Privacy Policy

1. What We Collect

For consumers

• Account info: email, display name, optional phone, password (encrypted)
• Preferences: email marketing opt-in, push notification choices, age affirmation
• Activity: deals you've viewed, claimed, and redeemed
• Technical: IP address (for security and abuse prevention), browser type, approximate location (derived from IP)
• Legal compliance: Terms of Service version + acceptance timestamp + IP

For merchants

• Same as above, plus:
• Business contact: name, email, phone, role at the business
• Payment info: handled entirely by Stripe — we never see or store card numbers
• Listing data: business hours, address, website, photos you upload, deals you publish

2. What We Don't Collect

• Your phone's contact list, photos, microphone, or camera
• Precise GPS location (we use IP-derived city, that's it)
• Social media browsing or third-party tracking data
• Anything from minors under 13 — we explicitly require age affirmation at signup

3. How We Use Your Data

• To run the service: log you in, show you deals, process redemptions, bill merchants
• To communicate: deal confirmation emails, password resets, billing notifications (transactional emails — you can't opt out of these without deleting your account)
• Marketing emails: only if you explicitly opt in. Default is off.
• Analytics: aggregate numbers (e.g., "1,200 deals claimed in March") to improve the platform. We don't share individual user data with analytics providers.
• Fraud prevention: IP and device data helps us flag claim abuse and protect merchants.

4. What Merchants See About Consumers

When a consumer redeems a deal, the merchant sees:

• The deal that was redeemed
• The redemption code
• The timestamp
• An anonymized identifier (so they can see if you're a repeat customer at their business)

Merchants do not see:

• Your email address
• Your name
• Your phone number
• Your other deal redemptions across the platform

5. Who We Share Data With

• Supabase — our database/auth provider. They host the data but don't access it for their own use.
• Stripe — for merchant billing only. They handle all payment information.
• Netlify — our hosting provider.
• Law enforcement — only when legally compelled (e.g., a valid subpoena).

We do not sell your data to anyone, ever. That's not our business model.

6. Cookies and Sessions

We use cookies for one thing: keeping you logged in. No advertising trackers, no third-party analytics cookies, no cross-site tracking. If you clear your cookies, you'll have to log in again — that's it.

7. Your Rights

You can, at any time:

• Access your data: see what we have about you from your account page
• Correct your data: edit it directly in your account
• Export your data: request a JSON export by emailing hello@citrussaver.com
• Delete your account: from your account settings, or by email — we process deletion requests within 30 days
• Opt out of marketing: unsubscribe link is in every marketing email

8. Data Retention

• Active accounts: we keep data as long as your account is active
• Deleted accounts: soft-deleted immediately (recoverable for 30 days), then permanently removed
• Notification logs: 90 days then auto-deleted
• Billing records: we retain for 7 years for tax/legal reasons (Florida law)
• Aggregate analytics: retained indefinitely in anonymized form

9. Security

We use industry-standard practices:

• HTTPS everywhere (TLS 1.2+)
• Passwords hashed with bcrypt
• Database-level row security so users can only see their own data
• Stripe handles all payment information (PCI-DSS Level 1 compliant)
• Daily backups of the database

That said: no system is unbreakable. If we ever experience a data breach affecting you, we'll notify you by email within 72 hours of discovering it.

10. Business Directory Data

The Citrus Saver maintains a directory of Citrus County businesses. Business listings on The Citrus Saver come from several sources:

• Direct submissions: Businesses that have claimed their listing and entered their own information.
• Public-facing business information: Names, addresses, phone numbers, and websites compiled from publicly accessible directories and listings.
• Manual entry: Listings added by our team based on public information about local businesses.

We treat business contact information (business name, address, phone, website, hours) as public business information, not personal data. However:

• If you are a business owner and don't want your business listed, email hello@citrussaver.com and we'll remove it within 48 hours.
• If your listing has incorrect information, email us and we'll fix it.
• If you're the verified owner, you can claim your listing to manage it directly.

We do not include personal contact information for individual employees, owners' home addresses, or any non-business-related personal data in directory listings.

11. Children's Privacy (COPPA)

The Citrus Saver is not intended for children under 13. We require age affirmation at signup and do not knowingly collect data from anyone under 13. If you believe a minor has created an account, email us at hello@citrussaver.com and we'll remove it.

12. International Users

The Citrus Saver is a Florida-based platform serving Citrus County, Florida. If you're visiting from outside the United States, your data is processed in the U.S. and stored on U.S.-based servers. By using the Service from outside the U.S., you consent to this transfer.

13. Changes to This Policy

When we update this policy, we'll bump the version, update the "Last updated" date, and notify users by email. Significant changes will require re-acceptance.

Questions or concerns about your data? Email hello@citrussaver.com. We answer every privacy request personally.