Privacy Policy
Promiyo helps local businesses get more Google reviews by sending their customers personal review requests. This policy explains what data we handle, why, and the choices you have. The short version: we never sell or rent your client lists, and we never share them for anyone else's own use.
1. Information we collect
Information you give us
When you book a call or apply for the pilot, we collect your name, email, phone number, business details, and the answers you give us (for example, how many customers you serve). If you contact us, we keep that message.
Customer lists from businesses we work with
To run a review campaign, a business gives us contact details for its own customers, such as first name, phone number or email, and the date of their visit. The business confirms it has the right to share this and to contact these customers. We use this list only to send that business's review requests.
Messages and opt-outs
We keep the review requests, reminders, and any replies, including opt-out words like "STOP", so we can honor requests to stop and prove consent if asked.
Payment information
The founding pilot is free. If you later pay for the service, payment is handled by a third-party payment processor (for example, Stripe). We do not store full card numbers.
Website and booking data
Our booking is powered by Cal.com, which collects the details you enter to schedule a call. Our site is served by our hosting provider, which processes basic technical data such as your IP address for security and delivery. We do not currently run advertising pixels. If we add analytics or advertising tools later, we will update this policy first.
2. How we use information
- To set up and run review campaigns, and to send review requests and reminders.
- To talk with you about onboarding, support, and billing.
- To keep consent and opt-out records so we follow the law.
- To keep our systems secure and prevent abuse.
- To meet our legal and tax obligations.
We do not make automated decisions that have a legal or similar significant effect on anyone.
3. Our legal bases (GDPR)
Because Promiyo is based in the Czech Republic, EU data-protection law (the GDPR) applies. We rely on:
- Contract — to provide the service to the businesses we work with.
- Consent — where required, including consent that the business confirms it holds to contact its clients.
- Legitimate interests — to run, secure, and improve our service, balanced against your rights.
- Legal obligation — to keep records we are required by law to keep.
4. Who we share data with
We use a small set of trusted providers, and only for the purposes below:
- Cal.com — call scheduling.
- Our hosting and email provider — running the website and business email.
- Google — review links point to your Google Business Profile.
- A messaging provider — to deliver text messages.
- A payment processor — to handle any paid subscription.
These providers are bound by contracts that limit them to the service they provide us. Client lists are never sold and never shared for any third party's own use.
5. International transfers
We are based in the Czech Republic. Some of our providers, and many of the businesses and clients we serve, are in the United States. This means data may be processed outside the EU. Where that happens, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses, and remain responsible for keeping your data protected.
6. Your rights
If you are in the EU (GDPR)
You can ask to access, correct, delete, or export your data, object to certain uses, or withdraw consent at any time. You also have the right to complain to your local data-protection authority. In the Czech Republic, that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).
If you are in the United States
Depending on your state (for example, California under the CCPA/CPRA), you may have the right to know what we collect, to delete it, to correct it, and to opt out of "sale" or "sharing". We do not sell client lists.
If you received a review request from us
Reply STOP to a text to stop texts, or reply to an email to stop emails. You can also ask us to delete your contact details by emailing hello@promiyo.com. We keep a short "do not contact" record so we can honor your choice.
To use any of these rights, email hello@promiyo.com. We will verify your request and respond within the time the law allows.
7. How long we keep data
- Client and billing records — for the length of our relationship, plus the period required by Czech accounting and tax law.
- Campaign contact lists — for the active campaign, then deleted or anonymized, except for short consent and opt-out records we keep to comply with anti-spam rules.
- Do-not-contact records — kept so we can keep honoring an opt-out.
We keep data longer only where the law requires it or where it is needed for a legal claim.
8. Security
We use HTTPS across the site, limit who can access data, rely on a trusted payment processor rather than storing card details ourselves, and apply access controls on our systems. If a data breach creates a real risk to you, we will notify the people affected and the relevant authority as the law requires.
9. Children
Our service is for businesses. It is not directed to children, and we do not knowingly collect their data.
10. Changes to this policy
If we make a material change, we will update the date above and, for active clients, let them know by email. Using new data for a new purpose will require consent first where the law says so.
11. Contact
Email hello@promiyo.com. Operator: Mikuláš Zach (IČO 24596329), Na Stádlech 84, 251 01 Popovičky, Czech Republic. See also our Terms of Service and Compliance page.
