Updated July, 2026
Updated July, 2026
Privacy policy
At Sently, your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services, including our website, kiosk systems, mobile application, messaging tools, and related applications (collectively, the "Services").
This policy applies both to the businesses that use Sently and to the customers who check in, sign up, or receive text messages at those businesses' kiosks. Where we act on a business's behalf to handle its customers' information, the business decides how that information is used and Sently processes it on the business's instructions.
This policy is designed to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), and applicable Ontario privacy standards. For text messaging to customers in the United States, we also support compliance with the Telephone Consumer Protection Act (TCPA). We follow Apple App Store guidelines as well.
At Sently, your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services, including our website, kiosk systems, mobile application, messaging tools, and related applications (collectively, the "Services").
This policy applies both to the businesses that use Sently and to the customers who check in, sign up, or receive text messages at those businesses' kiosks. Where we act on a business's behalf to handle its customers' information, the business decides how that information is used and Sently processes it on the business's instructions.
This policy is designed to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), and applicable Ontario privacy standards. For text messaging to customers in the United States, we also support compliance with the Telephone Consumer Protection Act (TCPA). We follow Apple App Store guidelines as well.
Information we collect
We collect information to provide and improve our services, including:
Personal details such as name, phone number, email address, and business information
Customer loyalty data submitted through kiosks or mobile app interactions, including visit history and reward redemption records
Account registration and onboarding details for business owners and administrators
Device and usage information such as IP address, device identifiers, operating system, browser type, and app interactions
Communication data including SMS messages sent through the platform, customer responses, and consent records
Camera data used solely for QR code scanning to redeem rewards — we do not store or transmit images captured by your camera
Crash and diagnostic data to help us identify and fix technical issues
We collect information to provide and improve our services, including:
Personal details such as name, phone number, email address, and business information
Customer loyalty data submitted through kiosks or mobile app interactions, including visit history and reward redemption records
Account registration and onboarding details for business owners and administrators
Device and usage information such as IP address, device identifiers, operating system, browser type, and app interactions
Communication data including SMS messages sent through the platform, customer responses, and consent records
Camera data used solely for QR code scanning to redeem rewards — we do not store or transmit images captured by your camera
Crash and diagnostic data to help us identify and fix technical issues
How we use your information
We use your information to operate and maintain the Sently platform, enable businesses to communicate with their customers, deliver SMS messages and loyalty campaigns, process reward earning and redemption via QR code, improve functionality and user experience, personalize branding and dashboard features, provide customer support, detect and prevent fraud or security issues, generate anonymized analytics to improve the platform, and comply with legal and regulatory requirements.
Text messages (SMS). When a customer signs up at a business's kiosk, they choose whether to receive text messages from that business, and their consent is recorded at that time. Messages are sent on behalf of the business, not by Sently directly. Customers can opt out at any time by replying STOP to any message, and message and data rates may apply. Our text messaging is designed to comply with Canada's Anti-Spam Legislation (CASL) and, for customers in the United States, the Telephone Consumer Protection Act (TCPA).
We use your information to operate and maintain the Sently platform, enable businesses to communicate with their customers, deliver SMS messages and loyalty campaigns, process reward earning and redemption via QR code, improve functionality and user experience, personalize branding and dashboard features, provide customer support, detect and prevent fraud or security issues, generate anonymized analytics to improve the platform, and comply with legal and regulatory requirements.
Text messages (SMS). When a customer signs up at a business's kiosk, they choose whether to receive text messages from that business, and their consent is recorded at that time. Messages are sent on behalf of the business, not by Sently directly. Customers can opt out at any time by replying STOP to any message, and message and data rates may apply. Our text messaging is designed to comply with Canada's Anti-Spam Legislation (CASL) and, for customers in the United States, the Telephone Consumer Protection Act (TCPA).
Third-party services
We use the following third-party services to operate the Sently platform. Each provider may collect and process data as described below. By using Sently, you acknowledge that your data may be transmitted to these services for the purposes stated.
Firebase (Google LLC)
We use Firebase for backend infrastructure, including:
Cloud Firestore — stores customer loyalty records, reward data, and business account information
Firebase Authentication — manages user sign-in and session security
Firebase Hosting — serves the Sently kiosk web interface
Firebase Cloud Functions — processes server-side logic including reward triggers and QR code generation
Firebase Cloud Messaging — delivers push notifications to your device using a device token; no message content is stored by Firebase
Firebase Analytics — collects pseudonymous usage data including app interactions, session length, and device identifiers to help us understand how the app is used. This data is not linked to your name or contact details, and is not used to track you across other companies' apps or websites.
Firebase Crashlytics — collects crash reports and diagnostic data including device model, OS version, and app state at the time of a crash
Firebase is operated by Google LLC and data may be processed in the United States. Privacy policy: https://firebase.google.com/support/privacy
Twilio Inc.
