Privacy Policy

1. What we collect

To create an account: your email address, and a display name you choose yourself (it does not need to be, and is not required to be, your real name). If you sign in with Google, we receive your email from Google as part of confirming the account is real; we don't request your phone number or legal name from Google or anywhere else, and we don't ask for either at any point in signup.

What you choose to add: an optional avatar image, and anything you submit yourself, including a review's text and star rating, a business or seller listing you submit for approval, a claim request for a listing you say is yours (which may include contact details for that business, not for you personally; see the note below), and any flag or report you file against content you believe violates our terms.

A distinction worth being explicit about: a business's phone number, WhatsApp number, or email (shown publicly on its listing page) is contact information for that business, provided voluntarily by whoever submitted or claimed the listing. It is not personal data about you as an individual user, and it is treated differently from your own account information throughout this policy.

Collected automatically: basic, anonymous site-traffic and product-usage data, such as the pages visited, broad device and browser information, site performance, and aggregated interaction patterns. We use PostHog in cookieless mode: we do not identify you, send your account details, email address, display name, review text, form input, or session recordings to PostHog.

What we deliberately don't collect: your real legal name, your phone number, your physical address, or your payment information (onPoint doesn't process payments from consumers, reviews and browsing are free, and no payment flow exists at this stage of the product).

2. How we use it

To operate your account and let you write reviews, submit listings, and claim businesses; to send you account-related email (signup confirmation, notifications about your submissions or claims); to keep the platform trustworthy by enforcing one review per person per business, and investigating reports of fake or abusive content; and to understand overall site usage through the aggregated analytics described above.

We do not sell your data, and we do not use it for advertising (onPoint doesn't run ads or share data with advertisers).

3. Who we share it with

Your data is processed by the infrastructure providers that run onPoint, not sold or given to unrelated third parties:

• Supabase: hosts our database and handles authentication. This is where your account record and everything you submit actually lives.
• Vercel: hosts the website itself.
• PostHog: provides anonymous, cookieless product and website analytics. Session replay is disabled.
• Google: solely to verify your account is a real person and to receive your email address for that account.

4. Your rights, and what happens when you delete your account

Under Zimbabwe's Cyber and Data Protection Act, you have the right to access the personal data we hold about you, correct it if it's wrong, and request its deletion.

You can delete your account at any time from account settings. When you do: your email address, display handle, and custom uploaded avatar are permanently deleted from our records immediately and cannot be recovered. If you wish to use onPoint again in the future, you may sign up using the same Google account to create a brand-new profile. Reviews you wrote remain visible, attributed anonymously to "Former user," because other users rely on them and the businesses they describe (deleting your account doesn't erase your review history from the platform, only your identity from it). If you want a specific review gone entirely rather than just anonymized, you may delete that review yourself prior to deleting your account.

5. How long we keep data

Account data is kept for as long as your account is active, plus the anonymized retention described above after deletion. Aggregated analytics data isn't tied to an identifiable person in the first place, so it isn't something that gets "deleted" per account, as there's nothing in it to connect back to you.

6. Cookies

We use a session cookie to keep you logged in (necessary for the site to function, not for tracking). We don't use advertising or cross-site tracking cookies. PostHog is configured in cookieless mode and does not use cookies, local storage, or session storage for analytics.

7. Children

onPoint isn't directed at children, and you must be 18, or the age of majority where you live, to create an account, matching our Terms and Conditions.

8. Changes to this policy

We'll update the date at the top when this changes, and post the current version here.

9. Contact

Questions about this policy, or to exercise any of the rights in Section 4 directly: askusonpoint@gmail.com.