Last updated 12 August 2026
This covers the PipiReviews iPhone app, this website, and what happens when somebody taps one of our tags. It is written to be read, not to be survived.
Tapping a tag is anonymous. We do not know who you are, we do not ask, and we cannot find out. We count that a tap happened so the business knows the stand is working. Then you go to Google, and what happens there is between you and Google.
We record that a tap occurred, roughly when, and a few technical details about the request:
We do not store your IP address. It is used for rate limiting in memory and discarded. The hash cannot be reversed into an identity, is not shared with anyone, and is not used to follow you anywhere. There are no cookies, no advertising trackers, and no third-party analytics on the tag page.
Once you are redirected, Google's privacy policy applies, not ours.
| What | Why |
|---|---|
| Business name, address, phone, email | To set up your account and contact you |
| Your Google listing | To point the tag at the right review page |
| Payment details | Held by Stripe, not by us. We never see a full card number |
| Tap counts for your tags | Your dashboard |
You sign in with Apple. We receive an identifier and, on the first sign-in only, the name and email you choose to share. We also hold what you have done in the app — shops signed up, tags fitted, commission earned.
If you are paid as a contractor, tax information is collected by Stripe inside its own onboarding, and your taxpayer number is not stored in our systems. If you choose to give us a signed Form W-9 instead, we keep it securely for as long as tax law requires. When you provide personal data to be paid, Stripe receives it and processes it under the Stripe Privacy Policy.
When you sign the contractor agreement we keep the name you typed, the date, the version of the text, and the IP address and device it was signed from — the record that shows what was agreed.
We do not sell data. We do not share it for advertising. There is nobody else.
All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.
We send two kinds of text message, both transactional, and only to a number you have given us: a sign-in code when you ask for one on the dashboard sign-in page, and an account notice when a shop registered to your number is cancelled or resumed. There is no marketing programme, and we do not sell or share your number.
What we keep, and why. When you ask for a code we record your number, the date and time, the IP address the request came from, your browser's user-agent, and which version of the on-screen consent wording you were shown. That record exists because mobile carriers require a messaging programme to prove each recipient agreed to be messaged, and to produce that evidence on request. It is kept for as long as we message that number and for two years afterwards.
Codes are handled by Twilio and are not stored by us in a readable form. Reply STOP to any message to opt out, or HELP for help. Full detail is in our SMS Terms of Service.
Tap records are kept while a business is with us and for a reasonable period after, so a dispute about "did this ever work" can be answered. Account and billing records are kept as long as the law requires. Ask us to delete something and we will, unless we are required to keep it.
Ask what we hold, ask for a copy, ask for corrections, ask for deletion: support@pprvw.cfd. If you are in a place with specific data rights, they apply and we will honour them.
This is a service for businesses. It is not directed at children and we do not knowingly collect anything from them.
If this changes materially we will say so here and date it. The date at the top is the only version that counts.