Privacy Policy

Retick is a loyalty-card and review-link platform for small businesses. It is operated from Agartala, Tripura, India. In this policy, “Retick”, “we”, “us” and “our” mean the Retick service.

This policy covers business owners, their managers and staff, and customers who scan a shop QR code or sign in to view their card. It does not cover Google, the shop's own website, or any other third-party service you open from Retick.

For your Retick account, Retick handles the account data described below. For a shop's membership, visit and reward records, the shop controls its loyalty programme and Retick processes that data on the shop's behalf. The shop may have its own privacy notice, and you should read it alongside this one.

Account and sign-in data. When you sign in with Google, we receive your name, email address and Google account identifier. We store the identifier so the same Google account finds the same Retick account next time. We do not receive your Google password, Gmail, Drive, Contacts or Calendar data.

Customer phone number. Customers must add a phone number after Google sign-in before a card can be created. The phone number is used to identify the customer and keep one account per person. It is not shown publicly.

Business and staff data. Owners provide a business name, category, owner name, WhatsApp number and optionally an address. Staff members provide a name and email when accepting an invite. We also store the shop's reward settings, Google review link and staff roles.

Loyalty card data. We store which shop a customer belongs to, their stamp count, total visits, reward status, visit timestamps and the source of a visit (for example, a counter QR). We do not collect a customer's address, photo, location or date of birth.

Review clicks. When someone opens a shop's Google review link through Retick, we record the shop code, the time and a coarse device class (iOS, Android or other). Our application database does not store the customer's IP address or full user-agent string for these clicks.

Technical data. We use essential cookies to keep you signed in and to protect your session. Our hosting and database providers may process standard technical logs, such as request time and IP address, for security, reliability and abuse prevention.

Retick requests only the basic Google sign-in scopes: openid, email and profile. We use this data only to create and secure your Retick account, show your name and email in the product, and let you return to the same account.

We do not use Google user data for advertising, sell it, or share it with data brokers. We do not use it to train advertising profiles. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

• To sign you in and keep your session secure.
• To create and display loyalty cards, stamps and rewards.
• To count visits, apply daily caps and prevent duplicate visits.
• To show owners and authorised staff the information needed to run the counter and reward programme.
• To provide support, investigate abuse and fix errors.
• To meet legal, tax and security obligations.

Where required, we rely on your consent. We also use data to perform the service you asked for, to operate the platform securely, and to comply with applicable law. You can withdraw consent for non-essential uses, but some features may then stop working.

Your shop. The shop owner can see its customers' card and visit data. Managers may see the shop's customer and visit data where their role allows it. Counter staff get a narrow snapshot for running visits and rewards, not full table access.

Service providers. We use Supabase for authentication and database hosting, Vercel for application hosting, and Google for sign-in and for the review page you may choose to open. These providers process data to provide their services to us and are bound by their own terms and data protection obligations.

Legal and safety. We may disclose data if required by law, to protect someone's safety, to investigate fraud or abuse, or to enforce our rights. We do not sell personal data.

Some providers may process data outside India. Where that happens, we use appropriate contractual and technical safeguards.

Retick uses essential cookies for Google sign-in and to keep you signed in. We do not use advertising cookies or third-party analytics cookies on the customer card. Google may set its own cookies when you are on Google's sign-in or review pages; those are governed by Google's privacy policy.

We keep account and card data while your account is active. If you ask us to delete your account, we delete or anonymise the data we no longer need, unless we must keep a limited record for legal, tax, fraud-prevention or security reasons.

When a shop membership is deleted, identifying details are cleared and the record is permanently removed within seven days, except for limited backups and records we must retain by law. Review-click counts may be kept in aggregate form without identifying a person.

We use HTTPS, database row-level access rules, role-based dashboard access, short-lived visit and reward tokens, and hashed storage for staff invite tokens. No online service is completely secure, but we work to limit access and fix problems quickly.

You can ask for a copy of your personal data, correct inaccurate details, withdraw consent, or request deletion. Email privacy@retick.in with the Google email or phone number linked to your account. We may ask you to verify that you control the account before acting.

If your request is about a shop's own membership record, we may ask the shop to help us locate it. You can also contact the shop directly. If you are unhappy with our response, you can use the grievance contact below or the remedy available under applicable Indian law.

Retick is intended for business owners and their customers. It is not directed at children. If you are under 18, use Retick only with the consent of a parent or guardian. A business adding a child's details must have the authority and consent required by law.

We may update this policy as the product or the law changes. The “Last updated” date at the top will change. If a change is material, we will make it clear on this page or contact account holders where appropriate.

Questions, privacy requests and grievances can be sent to privacy@retick.in. You can also write to Retick, Agartala, Tripura, India.