Effective October 18, 2026
ThankU.Deals is a service that local businesses use to run rewards programs, offers, waitlists, reservations, reminders, surveys, contests and messages with their customers. This policy explains what information we collect, how it’s used and shared, and the choices you have. It covers thanku.deals (including business pages on thanku.deals and your account pages at thanku.deals/my) and the emails and text messages we send. Using ThankU.Deals is also covered by our Terms of Service.
The short version
- We don’t sell your personal information, and we don’t use it for advertising.
- We don’t use advertising or cross-site tracking cookies.
- Each business sees only its own customers and what you do with that business.
- Your mobile number and texting consent are never shared with anyone for their marketing.
- You can see, download, correct or delete your information from your account at any time.
1. Who’s responsible
ThankU.Deals runs this service. When you join a business’s program, sign up at its counter, join its waitlist, make a reservation or answer its survey, that business can see the information you give it and decides how to use it (for example, which offers to send), within this policy and the law. We keep each business’s information separate: one business never sees what you do with another.
2. What we collect
Information you give us or a business:
- Your name, email address and mobile number.
- If you choose: your birthday, a profile photo and a recovery passphrase (stored scrambled, so nobody can read it).
- Waitlist and reservation details (party size, date and time, notes), survey answers, contest entries (including photos you enter), and messages you send to a business.
- Requests you send through a business’s forms (such as a job application or a catering request), including any photos or files you attach, and anything else a business’s form asks for.
Information a business adds about you: for example, when you sign up at the counter, the business enters your name and number. Businesses can also keep notes and categories (such as a building or unit) that only they see.
Your activity: rewards (stamps, points, visits and rewards used), discount cards you own, purchases made through the site, and which emails and texts you agreed to receive, when, and the wording you agreed to.
Technical information: your IP address, browser type and the time of each visit, in our server logs and when you request a login code or send a form. We use it to keep the service secure and to stop spam and abuse.
Payments: card payments are handled by Stripe on Stripe’s own pages. We never see or store your full card number; we keep a record of the order (what it was for, the amount, the date and its status).
Business accounts: for businesses using ThankU.Deals, we keep the business’s details, the accounts of its staff, and payout details through Stripe.
3. How we use it
- To provide the service: your rewards, member card, offers, waitlist place, reservations, reminders, surveys, contests and messages.
- To log you in. Customers log in with a one-time code sent to their email or phone; there are no passwords to steal.
- To send what you asked for or need: login codes, reminders, waitlist and reservation updates, messages from businesses, and receipts.
- To send offers and news, but only from businesses you agreed to hear from. You can stop them at any time.
- To keep the service secure, prevent fraud and spam, and check that a phone number still belongs to you before it opens your account.
- To answer your questions and support requests.
- To understand how the service is used, as overall totals that don’t identify you.
- To follow the law.
4. Who sees it and who we share it with
The businesses you’re a customer of see your name, contact details and your activity with them: rewards, purchases, waitlist and reservation details, survey answers, contest entries, form requests and your messages. They see your profile photo, and the name you use on your account, only once you’ve logged in to ThankU.Deals yourself.
Companies that run parts of the service for us, only to do that job and not for their own purposes:
- DigitalOcean: hosts our servers and database, in the United States.
- Mailgun: sends and receives our emails.
- Twilio: sends text messages.
- Stripe: processes card payments and pays businesses.
- Cloudflare (Turnstile): checks that a real person is using a form, to stop spam. Cloudflare looks at information about your browser and device to do this.
- Google Fonts, cdnjs and jsDelivr: deliver fonts, icons and page components. Your browser connects to them, so they receive your IP address.
When the law requires it, or to protect the rights, property or safety of our users, businesses, the public or ThankU.Deals.
If ThankU.Deals is sold or merged, your information may move to the new owner, still protected by this policy.
We do not sell personal information, and we do not share it for advertising.
5. Text messages
We send text messages only to numbers whose owners agreed to receive them.
Login codes from ThankU.Deals. If you log in with your mobile number and tick the box agreeing to receive login codes by text, we text you a one-time code, one text each time you ask for one. Texting is optional: you can always log in with your email address instead. These texts come from ThankU.Deals’ own number and are never marketing. We keep a record of your agreement (the wording, time, IP address and browser) with the request.
Texts from businesses. A business texts you only if you agreed to receive its texts, for example offers, reminders, waitlist and reservation updates, or notices of new messages. These come from the business’s own number, not ThankU.Deals’ number. Links in offer texts go through our servers first, so the business can see how many people tapped them. If you text a business’s number, your text goes to that business: for example, into your conversation with it, or as your answer to its reminder.
