deleted when the business removes it or closes its account.

Your rights

  • Under GDPR, you can request access to, correction of, or deletion of your personal data at any time by emailing contact@vazagency.com.
  • If you're a customer of one of our business users and want your data removed, you can also contact that business directly — they control their own customer data.

Changes

  • We may update this policy as the product changes. Material changes will be reflected here with an updated effective date.