Privacy policy.
Effective October 23, 2026
What Loyvi does
Loyvi provides QR offers, digital coupons, guest records, and redemption tools for independent restaurants. Each restaurant chooses its offers and manages its guest relationship. Loyvi provides the software and processes the data needed to operate it.
Information we collect
Restaurant owners and staff provide account names, email addresses, and passwords, which are handled by our authentication system. Owners provide restaurant contact details, physical address, time zone, and offer terms. Guests provide an email address, an optional first name, and an optional choice to receive marketing. We record coupon claims, redemption status, staff-entered order amounts, and the time of relevant activity.
We use essential session cookies for login and security. When enabled, Cloudflare Turnstile checks offer claims for abuse. Request information, including network identifiers, may be processed by hosting and security providers. Loyvi’s claim rate limits use time-bucketed hashed identifiers rather than storing raw IP addresses in coupon records. Our authentication infrastructure may retain login IP addresses and access logs for account security.
Marketing is your choice
You can claim a coupon without agreeing to marketing. The marketing checkbox is not selected by default. Opting in creates a pending permission record; marketing eligibility requires separate email confirmation. Marketing permissions and opt-outs are specific to each restaurant. Campaigns exclude pending, unsubscribed, and suppressed contacts.
How we use and share information
We use information to provide accounts, issue and validate coupons, maintain tenant-separated restaurant records, support users, and prevent abuse. A restaurant can access its own guest and redemption records. Staff access is limited to their restaurant’s redemption workflow.
Service providers include Vercel for hosting, Neon for database storage, Cloudflare for security, Resend for email, and GitHub Actions for scheduling. AI writing sends the restaurant name, cuisine, approved offer, and writing purpose to DeepSeek; guest email lists are not sent for drafting. Providers may process data outside your country. We do not sell guest email lists or share one restaurant’s marketing audience with another. Google sign-in shares your name, email address, and profile image with Loyvi when you choose it. We do not request access to Gmail or Google Drive.
Retention, access, and deletion
We keep account and restaurant records while needed to provide the service, resolve disputes, maintain security, and meet applicable obligations. Expired coupons may remain in restaurant reporting. To request access, correction, account closure, or deletion of guest information, use our contact form. Include the restaurant name and the email associated with the record so we can verify the request. We may need to retain limited security, audit, or transaction information where appropriate.
Children and updates
Loyvi’s business accounts are intended for adults operating restaurants. Guest offers are not directed at children under 13. Please contact us if you believe a child has provided information. We may update this policy as the service evolves, with the effective date shown above.
Questions
Contact Loyvi through the support form for privacy questions or data requests.