Privacy
SzokArt is the sole controller of guest data. A venue is not a controller of a guest database — there is none.
Cashiers never search by name. Rewards are confirmed with a short ticket. The Business API returns aggregates and code history (time, channel, status) only.
Who sees what
| Data | Who sees it | Controller |
|---|---|---|
| Guest e-mail / phone / Google | Guest + SzokArt support | SzokArt |
| Device id, stamps, which card | Guest + SzokArt (technical) | SzokArt |
| Venue aggregates (counts, histogram, rewards) | Owner / staff | SzokArt |
| Code history (time, channel, status) | Business | Operational, no identity |
| NIP, invoice e-mail, Stripe / Tpay | SzokArt + owner | SzokArt |
Minimisation
- Guest mode needs no e-mail.
- An account exists only if the guest wants it.
- Guest-to-account merge on request.
- Password reset, device merge and account deletion: SzokArt queue only.
- Venues never receive a guest list or a PII endpoint.
Full legal text (clause, retention, processors) before the 3-venue pilot. This is a product sketch, not a signed policy.