Privacy Policy

01Introduction

This Privacy Policy explains how Wixnit ("we", "us", "our") collects, uses, shares and protects information across our website and our eleven connected apps — Shop, POS, Cashier, Order Flow, QR, Frontdesk, Staff, Deep Insight, Merge, Ledger and Places (together, the "Services").

Because a business may use one Wixnit app or several at once, this policy covers the whole platform. Where a specific app collects something unusual — like Staff's facial recognition, or Places' wallet — we call that out in its own section below.

02Information we collect

We collect information in three ways: what you give us directly, what we collect automatically, and what a business you interact with adds about you.

Information you provide

• Account details — name, email, phone number, business name, and password.
• Content you create — products listed in Shop, receipts logged in Ledger, messages sent through Merge, reviews left through QR, and listings on Places.
• Payment details when you subscribe to a paid plan or transact through POS, Cashier, or a Places booking.

Information collected automatically

• Device information — device type, operating system, browser, and IP address.
• Usage data — features used, pages visited, and timestamps of activity.
• Approximate or precise location, where an app's core function requires it (see "Location data" below).

Information added by a business you interact with

If a business uses Wixnit Staff, Frontdesk, or QR, they may record your attendance, stay, or order details as part of running their operations. That business is responsible for how it collects and uses this information about you, consistent with this policy and their own obligations to you.

03How we use your information

We use the information we collect to:

• Provide, maintain and improve the Services, including keeping data in sync between the Wixnit apps a business has connected.
• Process transactions and send related confirmations, receipts and reminders.
• Verify attendance and identity where Staff's verified sign-in features are enabled.
• Detect and prevent fraud, including the short-stay resale checks built into QR and Frontdesk.
• Personalize recommendations in Places and condense reports in Deep Insight.
• Provide customer support and respond to requests.
• Communicate service updates, security notices, and — only with your consent — product news.

04How data moves between Wixnit apps

Wixnit's apps are designed to share data only where a business has actually connected them. For example, a sale recorded in Shop or POS can post automatically to Ledger, and attendance recorded in Staff can roll up into Deep Insight — but only for the apps that account has chosen to use together.

You can review which apps are connected to a given account from its settings, and disconnecting an app stops new data from flowing to it going forward.

05Payment and financial information

Card and bank details entered into POS, Cashier, Ledger, or a Places wallet are processed by PCI-compliant third-party payment processors. Wixnit does not store full card numbers on its own servers.

We do store transaction records — amounts, timestamps, and the parties involved — as part of providing receipts, reconciliation, and the reports shown in Ledger and Deep Insight.

06Biometric and verification data (Wixnit Staff)

Wixnit Staff offers facial recognition and liveness checks as optional sign-in methods, alongside geofencing, Bluetooth, Wi-Fi and kiosk sign-in. Facial recognition data is biometric information and is treated with additional care.

• Facial recognition templates are used only to verify sign-in and are not used for any other purpose.
• A business enabling these features for its staff is responsible for obtaining any consent required under applicable law before an employee's biometric data is collected.
• An employee can request that their business delete their biometric data from Wixnit Staff at any time, subject to that business's own record-keeping obligations.

07Location data

Some features cannot work without location data: Staff's geofenced sign-in confirms a team member is on-site, and Places uses your location to show nearby hangouts, events and venues. Where an app requests precise location, you can decline and use the rest of the Services without it, though the specific location-based feature may not function.

08Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences like your light or dark theme choice, and understand how the Services are used so we can improve them. You can control cookies through your browser settings; blocking some cookies may affect how the Services function.

09How we share information

We do not sell your personal information. We share it only:

• With service providers who help us operate the Services, such as payment processors and cloud hosting providers, under confidentiality obligations.
• With the business you interact with, where an app's core function requires it — for example, a hotel using Frontdesk needs to see your check-in record.
• When required by law, or to protect the rights, safety, or property of Wixnit, our users, or the public.
• As part of a merger, acquisition, or sale of assets, with notice to affected users.

10Data retention

We retain information for as long as your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Financial and transaction records are typically retained longer to meet accounting and tax requirements.

11Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can exercise most of these rights directly from your account settings, or by contacting us using the details below.

If a business, rather than Wixnit, controls the data in question — for example, attendance records held by your employer in Staff — we will direct your request to them where required.

12Data security

We use encryption in transit and at rest, access controls, and regular security reviews to protect information on the Services. No system is completely secure, and we encourage you to use a strong, unique password and enable any additional account protection we offer.

13Children's privacy

The Services are not directed to children under 16, and we do not knowingly collect personal information from them. Wixnit Places is intended for users old enough to independently enter into bookings and payments in their jurisdiction. If we learn we've collected information from a child without appropriate consent, we will delete it.

14International data transfers

Wixnit operates across multiple countries, and information may be transferred to and processed in countries other than your own. Where required, we put safeguards in place — such as standard contractual clauses — to protect information transferred internationally.

15Changes to this policy

We may update this policy as the Services evolve. If we make material changes, we'll notify you through the Services or by email before the change takes effect. The "last updated" date at the top of this page always reflects the most recent version.

16Contact us

If you have questions about this policy or want to exercise a privacy right, reach us at privacy@wixnit.com or through our contact page.