Privacy

The venue is responsible for your details. We hold them on that venue’s behalf and do nothing else with them.

What we collect: whatever you typed into the sign-up page. That is usually an email address, sometimes a name or a mobile number. We also record which marketing you agreed to, the exact wording you were shown, and when.

Your device: we store a scrambled version of your device’s network identifier so the venue can tell a returning customer from a new one. We do not keep the original, and the scrambled version cannot be turned back into it.

What we never do: sell your details, share them with other venues, or market to you ourselves. We do not log which websites you visit.

Welcome-page activity: we count anonymous page views and which venue links were shown or clicked. These counts do not use a guest ID, device ID or cookie. A random render reference prevents duplicate counting and is deleted after 24 hours; daily totals are kept for 90 days.

Marketing is optional. You get the Wi-Fi whether or not you tick anything. Every message we send for a venue has an unsubscribe link that works immediately.

To see what a venue holds about you, correct it, or have it deleted, contact the venue directly, or email us at privacy@margovy.com and we will pass it on.

You own your customer list. Export it whenever you want, on any plan. If you leave, you take it with you.

We hold your account details, your billing details, and your venue’s settings. We keep your guest Wi-Fi password encrypted because generating a join code requires it. We never ask for and never store the admin password for your router.

You are the data controller for your guests and we are your processor. In practice that means we act on your instructions and cannot decide to do something else with your customers’ details.

Connecting is optional. If you choose to, you sign in with Google and give Margovy permission to manage the Business Profile you pick. We never see your Google password.

We use that permission for three things only: to list the Business Profiles your Google account manages so you can choose the one for your venue, to read that profile’s reviews and your replies to them, and to post, change or remove a reply when you tell us to. If you switch on automatic replies, we also post replies to four and five star reviews for you. We do not change your listing’s name, address, hours, photos or anything else on it.

What we keep: the name, address and Google ID of the profile you chose; each review’s star rating, wording, date and the name its author shows on Google; your replies; and a key from Google that lets us carry on reading reviews without asking you to sign in each day. That key is stored encrypted.

What we do with it: show your reviews in your dashboard, work out what each one is about, and draft a reply for you to read. To draft replies and summaries we send the review’s wording to our AI service provider, which acts on our instructions. We do not sell this information, use it for advertising, or pass it to anyone else, and it is not used to train AI models.

Margovy’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect at any time from Reviews, under Settings, in your dashboard. When you do, we ask Google to cancel the key and we delete our copy of it. You can also remove Margovy’s access from your Google Account’s security settings. Reviews already brought in stay in your dashboard until you ask us to delete them; email privacy@margovy.com and we will.

We keep what you ask our sales chat, and its replies, so we can follow up if that is useful and so we can see what people want to know. If you leave an email or a phone number in the chat, we keep that too, only to get back to you. We keep sales chats for 12 months.

We use no third-party analytics and no advertising trackers on this website. If you open a personal link from one of our emails, we note that it was opened and whether you pressed its button, against that link only.

If you arrive from a campaign link or another website, your browser keeps a short note in that tab saying which one: the campaign’s label, the other website’s name (never the full address) and the page you landed on. We use it for one thing, to see which of our marketing brings people in. Close the tab and the note is gone. If you send us an enquiry or sign up before then, a copy of the note is saved with it. The note itself never holds your name, your email or anything you type.

On servers in the European Union, with our hosting and database provider. Venues sign in with Google or with a link we email them, and card details are held by our payment processor, never by us.

To run the service we share personal data with these categories of recipient, each acting on our instructions: an email delivery provider, a text message (SMS) delivery provider, a payment processor, a hosting and database provider, an AI service provider used to draft suggested replies and summaries and to answer questions in our chats, and a mapping and places data provider.

Guest records are kept while the venue is a customer. When an account closes we delete its guest data within 90 days unless the venue asks us to sooner.

privacy@margovy.com. If you are not happy with how we have handled something, you can complain to the Information Commissioner’s Office at ico.org.uk.