TriStar Apps, LLC ("TriStar Apps", "we", "us", "our"), the company behind the SiteCheckin and CrestVisor services, provides online check-in and queue-management software to service businesses. This Privacy Policy explains what information we collect through the SiteCheckin website and application (together, the "Service"), how we use it, and the choices you have.
Two kinds of people, two roles
The Service involves two groups, and our role differs for each:
- Business account holders — owners and staff who create an account to run their shop's check-in. For their account data, TriStar Apps is the controller.
- Customers who check in at a participating business. For that check-in data, the business is the controller and TriStar Apps acts as a processor on the business's behalf. If you checked in somewhere and want your data changed or removed, contact that business — or contact us and we'll route your request.
Separately, we act as a controller of the technical and usage data described below, and of the aggregated and de-identified data we create, which we use to secure, operate, and improve our Services.
Information we collect
- Account information — your name, email address, and a securely hashed password. If you sign in with Google, we receive your name, email address, and Google account identifier (we never receive your Google password).
- Business information — shop name, address, hours, services, branding, and settings you enter.
- Check-in information (entered by or about a customer) — name, phone number, and optionally email, address, the service requested, notes, and marketing consent.
- Consent records — when a customer opts in to messages, we store the exact wording shown, the time, and the source, so consent can be demonstrated.
- Technical & usage information — IP address, browser/device type, log data, and activity on the Service, used to operate, secure, analyze, and improve it.
How we use information
- To provide the Service — create accounts, run the live queue, and manage visits.
- To authenticate you and keep your account and the Service secure.
- To send transactional email such as address verification and password resets.
- To send coupons, offers, and service updates only where a customer has opted in, on behalf of the business they visited. Recipients can opt out at any time.
- To operate, analyze, maintain, improve, and develop the Service and our other products and services.
- To comply with legal obligations and enforce our terms.
Aggregated & de-identified data
We may create aggregated and de-identified data from the information described above — including check-in data — meaning data that no longer identifies you, your business, or any individual. We may use and retain this aggregated and de-identified data for any lawful purpose, including analytics, benchmarking, research and reporting, and improving, developing, and offering products and services. We do not attempt to re-identify de-identified data, and we do not disclose personal information in identifiable form for these purposes.
Messaging & consent
Marketing and promotional messages are sent only with affirmative opt-in and can be stopped at any time by following the opt-out instructions in the message. Businesses using SiteCheckin are responsible for obtaining valid consent and complying with applicable laws (including the TCPA and carrier A2P requirements). We maintain the consent trail described above to support that.
Cookies
We use a single, essential first-party cookie to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.
How we share information
We do not sell your personal information. We share it only:
- With the business you checked in with (they see their own customers' information).
- With service providers that host and operate the Service on our behalf — currently Amazon Web Services (hosting and email delivery) and, if you use it, Google (sign-in). They may process data only as needed to provide their service to us.
- Within the TriStar Apps family of services and with affiliates, to operate and improve our Services consistent with this policy.
- In connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this policy.
- If required by law, or to protect the rights, safety, and security of users, the public, and the Service.
Data retention & deletion
We keep information for as long as an account or business is active, and as needed to provide the Service and meet legal obligations. Businesses can delete a customer and their entire visit history from within the app. You can request deletion of your account by contacting us. Certain records (such as consent logs) may be retained where required to demonstrate compliance, and aggregated or de-identified data may be retained indefinitely.
Security
We protect information with encryption in transit (HTTPS), hashed passwords, scoped access controls, and regular backups. No system is perfectly secure, but we work to safeguard your data.
Your choices & rights
You may access, correct, or delete your account information, and opt out of marketing messages at any time. Depending on where you live (for example, under Virginia's VCDPA or California's CCPA/CPRA), you may have additional rights, such as to access, correct, delete, or obtain a copy of your personal data, and to appeal a decision. We do not sell personal information or use it for cross-context behavioral advertising. Contact us to exercise your rights and we will respond as required by law.
Children
The Service is intended for businesses and adults. It is not directed to children under 13, and we do not knowingly collect their personal information.
Where data is processed
The Service is operated in the United States (Amazon Web Services, US East region). By using the Service you understand your information is processed there.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, additional notice.
Contact us
Questions about privacy or a data request? Email hello@crestvisor.com. SiteCheckin is a service of TriStar Apps, LLC.