Last updated: February 21, 2026
Consumer accounts: When you sign in with Google, we receive your name, email address, and profile picture. We store these to sync your favorites across devices.
Business owner accounts: When you register, we collect your name, email address, and optionally your phone number. If you sign in with Google, we also receive your Google profile picture.
Location data: If you grant permission, we use your browser's geolocation to sort venues by distance. Your location is processed client-side only and is never stored on our servers or transmitted to third parties.
Usage data: We collect anonymous engagement data (card views, direction clicks, website clicks, deal accuracy votes, issue reports) to provide venue analytics to business owners and improve data quality. We use Sentry for error monitoring to detect and fix technical issues. We use Vercel Analytics for general site performance metrics.
We use your information to: provide and maintain the Service; sync your favorites and preferences; process deal accuracy votes and issue reports; send transactional emails (claim approvals, trial notifications); provide venue engagement analytics to business owners; and improve the Service.
We do not sell your personal information. We share data only with: Supabase (database hosting); Vercel (hosting and analytics); Stripe (payment processing for business subscriptions); Google (authentication); Mapbox (mapping services); and Sentry (error monitoring). Each provider processes data according to their own privacy policy.
We use essential cookies for authentication sessions: savor_user_session (consumer sign-in, 30-day expiry) and savor_owner_session (business owner sign-in, 30-day expiry). These are HTTP-only, secure cookies used solely for authentication. We do not use third-party tracking cookies. We also use browser localStorage to store your filter preferences, recently viewed venues, and onboarding state — this data stays on your device and is never sent to our servers.
Consumer account data is retained as long as your account is active. Business owner data is retained for the duration of your account plus 90 days after deletion. Engagement analytics are aggregated and retained indefinitely. You may request account deletion at any time.
We use industry-standard security measures including HTTPS encryption, hashed passwords (bcrypt), Row Level Security on our database, and secure session management. Payment information is handled entirely by Stripe and never touches our servers.
You have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your account and associated data; and opt out of non-essential communications. You can manage your account data through the dashboard settings.
SAVOR is intended for users 21 years of age and older. We do not knowingly collect personal information from children under 13.
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated date. Continued use of the Service constitutes acceptance of the revised policy.