Privacy Policy

Last updated June 28, 2026

CMNT CARD (“CMNT CARD,” “we,” “us”) provides digital comment cards that let businesses collect private feedback from the people they serve. This policy explains what we collect, how we use it, and the choices you have.

Who this covers

• Account holders — the businesses and individuals who create comment boxes and read feedback.
• Respondents — the people who leave feedback on a comment card.

Information we collect

From account holders: your name, email address, and the account and billing details needed to run your account.

From respondents:

• The feedback you write — your comment and any rating.
• Contact details only if you choose to share them — such as your name, email, or phone — for example when you ask to hear back. You can also leave feedback anonymously.
• Technical signals — IP address and device/browser information — used to prevent spam and abuse and to keep the service secure.

We do not require respondents to create an account or to identify themselves.

How we use information

• To operate the comment cards and deliver feedback to the relevant business.
• To notify account holders of new feedback and to enable a private, two-way reply when a respondent requests one.
• To verify a respondent with a one-time code when a box requires it (or when a reply is requested), so messages reach a real address.
• To prevent spam, fraud, and abuse, and to secure and improve the service.

How we protect it

We encrypt personal identifiers — such as email addresses, names, and phone numbers — at rest using field-level encryption, and we transmit data over TLS. Access to production data is limited to personnel who need it. We are actively working toward SOC 2 Type II compliance and build to those controls today.

How information is shared

• We do not sell your personal information.
• A respondent’s contact details are shared with the business only when the respondent opts in (for example, by requesting a reply). Anonymous feedback stays anonymous.
• We use a small set of service providers (“subprocessors”) to run CMNT CARD — for example cloud hosting and transactional email — who process data only on our instructions.
• We may disclose information if required by law or to protect the rights, safety, and security of our users and the service.

Data retention

We keep feedback for as long as the associated account or plan keeps it available, and as needed to provide the service and meet legal obligations. Account holders can delete boxes and feedback; respondents can ask us to delete information tied to them (see Contact).

Your choices and rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To make a request, contact us below. We honor anonymity — if you submitted feedback without identifying yourself, there may be no personal information for us to act on.

Cookies

We use essential cookies for sign-in and security. We do not use third-party advertising trackers.

Children

CMNT CARD is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information.

Changes

We may update this policy; we’ll revise the “Last updated” date and, for material changes, provide additional notice.

Contact

Questions or requests: [email protected].