Privacy Policy
Last updated: December 11, 2025
1. Introduction
Bzz ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our queue management service. We are based in Ireland and comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Information We Collect
We collect the following types of information:
For Business Users:
- Email address (for account creation and authentication via magic link)
- Business name and logo
- Payment information (processed securely by Stripe)
- Subscription and billing history
For Queue Customers:
- Name (optional, for queue identification)
- Party size
- Device fingerprint (for queue position tracking)
- Push notification tokens (if notifications are enabled)
Automatically Collected:
- Browser type and version
- Device information
- IP address
- Pages visited and interactions
- Cookies and similar tracking technologies
3. How We Use Your Information
- Provide and maintain our queue management service
- Process payments and manage subscriptions
- Send real-time queue notifications
- Authenticate users via passwordless magic links
- Improve our service through analytics
- Provide customer support via live chat
- Send service-related communications
- Comply with legal obligations
4. Cookies and Consent Management
We use Silktide Consent Manager (an open-source cookie consent solution) to manage your cookie preferences. When you first visit our site, you will be asked to consent to different categories of cookies:
- Necessary cookies: Essential for the website to function. These cannot be disabled and include authentication and payment processing cookies.
- Preference cookies: Remember your settings and preferences, including live chat functionality (Tawk.to).
- Statistics cookies: Help us understand how visitors interact with our website through Google Analytics and Hotjar.
- Marketing cookies: Used to display relevant advertisements through Google AdSense.
You can change your cookie preferences at any time by clicking the cookie settings button or through your browser settings.
5. Third-Party Services
We use the following third-party services that may collect and process your data:
Supabase (Data Storage & Authentication)
Stores user accounts, business data, and queue information. Data is encrypted at rest and in transit.Privacy Policy
Stripe (Payment Processing)
Processes subscription payments securely. We do not store your full credit card details.Privacy Policy
Google Analytics (Website Analytics)
Collects anonymised data about website usage to help us improve our service.Privacy Policy
Google AdSense (Advertising)
May display personalised advertisements based on your browsing history.Privacy Policy
Hotjar (User Experience Analytics)
Records anonymised user sessions to help us understand how users interact with our service.Privacy Policy
Tawk.to (Live Chat Support)
Provides live chat functionality for customer support.Privacy Policy
6. Data Storage and Security
Your data is stored securely using Supabase infrastructure hosted in the EU. We implement industry-standard security measures including encryption at rest and in transit, secure authentication, and regular security audits. Access to personal data is restricted to authorised personnel only.
7. Push Notifications
With your explicit permission, we send push notifications to inform you about your queue status. These notifications are essential for the core functionality of our service. You can disable push notifications at any time through your browser or device settings.
8. Data Retention
We retain your personal data only for as long as necessary to provide our services and fulfil the purposes described in this policy. Business account data is retained for the duration of your subscription plus 30 days. Queue customer data is automatically deleted after 24 hours. Payment records are retained as required by law.
9. Your Rights (GDPR)
Under GDPR, you have the following rights:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Request limitation of data processing
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to processing of your personal data
- Right to Withdraw Consent: Withdraw consent at any time
To exercise any of these rights, please contact us at info@bzz-app.com
10. International Data Transfers
Some of our third-party service providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your personal data.
11. Children's Privacy
Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have collected data from a child, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email.
13. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at: info@bzz-app.com
You also have the right to lodge a complaint with the Irish Data Protection Commission if you believe your data protection rights have been violated.