Privacy Notice

Cinch Communications Inc. ("Cinch Communications", "we", "us") operates Cinchly, a review request and reputation platform. This notice explains what personal data we handle and why.

Our role

We are the data controller for personal data about our own account holders — the businesses and their staff who sign up for Cinchly. For the customer contact details a business uploads in order to send review requests, that business is the controller and we act as a processor on its behalf, handling the data only on its instructions.

What we collect and why

• Account data — name, work email, login credentials, business and location details, logo. Used to create and secure your account and provide the Service. Legal basis: performance of our contract with you.
• Customer contact data uploaded by a business — customer name, email address and mobile number. Used solely to send that business's review requests and record responses. Legal basis: our contract with the business, which is responsible for its own lawful basis for contacting its customers.
• Review and feedback content — star ratings, written feedback and issue categories submitted by a business's customers. Used to display feedback to that business and alert its managers.
• Support messages — the content of emails you send us. Used to answer you. Legal basis: legitimate interests in supporting our customers.
• Usage, device and log data — IP address, browser and device identifiers, pages viewed, timestamps, error reports. Used for security, fraud prevention, diagnosing faults and improving the product. Legal basis: legitimate interests.
• Integration data — where a business connects QuickBooks Online, the invoice and customer records needed to trigger a review request, plus encrypted connection credentials. Legal basis: performance of our contract.
• Marketing — if you opt in, we may email you product news. Legal basis: consent, withdrawable at any time.

Who we share data with

• Service providers / subprocessors — cloud hosting and database providers, email and SMS delivery providers, and error monitoring tooling, all bound by contract to protect the data.
• Merchant of Record — Paddle.com, which handles the sale of our product, subscription management, payments, tax compliance and invoicing.
• Integrations you enable — such as Intuit (QuickBooks Online), if you connect them.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law or to protect our legal rights.

We do not sell personal data.

International transfers

We are based in Canada and our providers may process data in Canada, the United States and the European Economic Area. Where data leaves your region we rely on appropriate safeguards, such as standard contractual clauses or adequacy decisions.

Retention

Account data is kept while your account is active and for up to 12 months afterwards, unless a longer period is required for tax or legal purposes. Customer contact data and feedback are kept for as long as the business's account is active, or until that business deletes them or asks us to. Log data is kept for up to 12 months. When data is no longer needed we delete or anonymise it.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. You may also complain to your local privacy regulator — in Canada, the Office of the Privacy Commissioner. Email support@cinchly.com and we will respond within one month. If your request relates to data a business uploaded about you, we will forward it to that business.

Security

We use appropriate technical and organisational measures, including encryption in transit and at rest, encrypted storage of integration credentials, row-level access controls that keep each business's and each location's data separate, and least-privilege access for our staff.

Cookies

We use strictly necessary cookies and similar storage to keep you signed in and to secure the Service; these cannot be turned off without breaking sign-in. We use a limited amount of analytics and error-reporting storage to understand product usage and diagnose faults. We do not use advertising cookies. You can clear or block cookies in your browser settings.

Contact

Cinch Communications Inc. — support@cinchly.com