Privacy Policy

Merchants — businesses that sign up for a ZeroSlip account, connect their POS system or e-commerce store, and use our dashboard to manage receipts, campaigns, and customer relationships.

End Customers (Shoppers) — individuals who shop at a ZeroSlip-connected retail store or online shop and receive a digital receipt, loyalty reward, or marketing message through our platform. ZeroSlip processes shopper data on behalf of the Merchant; the Merchant is the data controller for their shoppers.

From Merchants

• Account details: business name, owner name, email address, phone number, and password.
• Store configuration: logo, brand colours, receipt templates, loyalty programme settings, and campaign preferences.
• Billing information processed by our payment provider (ZeroSlip does not store raw card numbers).
• Dashboard activity: logins, feature usage, automation configurations, and AI conversation history with our agents (Alex, Sarah, Max, Leo).

From End Customers (via Merchant's POS or e-commerce store)

• Contact information: phone number and/or email address collected at the point of sale when a customer opts to receive a digital receipt.
• Transaction data: purchase amount, items bought, store location, and transaction timestamp — used to generate the digital receipt and update loyalty points.
• Loyalty data: points balance, redemption history, tier status, and vouchers issued through RewardBee.
• Push notification token (FCM token): collected when a customer installs the RewardBee app and grants notification permission — used to send loyalty updates and promotions.
• Shopify pixel events (for e-commerce merchants): anonymous behavioural signals including product views, add-to-cart events, checkout starts, and checkout completions, linked to a client identifier. These are used to power abandoned-cart recovery and personalised campaign targeting.
• Feedback responses: ratings and comments submitted through Smart Feedback after a purchase.

Automatically Collected

• Device and browser data: IP address, browser type, operating system, and session duration when you visit zeroslip.co.
• Analytics data via cookies and similar technologies (see Section 7).

For Merchants

• Operate and deliver the ZeroSlip platform, dashboard, and all associated products.
• Process billing and maintain your account.
• Power AI agents (Alex for data analysis, Sarah for campaign creation, Max for automation suggestions, Leo for creative content) using your store data.
• Send product updates, security alerts, and support communications.
• Improve platform features based on aggregated, anonymised usage patterns.

For End Customers

• Deliver digital receipts immediately after purchase via SMS or email.
• Manage loyalty points, rewards, and voucher issuance through RewardBee.
• Send post-purchase feedback requests on behalf of the Merchant.
• Send marketing messages (SMS, WhatsApp, email, push notification) on behalf of the Merchant — only where the Merchant has confirmed the customer has consented.
• Trigger automated customer journeys configured by the Merchant, such as win-back campaigns, birthday offers, or abandoned-cart recovery push notifications.
• Analyse purchase behaviour to help the Merchant personalise future communications.

When a Merchant connects ZeroSlip to their point-of-sale system or e-commerce platform, ZeroSlip receives transaction data at the moment of each sale. This includes order totals, item details, and the customer contact information shared at checkout. This data is used exclusively to fulfil the Services the Merchant has enabled — receipts, loyalty, feedback, and campaigns. The POS or e-commerce platform is a data source; it does not control how ZeroSlip processes the data after receipt.

For Merchants who connect their Shopify store, ZeroSlip installs a tracking pixel that records customer behavioural events on the storefront. These events — such as viewing a product, adding to cart, or beginning checkout — are linked to an anonymous client identifier. When a customer who previously opted in to receive communications from the Merchant adds items to their cart and does not complete the purchase, ZeroSlip may trigger an abandoned-cart recovery message (e.g. a push notification via RewardBee) on the Merchant's behalf.

ZeroSlip does not use pixel data for any purpose other than delivering the Services to the Merchant whose store the pixel was installed on.

ZeroSlip does not sell personal data. We share it only in these limited cases:

• Service providers: cloud hosting, SMS/WhatsApp delivery, email sending, Firebase (Google) for push notifications, and payment processing — all under confidentiality agreements and limited to what is necessary.
• The Merchant: end-customer data is made available to the Merchant whose store the customer transacted at, through the ZeroSlip dashboard. Merchants are contractually required to use this data lawfully.
• Legal obligations: if required by law, court order, or to protect ZeroSlip's legal rights.
• Business transfer: in the event of a merger or acquisition, with appropriate notice.

• Essential cookies — required to keep you logged in to the merchant dashboard.
• Analytics cookies — help us understand how visitors use zeroslip.co (e.g. Google Analytics).
• Shopify pixel (merchant stores only) — behavioural tracking described in Section 5.

You can manage non-essential cookies via your browser settings. Disabling cookies may affect dashboard functionality.

Push notifications are delivered through the RewardBee mobile app using Firebase Cloud Messaging (FCM). A device token is stored when the customer installs RewardBee and grants notification permission. Customers can withdraw permission at any time through their device settings, which stops all future push messages. Merchants configure the content and timing of push campaigns through the ZeroSlip Automation Builder; ZeroSlip is the technical sender but acts under the Merchant's instruction.

• Merchant account data: retained for the life of the account, plus 90 days after closure to allow data export.
• Transaction and receipt records: retained for up to 7 years for tax and audit purposes.
• Shopify pixel event data: retained for 12 months on a rolling basis.
• Push notification tokens: retained until the customer uninstalls RewardBee or withdraws permission.
• Marketing consent records: retained for 3 years after the last engagement

ZeroSlip uses TLS encryption in transit, encrypted storage at rest, role-based access controls, and regular security reviews. Merchant dashboards are isolated — one merchant's data is never accessible to another. If you discover a security issue, please contact us at asad@zeroslip.co.

Merchants can access, correct, or delete their account data by contacting us. You can export your customer data from the dashboard at any time.

End Customers (Shoppers) — if you have received a receipt or marketing message from a ZeroSlip-enabled store and want to access, correct, or delete your data, please contact us at privacy@zeroslip.co with the name of the store. We will coordinate with the Merchant to fulfil your request within 30 days.

To opt out of marketing messages: reply STOP to any SMS, use the unsubscribe link in any email, or withdraw push notification permission in your device settings.

ZeroSlip's Services are not directed at children under 13. We do not knowingly collect personal data from children. Contact us immediately if you believe we hold data about a child.

When we make material changes to this policy, we will update the date at the top and notify active Merchants by email or in-dashboard notice. Continued use of the Services after the effective date constitutes acceptance.