How we handle your data.

Customer feedback

Unshared review text and choices are saved privately in this browser on this device, so you can recover them after refreshing or reopening the page. Use “Discard local draft” to remove them; clearing this site’s browser data also removes them. Choosing “Share feedback” sends your selected stars, final review text, selected services, optional service detail, and any helper’s name to Scantzo’s database for that business’s private owner dashboard. Just copying a review does not send this feedback.

Automatic drafts are assembled in your browser from your star rating and service, with an optional staff name or personal note. Drafts are short, with an occasional emoji. This customer flow does not send those choices or your review text to an AI provider. Manual writing and copying also happen on your device.

A random feedback receipt and its version are kept with your local draft to prevent retries and updates from counting as extra ratings. Feedback can be updated through this receipt for 24 hours. Unshared text is not sent to the business. Shared feedback remains in the business’s database until the business is deleted or a removal request is fulfilled, and may remain in private backups. Owners can export feedback. Business and employee ratings use customer-selected stars, including every rating; they do not confirm that a review was published on Google.

For real business pages, the browser sends a SHA-256 fingerprint of each automatic draft and a random tab identifier to check for repeated wording. Fingerprints are kept for up to 90 days, with older records removed on subsequent checks for that business. No review text is sent with this check. An emoji sequence is stored for each business so symbols rotate. The example demo runs entirely in your tab.

Business information

Administrators and authorized owners store business names, categories, Google Maps links, one photo per business, employee names, and page status. Active business pages display this information to visitors who can access the site. Administrators should have permission to publish employee names and photos. Deleting a business removes its profile, employees, shared feedback, rating records, owner access, and active photo from Scantzo’s live storage.

Unsaved business profile, team and incentive edits are also saved on this device. Selected photos use the browser’s local database. These drafts are separate from the live business page until you save them. Passwords and sign-in forms are excluded. On shared devices, discard your drafts or clear this site’s browser data when you finish. Private browsing, blocked storage or clearing browser data can prevent recovery; the editor shows a warning if saving fails.

Replaced or deleted photos become unavailable through the business page when the profile change is saved. If photo storage is interrupted, queued file removal is retried on a later photo change or business deletion. Private backups may retain earlier records.

Business owner access

Scantzo administrators can grant a business owner access to their own business profile, services, photo, team, feedback and incentive settings. Employee feedback keeps the original staff identity when a person is renamed or removed from the current team. Account usernames and password hashes are stored, alongside hashed one-use setup tokens that expire after 24 hours. Owner sessions expire after eight hours. Resetting or revoking access invalidates earlier sessions and setup links. Deleting a business removes its owner account, sessions and draft fingerprints.

Security and technical records

Admin access uses a session cookie that expires after eight hours. Scantzo stores a hash of the session token, a CSRF token, and expiry times. Rate limiting stores hashed identifiers derived from a visitor’s IP address. Expired rate-limit records are cleaned up during subsequent requests. Math security questions expire after five minutes and are removed when used or during later challenge requests.

Security audit records contain event names, relevant business IDs, and timestamps, without passwords or review text. Records older than 90 days are removed during subsequent audit writes. The hosting provider may also keep operational records under its own policies.

Preferences and third parties

Your light or dark theme preference is stored locally in your browser. This app has no advertising trackers. Sharing feedback is recorded only when you choose the labelled sharing action; opening Google does not tell Scantzo whether you posted there. Fonts may be requested from Google Fonts. Math verification runs on Scantzo’s server. Hosting access may require ChatGPT sign-in depending on the site’s sharing settings.

Opening Google Maps, WhatsApp, or Telegram takes you to a separate service. Copying a review places it on your device clipboard. Those services and your device handle that information under their respective settings and policies.

Questions or removal requests

Contact Scantzo on WhatsApp or Telegram about business information or a data request. Avoid sending passwords or sensitive customer feedback.