Message frequency varies. Message and data rates may apply. Reply STOP to stop texts, or HELP for help.
We do not share or sell mobile phone numbers or text messaging consent with any third parties or affiliates for their marketing or promotional purposes. Mobile information is used only to send the messages you agreed to, and is shared only with the provider that delivers them (Twilio). Your agreement to receive texts is never a condition of buying anything or of using ThankU.Deals.
6. Emails
We email login codes, receipts and other messages about the service. Offers and news come only from businesses you agreed to hear from, and every one has a link to stop emails from that business.
Promotion emails record whether each email was delivered, opened (using a small image in the email) and clicked (links go through our servers first), so the business can see how its promotion did. Emails about messages from a business come from convos@thanku.deals; if you reply, your reply is added to that conversation.
7. Cookies
Cookies are small files a website stores in your browser. Our pages set no cookies when you simply visit them. We use cookies only when you do something that needs one, and we don’t use advertising or cross-site tracking cookies.
| Cookie | Why | How long |
|---|---|---|
| wordpress_logged_in_…, wordpress_sec_…, wordpress_test_cookie | Keep you logged in to your account or business dashboard | Until you log out, up to 14 days |
| PHPSESSID | Remembers which business a business user is working on in the dashboard | Until the browser is closed |
| tu_sv_… | Set when you answer a survey, so each person answers once (a random code, nothing about you) | About 13 months |
| wordpress_user_sw_… | ThankU.Deals administrators only: switching between accounts to help users | Until they switch back or log out |
Cloudflare Turnstile, which checks forms for spam, runs in your browser and may use its own storage for that check. Stripe uses its own cookies on its payment pages.
You can block or delete cookies in your browser settings. Logging in needs a cookie, so blocking them will keep you from logging in.
Do Not Track: we don’t track you across other websites, so there’s no tracking to turn off. We treat every visitor the same whether or not their browser sends a Do Not Track signal.
8. Your choices
Log in at thanku.deals/my to:
- See everything we keep about you and download it (Account › Download my data).
- Correct your name and birthday, and add or remove your photo.
- Add or remove email addresses and phone numbers. You always keep at least one you can log in with. A business can’t add a removed one back to your account.
- Turn emails and texts from each business on or off, and choose how you hear about new messages.
- Set a recovery passphrase.
- Delete your account (Account › Delete my account).
Every offer email has a link to stop emails from that business, and you can reply STOP to any text. You can also email info@thanku.deals with any request about your information; we’ll answer within 30 days.
California residents have the right to know what personal information we collect, use and disclose, to get a copy of it, to correct it and to have it deleted. You can do all of this from your account or by emailing us. We don’t sell or share personal information, and we won’t treat you differently for using these rights.
9. How long we keep it
- Your account information: while you have an account. Information a business keeps about its customers: while that business uses ThankU.Deals, or until you or the business removes it.
- When you delete your account, your name, email addresses, phone numbers, birthday and photo are removed straight away, and all emails and texts stop. Businesses keep anonymous records of past visits and purchases, and the messages you exchanged with them, so their records still add up.
- Server logs are kept for 14 days, and records of login-code requests for 90 days. Records of texts sent and received (the number, the time and whether it was delivered) are kept for 180 days. When you text a business and it isn’t a reply to something, the business can read it for 30 days.
- Backups are replaced over time, so deleted information leaves them as they’re replaced.
10. Keeping it safe
Everything travels over encrypted connections (HTTPS). Customers log in with one-time codes instead of passwords. Recovery passphrases are stored scrambled. Profile photos, and photos and files sent with forms, are kept outside the public website, so they have no public address. Photos are re-saved without the location and camera details phones add. Business users see only their own business’s customers. No system is perfectly secure, but we work hard to protect your information and will tell you if a breach affects it, as the law requires.
11. Sensitive information
ThankU.Deals isn’t designed to hold medical, financial or other sensitive information. Please don’t send it in messages, survey answers or forms. Businesses that deal with private matters, such as health offices, can choose emails that only say there’s a new message, so the message itself stays on ThankU.Deals.
12. Children
ThankU.Deals isn’t meant for children under 13, and we don’t knowingly collect information from them. Some contests are for adults only. If you think a child has given us information, email info@thanku.deals and we’ll delete it.
13. Changes to this policy
When we change this policy, we’ll update the date at the top. If a change is significant, we’ll also let account holders know by email before it takes effect.
14. Contact us
Questions or requests about your information: info@thanku.deals, or use our contact page.