Splango is a rewards, customer messaging and online ordering platform for restaurants and other local businesses. It is operated by Splango 360 LLC ("Splango", "we", "us"). This policy explains what information we handle and why.
It covers two groups of people:
Businesses that use Splango ("merchants") and their owners and staff, including businesses that connect Splango to Clover through the Clover App Market.
Merchants' customers, whose information we handle on the merchant's behalf.
If you are a customer of a business that uses Splango: that business runs its own rewards program and decides how your information is used. Its privacy notice is linked from its rewards page and from its sign-up forms, and that notice is the one that applies to you. This policy describes our role behind it.
1. Information we collect about merchants
Account information: the names, email addresses and phone numbers of owners and staff who sign in. Passwords are stored only in hashed form.
Business details: business name, locations, addresses, phone numbers, website, hours and branding.
Carrier registration details: legal business name, EIN, business address and a contact person. US text-message carriers require these to register a business's messaging brand and campaign.
Content you add: menus, prices, images, rewards, promotions, email designs and settings.
Billing information: your plan, fees and message usage.
Technical information: server logs such as IP address, browser type, pages requested and error reports, used to run and secure the service.
2. Information we receive from Clover
When a merchant connects Splango to Clover, we access that merchant's Clover account with the permissions the merchant approves at installation. We use them only to provide Splango's features to that merchant:
Merchant information (merchant id and name), to link the Clover account to the right business.
Payments (amount, tax, tip, time, status, refunds and voids), to verify receipts that customers scan, to credit rewards points for purchases, and to reverse points when a sale is refunded or voided.
Orders and line items (item names and quantities), to credit points. For customers who are already members of the merchant's rewards program, we also record which items they bought, so the merchant can send offers based on past purchases.
The customer contact attached to an order (the phone number or email address a customer entered for a receipt), used only to find an existing member of that merchant's rewards program. If no member matches, we do not keep that phone number or email address.
Inventory (read and write), to send the merchant's Splango menu to Clover as categories, items and options. We never delete anything from a merchant's Clover inventory.
Orders (write), to place the merchant's online orders on the Clover till and print them in the kitchen.
Online payments, to take card payments for online orders through Clover's hosted card form. Card numbers are entered directly into Clover's form. Splango receives only a single-use token and never sees or stores card numbers.
Clover access tokens are stored encrypted. A merchant can disconnect Clover at any time; disconnecting deletes the tokens, and we stop accessing that Clover account. History already recorded in the merchant's Splango account (points credited, orders and purchases) stays there.
3. Information about merchants' customers
When a customer joins a merchant's rewards program, orders online, scans a receipt or checks in at the counter, we store on the merchant's behalf:
name, mobile number, email address and, if given, birthday (month and day only);
consent to receive texts or emails, recorded with the wording shown, the time and where it was given;
rewards activity: visits, points, rewards received and redeemed;
online orders placed with the merchant;
photos of receipts scanned for points (deleted after 90 days);
a log of the texts and emails sent, with their delivery status. The log keeps the recipient's number or address, not the message itself, and is deleted after 13 months.
Each merchant's customer records are kept separately. We do not combine them across merchants, and one merchant cannot see another's customers.
4. How we use information
To provide and operate Splango: rewards, the kiosk, online ordering, receipt scanning, messaging and the Clover features described above.
To send texts and emails on the merchant's instruction: sign-in codes, welcome messages, and promotions to customers who have consented.
To register a merchant's messaging brand and campaign with carriers and messaging providers on the merchant's behalf.
To bill merchants, provide support, and tell merchants about changes to the service.
To keep the service secure, including detecting duplicate or fraudulent receipt scans and abuse.
To comply with the law and with carrier rules for business messaging.
We do not sell personal information, and we do not use it for advertising. We do not share one merchant's customer information with any other merchant.
5. Service providers we use
We share information with the following providers only as needed to run Splango, under their terms:
DigitalOcean: hosting, storage and encrypted backups.
Twilio and Telnyx: sending and receiving text messages, and registering messaging brands and campaigns.
Our email delivery provider: sending emails.
Anthropic: AI features that read menus, receipt photos and brand images a merchant or customer uploads, and draft promotions from business data. Results are drafts or checks, reviewed by the merchant or verified before use.
Sentry: error monitoring. Names, phone numbers and email addresses are removed from error reports before they are sent.
Clover: for merchants who connect it, as described in section 2.
Web font services (such as Bunny Fonts or Google Fonts), when a merchant's design uses a web font. Your browser loads the font from that service.
We may also disclose information when the law requires it, or to protect the rights and safety of our users or the public.
6. Cookies
Splango uses only the cookies it needs to work: keeping people signed in, protecting forms against forgery, and keeping a paired counter tablet paired. We do not use advertising cookies or third-party analytics.
7. How long we keep information
Merchant account information and customer records are kept while the merchant's account is active, and merchants can delete customer records themselves at any time.
Receipt photos are deleted after 90 days. The message log is deleted after 13 months. When a customer record is deleted, their number is also removed from the message log.
When a merchant closes their account, we delete its information on request. Copies in our encrypted backups expire within 6 months.
8. Security
Splango is served over HTTPS. Passwords are hashed, and Clover access tokens are encrypted. Backups are encrypted before they leave our server. Access to production systems is limited to the people who run the service. No system is perfectly secure, but we work to protect the information we hold, and we will notify affected merchants of a breach as the law requires.
9. Your choices and rights
Merchants can view, correct and export their information, and can ask us to delete their account, by contacting us.
Customers can stop texts at any time by replying STOP, and can unsubscribe from emails with the link in each email. To see, correct or delete your information, contact the business whose rewards program you joined; you can also contact us and we will help that business respond.
Depending on where you live, you may have other rights under privacy law. Contact us and we will respond as the law requires.
10. Children
Splango is not directed to children under 13, and we do not knowingly collect information from them.
11. Changes to this policy
We may update this policy as Splango changes. The date at the top shows when it last changed. If a change materially affects how we use merchants' information, we will tell merchants by email or in the app before it takes effect.