Privacy Policy

From café owners (at signup):

• Name, email, phone number
• Café name, description, logo, and other business details submitted during onboarding

From end customers (via the spin wheel, signup form, or in-café interactions):

• Name and phone number
• Birthday
• Favourite item / preferences
• Visit history (visit dates, frequency)
• Ratings and feedback
• Reward redemption history (rewards claimed, discount amount, bill amount, redemption date)

Brewloop does not knowingly collect payment card details, government ID numbers, or other sensitive financial/identity data. Billing and payments are handled by the café's own POS/payment systems, not Brewloop.

• To run the customer CRM and loyalty system for the café (tracking visits, rewards, preferences)
• To send automated messages on the café's behalf — welcome messages, birthday wishes, re-engagement nudges, reward confirmations — via WhatsApp Business (or Telegram during testing)
• To show the café owner their own dashboard: total members, visit activity, rewards redeemed, and similar summaries
• To operate, maintain, and improve the Brewloop platform

Each café's customer data is kept separate and is only visible to that café's own dashboard — café owners cannot see another café's customers.

Brewloop relies on trusted third-party service providers to operate the platform, and customer/owner data passes through them. These providers handle functions such as:

• Securely storing customer records and reward redemption data
• Managing café owner account login and authentication
• Hosting the Brewloop dashboard and website
• Collecting signup and offer-claim form submissions from end customers
• Sending automated customer messages on the café's behalf

These providers process data only as needed to deliver their service to Brewloop and follow their own privacy and security practices. Brewloop does not sell customer or café owner data to third parties, and does not share it for advertising purposes.

We may disclose data if required by law, legal process, or to protect Brewloop's rights, users, or the public.

We take reasonable steps to protect the data stored on Brewloop's behalf. However, Brewloop is an early-stage product provided "as is," and no online system can be guaranteed 100% secure. Café owners and customers should be aware of this when sharing information.

Customer and café data is kept for as long as the café's account is active, so the loyalty and re-engagement features can work correctly. If a café owner closes their account or requests deletion, Brewloop will remove or anonymize the associated data within a reasonable period, except where retention is required by law. See our Terms & Conditions for the specific retention window that applies after account cancellation.

The café owner is responsible for:

• Getting any consent required by law before collecting their customers' data through Brewloop (e.g. via the spin wheel or in-café signup)
• Complying with applicable consumer protection, marketing, and data protection laws in how they use Brewloop
• Complying with WhatsApp Business / Meta's messaging policies for any campaigns sent through Brewloop

Brewloop is not responsible for how a café owner collects consent from, or communicates with, their own customers outside of what Brewloop's tools do automatically.

An end customer who wants their data corrected or deleted can contact the café directly, or reach out to Brewloop at support@brewloop.co.in, and we'll coordinate with the relevant café to action the request.

Brewloop is not intended for knowingly collecting data from children. If you believe a child's data has been submitted without appropriate consent, contact us and we'll remove it.

We may update this Privacy Policy from time to time. Material changes will be communicated with at least 14 days' notice. Continued use of Brewloop after that period counts as acceptance of the updated Policy.

Questions about this Policy or your data can be sent to support@brewloop.co.in