Privacy Policy
Last updated October 14, 2026
AfterVisit helps businesses that use Square ask their customers for Google reviews. This policy explains what information we handle, why, and the choices you have. "We" means AfterVisit. "Business" means a company that connects its Square account to AfterVisit. "Customer" means someone who bought from or booked with that business.
Information we collect
From businesses
- Square account details: business and location names, addresses and time zones.
- Settings you choose in AfterVisit, such as your Google review link and when requests are sent.
- Billing details: subscriptions are handled by Stripe. We receive your subscription status and dates, never your full card number.
About customers, from the business's Square account
- First name, email address and phone number saved on the customer's Square profile.
- The fact and time of a completed appointment, paid invoice or sale. We do not collect what was purchased or how much was paid.
- Whether a review request was sent, whether its link was clicked, and any unsubscribe request.
AfterVisit's access to Square is read-only. We cannot change, charge or refund anything in a Square account.
How we use it
- To send each customer a review request email, and at most one reminder, on the business's behalf.
- To honor unsubscribes and avoid asking the same person more than once every 90 days.
- To show the business what was sent and clicked.
- To run billing, keep the service secure, and fix problems.
We do not sell personal information, use it for advertising, or send customers anything other than review requests for the business they visited.
Who we share it with
We use a small number of service providers to run AfterVisit, each only for the purpose listed:
- Square, to read visits and customer contact details.
- Resend, to deliver emails.
- Stripe, to process subscription payments.
- Vercel and Supabase, to host the app and store its data.
We may also disclose information if required by law.
Security
Data is sent over encrypted connections. Square access tokens are encrypted before they are stored, and access to our systems is limited.
How long we keep it
We keep information while a business uses AfterVisit. When a business disconnects AfterVisit from Square, we stop collecting new information right away. A business can ask us to delete its data, and its customers' data, at any time by emailing support@aftervisitapp.com. We complete deletion requests within 30 days.
Choices for customers
- Every email has an unsubscribe link. Once used, that business will not send you another request.
- To ask what information we hold about you, or to have it deleted, email support@aftervisitapp.com. You can also contact the business you visited, since they control their Square customer records.
Children
AfterVisit is meant for businesses and is not directed at children under 13.
Changes
If we change this policy, we will update the date above. If a change is significant, we will tell businesses by email first.
Contact
Questions: support@aftervisitapp.com