Legal
Privacy
Plain-language summary of how data is handled. This document describes the product’s behaviour and is not a substitute for the legal terms applicable in your market — have it reviewed by a lawyer before launch.
Who controls what
A café using Cafeity decides what customer information to collect and why. Cafeity processes that information on the café’s behalf and does not use it for its own marketing. Where required, a data processing agreement should be put in place between the café and Cafeity for the market you operate in.
What we collect from cafés
Account details for the people who sign in: email address, display name, role and the branches they are assigned to. We also record an audit trail of administrative actions — who changed a program, who added or disabled staff, who exported data.
What cafés collect from customers
The minimum is a first name. A café may additionally ask for a phone number, an email address or a birthday, and each of those is optional and configured per loyalty program. We encourage cafés to ask for as little as they will genuinely use.
Loyalty activity
Every stamp, reward and redemption is recorded with a timestamp, the branch, and the staff member who performed it. This ledger is what makes balances auditable and disputes resolvable; it is retained while the café’s account is active.
Isolation between cafés
Each café’s data is scoped to its own organisation and enforced at the database level, not merely filtered in the interface. One café cannot read, scan or export another café’s customers.
Export and deletion
Café owners can export their customer list as a CSV at any time and can permanently delete their organisation from the settings page. Deletion removes the café, its customers and its loyalty history; a record that a deletion occurred is retained outside the deleted data for accountability.
Cookies
We use a session cookie to keep signed-in staff authenticated. The public enrollment and card pages do not require a login and do not set advertising cookies.
Contact
Privacy questions and data requests: privacy@cafeity.com.