Privacy Policy
Last updated 29 August 2026
This policy explains what information Cirqwit SARLAU (“Prizz”, “we”, “us”) collects when you use the Prizz website and application, how that information is used and shared, and the choices available to you. It applies both to the businesses that hold accounts with us and to the reviewers whose Google reviews are displayed within the service.
1. Who we are
Cirqwit SARLAU, RUE AGUELMANE SIDI AALI, AGDAL, IMM 43 APPT 26, Rabat, Morocco, is responsible for the information described in this policy. Questions and requests about privacy should be sent to privacy@prizz.io.
2. Information we collect
Information you provide.
- Account information. Your email address and a password, which is stored only in hashed form and is never held or logged in a form we can read.
- Business information. The public Google Maps link for each business you add, and the identifier that link resolves to.
- Content and settings. Any logo or background image you upload, together with the colours, layout and other presentation choices you make. These describe how your posts look rather than who you are, and we treat them as your content.
- Notification preferences. If you turn on browser notifications, the endpoint and keys your browser issues so that we can send them.
Information collected automatically.
- Log information. When you use the service our servers record the network address the request came from, the page requested, the response, and an identifier for the request. These records are kept for about a week and are then overwritten.
- Subscription information. Your plan, and identifiers that connect your account to your subscription with our payment provider. We do not receive or store your card details.
- Usage records. A record of each post you share or download, which is how a free plan’s monthly allowance is counted.
Information from your public Google listing.
- When you add a business, we retrieve the reviews published on its public Google listing: the reviewer’s display name, the star rating, the text of the review and the date it was posted, together with identifiers that let us recognise the same review on a later retrieval rather than duplicating it.
We do not store reviewer profile photos and never have. We do not buy personal information, and we do not sell or share it for advertising.
3. How we use information
We use the information described above to:
- provide the service, and create and maintain your account;
- retrieve and display the reviews of the businesses you add, and render the ones you choose as images;
- send you messages the service depends on — confirming your address, resetting your password, and notifying you of new reviews where you have asked for that;
- take payment, and keep the billing records the law requires us to keep;
- keep the service secure and available, prevent abuse, and enforce our Terms of Service;
- respond to you when you contact us.
We do not use your information to make decisions about you by automated means, and we do not build profiles of you.
4. Reviews and the people who wrote them
This section is for you if you did not create a Prizz account and are reading this because a review you wrote is held on our systems.
When a business adds its Google listing to Prizz, we retrieve the reviews published on that listing and store a copy: the display name you chose, your rating, the text of your review and its date. The business can then see its reviews in one place and render one of them as an image to share. We reproduce what you wrote without alteration, we identify it as a Google review, and we hold nothing beyond what is needed to display it — your photograph in particular is never stored.
You can ask us to remove your review from Prizz. Write to privacy@prizz.io with a link to the review or the name of the business it concerns. We will delete our copy and prevent it from being retrieved again. You do not need to give a reason, there is no charge, and we will act within 30 days and usually much sooner. Removing our copy does not affect the review on Google, which is not ours to change.
5. How we share information
We do not sell your information. We share it only with the service providers below, and only for the purpose shown against each:
| Provider | Purpose |
|---|---|
| Vultr Holdings Corporation | Servers and storage |
| Resend | Sending account email |
| Polar Software Inc. | Payments, as merchant of record |
| SerpApi | Retrieving public Google review pages |
Each of these providers publishes its own privacy policy, which governs how it handles the information it processes. Read theirs if you want to know more about any of them than this policy tells you.
The service loads no resources from anyone else’s servers. Fonts and every other asset are served from our own infrastructure, so opening a page on Prizz tells nobody but us that you did.
We may also disclose information where we are required to do so by law, or where it is necessary to protect our rights or the safety of others. Where we are legally permitted to tell you about such a disclosure, we will.
6. Where we process information
Our servers are in the United States. That is where we store and process the information described in this policy.
The providers listed in section 5 handle information in the course of providing their services to us. Where each of them processes it, and how, is governed by their own terms and privacy policies rather than by this one.
7. Cookies
Prizz sets three cookies, all of which are necessary for it to work. None of them is used to track you, and we run no analytics and no advertising:
- one that keeps you signed in, which expires after 30 days;
- one that prevents another website from submitting forms as you;
- one that remembers which of your businesses you were last looking at.
You can clear or block them in your browser, though signing in will not work without the first two.
8. How long we keep information
- Your account. For as long as it is open. When you close it, access ends immediately and the records are deleted within 30 days.
- Your posting history. The date of each post, and the address it is counted against, for the rest of that calendar month and 30 days after it. This is what stops a monthly allowance being reset by closing an account and opening another.
- Billing records. For as long as tax law requires, which is generally several years.
- Reviews. Refreshed each time we retrieve them, deleted when the business is removed, and deleted on a reviewer’s request.
- Email links. Password reset links expire after an hour and confirmation links after a day; used ones are deleted daily.
- Server logs. About a week.
- Backups. 30 days. Information you delete remains in a backup until that backup is discarded.
9. Your choices and your rights
You can review and change most of what we hold from the Settings screen: your email address, your password, your businesses, your notification preferences, and the images you have uploaded. Closing your account from the same screen deletes it, as described above.
You may also ask us for a copy of the information we hold about you, to correct it, or to delete it. Write to privacy@prizz.io. We will respond within 30 days. There is no charge and you do not need to give a reason. Depending on where you live you may have further rights over your information, and we will honour any that apply to you.
10. If you are in California
You have the right to know what personal information we collect and why, to request a copy of it, to ask us to delete it, and not to be treated differently for exercising any of those rights. The categories we collect are identifiers, commercial information and internet activity, as described in section 2.
We do not sell personal information and we do not share it for cross-context behavioural advertising. We never have, so there is nothing to opt out of. Requests should be sent to privacy@prizz.io.
11. Security
Traffic between you and Prizz is encrypted. Passwords are stored only in hashed form and are never held or logged in a readable state, and the same is true of the links we send by email, so a copy of our database cannot be used to take over an account. Changing your password ends every other signed-in session.
Access to customer information is limited to the people who need it in order to answer a support request, and every such access is recorded. No service can promise perfect security, but if information is ever exposed in a way that puts you at risk, we will tell you without undue delay.
12. Children
Prizz is a tool for businesses and is not intended for anyone under 18. We do not knowingly collect information about children. If you believe we have, write to privacy@prizz.io and we will delete it.
13. Changes to this policy
We may update this policy from time to time. The version published here is the one in force, and the date at the top records when it last changed. Where a change materially affects how we use information we already hold, we will tell you by email before it takes effect.
14. Contact
Cirqwit SARLAU, RUE AGUELMANE SIDI AALI, AGDAL, IMM 43 APPT 26, Rabat, Morocco.
Privacy: privacy@prizz.io
Everything else: support@prizz.io