We use Twilio to deliver SMS messages on behalf of businesses using the platform. When a message is sent, your phone number is transmitted to Twilio for delivery purposes. Twilio does not use this data for advertising.
Privacy policy: https://www.twilio.com/en-us/legal/privacy
OpenAI
We use OpenAI's API to power AI-assisted features within the platform, such as message drafting and audience suggestions. When you use one of these features, the text of your prompt and relevant business context are sent to OpenAI to generate a response. We do not send customer phone numbers or full customer contact records to OpenAI. Under our API agreement, OpenAI does not use this data to train its models; OpenAI may retain API data for up to 30 days for abuse monitoring before deletion. Privacy policy: https://openai.com/policies/privacy-policy
Stripe
We use Stripe to process subscription payments and manage billing. When you subscribe, your payment card details are provided directly to Stripe and are never stored on Sently's servers. Stripe receives your name, email address, and payment information solely to process transactions, and does not use this data for advertising. Privacy policy: https://stripe.com/en-ca/privacy
We use the following third-party services to operate the Sently platform. Each provider may collect and process data as described below. By using Sently, you acknowledge that your data may be transmitted to these services for the purposes stated.
Firebase (Google LLC)
We use Firebase for backend infrastructure, including:
Cloud Firestore — stores customer loyalty records, reward data, and business account information
Firebase Authentication — manages user sign-in and session security
Firebase Hosting — serves the Sently kiosk web interface
Firebase Cloud Functions — processes server-side logic including reward triggers and QR code generation
Firebase Cloud Messaging — delivers push notifications to your device using a device token; no message content is stored by Firebase
Firebase Analytics — collects pseudonymous usage data including app interactions, session length, and device identifiers to help us understand how the app is used. This data is not linked to your name or contact details, and is not used to track you across other companies' apps or websites.
Firebase Crashlytics — collects crash reports and diagnostic data including device model, OS version, and app state at the time of a crash
Firebase is operated by Google LLC and data may be processed in the United States. Privacy policy: https://firebase.google.com/support/privacy
Twilio Inc.
We use Twilio to deliver SMS messages on behalf of businesses using the platform. When a message is sent, your phone number is transmitted to Twilio for delivery purposes. Twilio does not use this data for advertising.
Privacy policy: https://www.twilio.com/en-us/legal/privacy
OpenAI
We use OpenAI's API to power AI-assisted features within the platform, such as message drafting and audience suggestions. When you use one of these features, the text of your prompt and relevant business context are sent to OpenAI to generate a response. We do not send customer phone numbers or full customer contact records to OpenAI. Under our API agreement, OpenAI does not use this data to train its models; OpenAI may retain API data for up to 30 days for abuse monitoring before deletion. Privacy policy: https://openai.com/policies/privacy-policy
Stripe
We use Stripe to process subscription payments and manage billing. When you subscribe, your payment card details are provided directly to Stripe and are never stored on Sently's servers. Stripe receives your name, email address, and payment information solely to process transactions, and does not use this data for advertising. Privacy policy: https://stripe.com/en-ca/privacy
How we share your information
We do not sell your personal information. We only share it with the third-party service providers named above who help us operate the platform, with authorities when legally required, and with parties involved in a business transaction such as a merger or acquisition.
When a customer provides their information at a business's kiosk, that business decides how the information is used to communicate with and reward its own customers. Sently handles that information on the business's behalf and according to its instructions, and does not use one business's customer information for another business or for our own marketing.
We do not sell your personal information. We only share it with the third-party service providers named above who help us operate the platform, with authorities when legally required, and with parties involved in a business transaction such as a merger or acquisition.
When a customer provides their information at a business's kiosk, that business decides how the information is used to communicate with and reward its own customers. Sently handles that information on the business's behalf and according to its instructions, and does not use one business's customer information for another business or for our own marketing.
Camera and device permissions
Camera: The Sently mobile app requests access to your camera solely to scan QR codes when redeeming loyalty rewards. We do not capture, store, or transmit photos or video. Camera access is only active while the QR scanner is open.
Notifications: We may request permission to send push notifications about reward milestones, campaigns, or account activity. You can manage notification preferences in your device settings at any time.
Camera: The Sently mobile app requests access to your camera solely to scan QR codes when redeeming loyalty rewards. We do not capture, store, or transmit photos or video. Camera access is only active while the QR scanner is open.
Notifications: We may request permission to send push notifications about reward milestones, campaigns, or account activity. You can manage notification preferences in your device settings at any time.
Data storage and security
Your information may be stored on secure servers in Canada or other jurisdictions where our providers operate (including the United States via Firebase and Twilio). We retain personal information only as long as necessary to provide our services, fulfill the purposes outlined in this policy, and comply with legal obligations.
