Privacy policy

Who is responsible for the data

The business that booked the appointment is responsible for its customers' data (name, phone number, appointment) — it decides who receives a message. Recenzo processes that data on the business's behalf, only so the messages can be sent.

Recenzo is responsible for the business account data (name, login email, settings).

What data we process

• Customers: name, email address and/or phone number, appointment date and time, proof of consent (the date and time, the version of the consent text and the business staff member who entered the appointment), message delivery status, and whether the review link was opened.
• Businesses and their staff: name, login email, business name, message settings and Google review link.
• Technical data needed to run the service, such as login and error logs.

Why and on what basis

We use customer data only to send an appointment confirmation, a reminder and one review request. The basis is the customer's consent, which the business collects at booking and which is recorded with every request.

We do not sell the data and do not use it for advertising.

How messages are delivered

Messages are sent by email through Resend. If a customer leaves only a phone number, they are sent as Viber Business messages through Infobip, and if the number can't be reached on Viber, an SMS message may be used as a fallback.

Who else processes data

• Resend — sending emails.
• Infobip — delivery of Viber and SMS messages.
• Supabase — data storage and user login.
• Vercel — application hosting.
• Upstash — scheduling messages for the right time.

These providers may process data outside Serbia, with appropriate safeguards. [LAWYER TO CONFIRM: legal basis for transfers outside Serbia under the Law on Personal Data Protection]

If a business that uses Recenzo processes health data about its customers (e.g. a clinic), legal advice on additional obligations is needed. [LAWYER]

Opting out and your rights

Every message contains an unsubscribe link. One click unsubscribes the customer from that one business's messages, with no login and no explanation — after that the business no longer sends messages to that person (neither by email nor by phone). A customer can also block the sender in Viber or contact the business.

You have the right to request access to your data, correction or deletion, and to withdraw consent. You can send a request to the business that messaged you, or to us using the contact below.

How long we keep data

We keep data while the business uses the service and for at most [N] days after it stops, or until deletion is requested. The phone number of an opted-out customer is kept on the opt-out list so messages don't start again.

Contact

• [PUN NAZIV FIRME]
• Address: [ADRESA]
• Tax ID (PIB): [PIB]
• Registration number (MB): [MB]
• Email: kontakt@recenzzo.com
• Phone: [TELEFON]