Privacy Policy

WorkEcho (“we”, “us”) makes NFC “tap to review” cards and a dashboard that help businesses collect and track reviews. This policy explains what we collect, how we use it, and the choices you have. It covers business owners, our partners (agencies and resellers), and the customers who tap a card.

Information we collect

Account data. Your name, email, and a securely hashed password when you register.

Sign in with Google. If you choose to sign in with Google, Google shares your name, email address, and profile picture with us so we can create and identify your account. We use this only to authenticate you and manage your account. We do not receive your Google password, and we request only basic profile and email information — nothing else from your Google account.

Business & client data. Business names, review-page destination links, uploaded logos, team-member card names, and — for partners — the client businesses you set up on their behalf.

Order & shipping data. The name and shipping address used to fulfill and dropship card orders, and order history.

Payment data. Payments are processed by Stripe. We don't store your full card number — Stripe handles card details and returns only limited, non-sensitive information (such as the last four digits and status).

Interaction data. When someone taps or scans a card, we record the timestamp, the card involved, an approximate device type (mobile/tablet/desktop), the referrer and user agent when available, and approximate location (country, region, city) derived from network headers.

IP addresses

We do not store raw IP addresses. To count unique visitors and prevent abuse, an IP may be combined with a secret and a daily-rotating value and then irreversibly hashed. The result cannot be turned back into an IP address.

How we use information

To operate your cards and redirects, provide analytics, create and secure your account, process and fulfill orders, and send transactional emails (verification, password reset, order and account notifications). We do not use your data for advertising.

Sharing

We share data only with the service providers that run the product — hosting and the database (Vercel, Neon), email delivery (Resend), payments (Stripe), and Google (only when you choose to sign in with Google). If you were set up by a partner (an agency or reseller), that partner can see the business and review analytics for the account they created for you. We do not sell your personal information, and we don't share Google user data with third parties except as needed to provide the service.

Cookies & sessions

We use a small number of essential cookies to keep you signed in and to protect against fraud. We don't use third-party advertising or cross-site tracking cookies.

Data retention & your choices

You can update or delete your businesses, cards, and destinations at any time from your dashboard. You can ask us to close your account and delete your personal data — including data received from Google — by emailing us. We keep order and transaction records as needed for legal and accounting purposes.

Children

WorkEcho is for businesses and isn't directed to children under 13, who should not use it.

Contact

Questions or a privacy request? Email me@avivfarchi.com. Aviv Farchi · avivfarchi.com