Terms of Service
Last updated: 17 August 2026
1. What Trey is
Trey provides physical NFC/QR "Tappy Stand" review points paired with automated Google review management: AI-drafted reply suggestions and WhatsApp notifications, delivered as a subscription service (the "Service").
2. Your data, not ours to sell
Trey does not sell, rent, or trade your business data or your customers' review data to third parties. Full detail is in our Privacy Policy.
3. Free trial
New clients receive a 14-day free trial. The trial does not begin at signup — it starts on the first genuine tap of your Trey Tappy Stand, once the stand has been delivered and gone live, so you don't lose trial days while it's in the post. If a paid subscription is not set up by the end of the 14-day trial period, your Tappy Stand's landing page will automatically pause — customers scanning or tapping it will no longer be directed to leave a review — until billing is completed.
4. Subscription and billing
Trey is billed on a recurring basis at the rate shown at signup. You can cancel at any time; access continues until the end of the billing period already paid for. We'll notify you by WhatsApp before your trial ends and before any billing issue affects your service. If a subscription payment fails, your Tappy Stand may be temporarily disconnected until your payment details are updated.
5. What you're responsible for
- Providing accurate business information at onboarding
- Having the right to connect Trey to your Google Business Profile
- Reviewing AI-drafted replies before they're posted — Trey's suggestions are generated automatically and may occasionally contain errors, so you review and approve each one; you control what's published under your business's name
6. What Trey is responsible for
- Keeping the Service running and your data secure
- Never posting to your Google Business Profile without your approval
- Giving reasonable notice of pricing or Service changes
- Handling your customers' review data only as your processor, on your instructions — set out in full in section 11
7. Service availability
We aim to keep Trey running reliably but don't guarantee uninterrupted service. We're not liable for lost reviews, missed notifications, or business impact arising from downtime of Trey or third-party services we depend on (Google, WhatsApp/Twilio, our hosting provider).
8. Ending the service
You may cancel at any time. We may suspend or end the Service for accounts that misuse it, fail to pay, or breach these terms, with reasonable notice where practical.
9. Changes to these terms
Material changes will be communicated via WhatsApp or email before they take effect.
10. Governing law
These terms are governed by the laws of England and Wales.
11. Data protection — Trey as your processor
This section is the written contract required by Article 28(3) of the UK GDPR. It applies whenever Trey handles personal data on your behalf, and it forms part of these terms.
11.1 Who is who
You are the controller of your customers' review data. You decide that reviews should be collected and replied to, and it is your Google Business Profile the replies appear on. Trey is your processor for that data.
Trey is a separate controller for a small amount of data it holds for its own purposes — your account and billing details, and the sales-prospect records it keeps before you become a client. Those are covered by the Privacy Policy, not by this section.
11.2 What Trey processes for you
| Subject matter | Providing the Trey review-management Service to you. |
|---|---|
| Duration | For as long as your subscription runs, plus the deletion period in 11.9. |
| Nature and purpose | Collecting reviews left on your Google Business Profile; drafting suggested replies using AI; sending you notifications so you can approve them; publishing an approved reply to your Profile; counting taps of your stand or key fob; and producing your weekly and monthly reports. |
| Types of personal data | Reviewer display names, review text, star ratings and review dates; the reply text you approve; and the contact details of the people at your business who use Trey. |
| Categories of data subject | Your customers who leave reviews, and your own staff or owners who use the Service. |
11.3 Trey acts only on your instructions
Trey processes this personal data only on your documented instructions, including on any transfer outside the UK. These terms, together with the settings you choose in your account, are those instructions. If Trey is ever required by law to process it otherwise, Trey will tell you before doing so unless that law forbids it.
11.4 Confidentiality
Everyone Trey authorises to access this data is bound by a duty of confidentiality. Trey is currently operated by one person, Matthew Kazantzis, and that duty applies to him and to anyone he engages later.
11.5 Security
Trey applies appropriate technical and organisational measures under Article 32: encryption in transit for every connection; access to your data through signed, per-purpose links rather than shared passwords; secrets held in the hosting platform's encrypted environment rather than in code; and automated tests covering the access-control paths, run before every release.
11.6 Sub-processors
You give Trey general authorisation to use the sub-processors below. Each is bound by written terms no less protective than this section.
| Source of the reviews, destination of approved replies, and the AI that drafts them. Trey uses a paid tier, under which Google does not use the content to train its models. | |
| Twilio | Delivers your WhatsApp notifications. |
| Resend | Delivers Trey's emails to you. |
| Netlify | Hosting and data storage. |
Trey will give you at least 30 days' notice before adding or replacing a sub-processor. If you object on reasonable data-protection grounds, you may cancel without penalty and receive a pro-rata refund of any unused prepaid period.
11.7 International transfers
Some of these providers process data outside the UK. Where they do, transfers are covered by the UK Addendum to the EU Standard Contractual Clauses, or by the provider's UK Data Privacy Framework certification.
11.8 Helping you meet your own obligations
Trey will assist you, so far as is reasonable and taking into account the nature of the processing:
- in responding to requests from individuals exercising their rights — access, erasure, objection and the rest;
- in keeping the processing secure, notifying breaches, and carrying out a data protection impact assessment or prior consultation if you need one.
If Trey becomes aware of a personal data breach affecting your data, Trey will notify you without undue delay and within 48 hours, with what is known at the time, so you can meet your own 72-hour duty to the ICO.
11.9 Deletion and return
When your subscription ends, you may ask for a copy of your data in a machine-readable format. Trey will delete your customers' review data, and all copies of it, within 90 days of the end of your subscription, unless UK law requires it to be kept for longer. Say the word and Trey will delete it sooner.
11.10 Records and audit
Trey will make available the information reasonably needed to show it is meeting these obligations, and will allow and contribute to audits or inspections you or an auditor you appoint carry out, on reasonable notice and no more than once a year unless a breach or a regulator requires otherwise.
11.11 If this section and the rest of these terms disagree
On anything to do with personal data, this section wins.
Contact
Trey is operated by Matthew Kazantzis, a sole trader trading as Trey.
52 Ravenscroft Drive, Derby, DE21 6NX, United Kingdom
info@trey.today