How long we keep your information. We retain business account information for as long as your account is active, and for 90 days after account closure. Customer loyalty records (visit history, reward redemptions) are retained for as long as the business's account is active, or until the customer requests deletion. SMS consent records are retained for three years after consent is withdrawn or the account is closed, as required to demonstrate compliance under CASL. Message delivery logs are retained for 12 months. Payment and billing records are retained for seven years to meet Canadian tax and accounting obligations. Crash and diagnostic data is retained for 90 days.
We use industry-standard safeguards including encryption in transit (TLS), Firestore security rules, and access controls. However, no system is completely secure.
Breach notification. If we become aware of a breach of security safeguards involving your personal information that creates a real risk of significant harm, we will report the breach to the Office of the Privacy Commissioner of Canada and notify affected individuals as soon as feasible, as required under PIPEDA. Where the affected information was held on behalf of a business using Sently, we will notify that business without undue delay so it can meet its own notification obligations.
Your information may be stored on secure servers in Canada or other jurisdictions where our providers operate (including the United States via Firebase and Twilio). We retain personal information only as long as necessary to provide our services, fulfill the purposes outlined in this policy, and comply with legal obligations.
How long we keep your information. We retain business account information for as long as your account is active, and for 90 days after account closure. Customer loyalty records (visit history, reward redemptions) are retained for as long as the business's account is active, or until the customer requests deletion. SMS consent records are retained for three years after consent is withdrawn or the account is closed, as required to demonstrate compliance under CASL. Message delivery logs are retained for 12 months. Payment and billing records are retained for seven years to meet Canadian tax and accounting obligations. Crash and diagnostic data is retained for 90 days.
We use industry-standard safeguards including encryption in transit (TLS), Firestore security rules, and access controls. However, no system is completely secure.
Breach notification. If we become aware of a breach of security safeguards involving your personal information that creates a real risk of significant harm, we will report the breach to the Office of the Privacy Commissioner of Canada and notify affected individuals as soon as feasible, as required under PIPEDA. Where the affected information was held on behalf of a business using Sently, we will notify that business without undue delay so it can meet its own notification obligations.
Your rights
You have the right to access, correct, or request deletion of your personal information, and to withdraw your consent to receiving text messages at any time. You may also file a complaint with the Office of the Privacy Commissioner of Canada.
If you are a customer of a business that uses Sently, these rights apply to you as well. You can stop receiving text messages at any time by replying STOP to any message, and you can request access to or deletion of your information by emailing help@sently.ca. Where the information is held on behalf of a business, we will work with that business to action your request.
You have the right to access, correct, or request deletion of your personal information, and to withdraw your consent to receiving text messages at any time. You may also file a complaint with the Office of the Privacy Commissioner of Canada.
If you are a customer of a business that uses Sently, these rights apply to you as well. You can stop receiving text messages at any time by replying STOP to any message, and you can request access to or deletion of your information by emailing help@sently.ca. Where the information is held on behalf of a business, we will work with that business to action your request.
Children's privacy
Sently is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.
Sently is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.
Account deletion
You may request deletion of your Sently account and associated personal data at any time by:
Navigating to Profile → Profile details → Delete Account within the app, or
Emailing help@sently.ca with the subject line "Account Deletion Request"
Upon receiving your request, your account is deactivated immediately and your personal data is permanently deleted from our active systems within 30 days. Residual copies may persist in encrypted backups for up to 90 days before being overwritten. We may retain a limited subset of information where required by law — including SMS consent and opt-out records, and billing records needed for tax purposes — for the retention periods described above.
You may request deletion of your Sently account and associated personal data at any time by:
Navigating to Profile → Profile details → Delete Account within the app, or
Emailing help@sently.ca with the subject line "Account Deletion Request"
Upon receiving your request, your account is deactivated immediately and your personal data is permanently deleted from our active systems within 30 days. Residual copies may persist in encrypted backups for up to 90 days before being overwritten. We may retain a limited subset of information where required by law — including SMS consent and opt-out records, and billing records needed for tax purposes — for the retention periods described above.
Changes to this policy
We may update this Privacy Policy from time to time. If significant changes are made, we will notify users through the platform or by email. The updated date at the top of this page reflects the most recent revision.
We may update this Privacy Policy from time to time. If significant changes are made, we will notify users through the platform or by email. The updated date at the top of this page reflects the most recent revision.
Contact us
If you have any questions or concerns about this Privacy Policy, you can contact us at:
Email: help@sently.ca
Company: Sently
Location: Ontario, Canada
If you have any questions or concerns about this Privacy Policy, you can contact us at:
Email: help@sently.ca
Company: Sently
Location: Ontario, Canada