Personal data and GDPR
You are the controller of your customers' data; Tieroo processes it for you under the data processing agreement you accepted at Start with Tieroo.
What Tieroo keeps
Only what the card needs: the customer's name, the points, rewards and level shown on the card, dates, card identifiers and the phones' push tokens. No purchase history and no location. Everything stays in the EU: the servers at Hetzner in Germany, the encrypted backups at Hetzner in Finland.
Read the privacy policy and the data processing agreement.
When a customer leaves
| What happens | The card on the phone | Data on the platform |
|---|---|---|
| The customer removes the card from the wallet | Gone from that phone | Kept: still a member in Odoo. Sending again gives the card back. |
| Loyalty card archived or deleted in Odoo | Closed, moved to expired passes | Kept 30 days, then erased |
| Contact archived in Odoo | Closed | Kept 30 days, then erased |
| Contact deleted in Odoo | Closed | Erased at once |
| Closed card restored in Odoo | Opens again | Sent again by Odoo |
| Tieroo module uninstalled | Every card closes | Kept 30 days, then erased. The Tieroo account and its plan stay: close the account on the plan page if you leave. |
| Account closed | Every card closes | Deleted 90 days after closing |
Erased means the name, points, dates, rewards and reminders are removed. What stays is an empty closed card among the expired passes, with a random barcode that means nothing once the contact is gone. Google keeps its own copy of the card, so the empty version goes to Google as well.
An erasure request
Delete the contact in Odoo. Tieroo erases the card's data at once. If Tieroo cannot be reached at that moment, Odoo keeps the erasure in a queue and sends it as soon as Tieroo answers again, so the data never stays behind.