Privacy Policy

We collect different data depending on whether you're a Provider, a Customer, or a visitor using a free tool on our blog.

• Providers: name, email address, password (handled by Firebase Authentication — we never see or store your raw password), shop name and address, logo and card branding, stamp/reward configuration.
• Customers: email address, stamp count and visit history at the shop(s) you've joined, wallet-pass identifiers, and whether you've opted in to marketing emails from a specific shop.
• Blog tool users: if you ask one of our free tools (such as a calculator) to email you your results, we collect your email address, which tool you used, the page you used it on, the business type you selected, and whether you opted in to emails from Zilo. The figures you enter are included in that email but not saved in our database.

We use this data to:

• Create and secure your account, and authenticate you when you sign in.
• Operate the loyalty card itself — tracking stamps, visits, and rewards, and issuing/updating your Apple or Google Wallet pass.
• Send transactional emails: email verification, password resets, wallet-pass links, and reward notifications.
• Send marketing emails on a shop's behalf, only to Customers who have explicitly opted in, and only until they unsubscribe.
• Email blog tool users the results they asked for, and — only if they ticked the separate opt-in box — occasional tips and news about Zilo until they unsubscribe.
• Detect and fix bugs and outages (error monitoring), only if you've accepted this in the cookie banner — see our Cookie Policy.

Account and loyalty-card data: necessary to perform our contract with you (GDPR Art. 6(1)(b)).

Marketing emails to Customers: your explicit consent (Art. 6(1)(a)), withdrawable at any time via the unsubscribe link in every email.

Sending blog tool results: your request (Art. 6(1)(b)). Emails about Zilo to tool users: your consent (Art. 6(1)(a)), withdrawable at any time.

Error monitoring: our legitimate interest in keeping the service reliable (Art. 6(1)(f)), and only ever active with your consent regardless.

We use a small number of sub-processors to run Zilo. None of them are permitted to use your data for their own purposes.

• Google Firebase / Google Cloud — authentication and database hosting.
• Resend — transactional and marketing email delivery.
• Apple (Wallet / PassKit) and Google (Wallet API) — only the details needed to issue and update your wallet pass.
• Sentry — error monitoring, only once you've accepted it.
• Vercel — application hosting.

Some of the providers above may process data outside the EU/EEA (for example, in the United States). Where that happens, we rely on the EU Commission's Standard Contractual Clauses or an equivalent approved safeguard.

Provider account data is kept for as long as your account is active. Customer data is kept for as long as you're an active member of a shop's loyalty program. Blog tool user data is kept for up to 24 months after your last use of a tool, or until you ask us to delete it.

A Provider can permanently delete a Customer's record (stamps, visit history, and marketing consent) at any time from their dashboard. Note that neither Apple nor Google offers a way to remotely delete a wallet pass — an Apple pass stops updating once the underlying record is gone, and a Google Wallet pass is deactivated rather than removed from the holder's device.

Under the GDPR you have the right to access, correct, erase, or restrict processing of your data, to object to processing based on legitimate interest, to receive your data in a portable format, and to withdraw consent at any time without affecting past processing.

You can also lodge a complaint with the Finnish Office of the Data Protection Ombudsman (tietosuoja.fi) or your local supervisory authority.

Credentials are handled entirely by Firebase Authentication — we never see or store raw passwords. Data is scoped per shop, and a Provider can only ever access their own customers' data. All traffic is encrypted in transit (HTTPS).

Zilo is intended for use by businesses and their adult customers, and is not directed at children under 16.

We'll update the date at the top of this page if this policy changes, and post material changes here before they take effect.

Questions about this policy or your data: asiakaspalvelu@zilo.fi.