Customer data: what’s kept and who sees it

NextStamp keeps what’s needed to run a loyalty card and nothing more. This article explains what’s kept about your customers, who on your team can see it, and what happens when a customer leaves.

What NextStamp keeps about a customer

• Their account. Name and email, and a password stored only as a salted hash. Someone who signs in with Google has no NextStamp password.
• Their cards. For each card: stamps, rewards, gifts, corrections and when each happened, and at which outlet.
• Their choices. Whether they agreed to offer emails from each business, with the words they saw, and whether they added a card to Apple Wallet or Google Wallet and agreed to its alerts.
• Review taps. That they tapped a review button, counted once per outlet, platform and day. Never whether they wrote a review, or what it said.

A customer’s phone camera is only used on their phone to read codes. NextStamp doesn’t collect their location.

What your business sees

When a customer joins your card, they’re told they share their name and email with your business, beside your terms. Your business sees:

• their name (or “Unnamed customer”) and email
• when they joined and their last visit
• their cards with you, their stamps, rewards and history
• whether they accept email offers from you

You never see their password, their other businesses or their cards elsewhere.

Who on your team sees it

Owners and admins always can. Managers can unless you turn it off for them, and staff only if you turn it on. The setting is See customers and their history, per person, in Settings → Team. At the till, anyone working it sees the customer’s name and card while serving them. See look up a customer and adjust stamps.

What stays out of your exports

Insights shows numbers only. Its CSV download holds totals by day or month, with no names, emails or anything that identifies a customer.

What a QR code holds

Posters and customers’ cards carry a link with a random reference. There’s no name, email or stamp count inside. A customer’s card code opens their card only for them or for your team at the till.

When a customer removes your card

A customer can tap Remove from my cards at any time. The card closes and collects no more stamps, and their stamps and rewards are kept in case they come back. Your records still show their history with you.

When a customer deletes their account

Deleting a NextStamp account:

• signs them out everywhere, and the account can’t be used again
• deletes every card they hold, with every stamp, reward and gift on it
• deletes their name, email, consent choices and history from every business they joined
• takes them off any team they work on

They disappear from your customer list and its history. Your Insights keep their totals, such as stamps given last month, which name nobody; a customer who deleted their account no longer counts in any visit-rhythm group. Stamp requests are deleted 30 days after they were made. See delete your account or your business.

When you delete your business

Deleting your business erases everything it holds, customers included, within minutes. Your customers keep their NextStamp accounts and their cards from other businesses. See delete your account or your business.

If a customer asks about their data

Customers can change their name and password, switch offer emails off and delete their account themselves, from Account. For anything else, such as a copy of what’s held about them, they can email support@nextstamp.app. Point them to manage or delete your account.