Placeful 2.4 — loyalty, storefront, WhatsApp inbox & guest CRM

Highlights

Loyalty program — a points ledger with tiers that mint promo codes, an expiry sweep, and a full manager UI, gated per package.
Typed custom booking fields — text, textarea, number, date, select and checkbox fields on events and areas, validated server-side against a locked definition fingerprint so stale or forged submissions are rejected cleanly; series sync propagates type, options and placeholder.
WhatsApp inbox & booking bot — Cloud API webhook with signature verification and retry dedupe, automatic guest matching, a staff inbox and a booking-assistant bot.
Storefront pickup & delivery — per-venue delivery zones (radius or polygon), fees and minimum orders, plus installable guest PWA with whitelabel branding and public landing pages at /p/{company}/{slug}.
New navigation — a registry-driven sidebar, drawer, breadcrumbs and command palette with an icon rail, live badges and persisted section state; entries mirror page authorization so unauthorized links never render.

Guest book bridge — order spend credits the guest profile, duplicate guests merge safely, and inquiries convert into bookings that finalize instead of expiring.
Opt-in journeys & automations — first-visit, VIP and detractor journeys plus cash-close, survey-detractor and hold-conflict automations and a pre-shift digest.
Signed unsubscribe — per-recipient signed links with RFC 8058 one-click opt-out on campaigns and journeys.

Planner overhaul — reworked planner with refund retry sweeps and usage compensation for billing.
Venue items on the map — kinds, items, area assignments and geometries, movable by staff tasks and assistant tools, synced over the v1 API.
Approvals & payments — unanswered approval requests mail the booker on expiry, approved holds get a 24-hour payment window, and no-show fees, late payments, installments and terminal checkout are hardened end-to-end.
Series linking — existing events can be grouped into a recurrent series after the fact.
Tip pooling — pool counts legs settled that day, and employees see their distributed tip shares in the staff portal.

Erasure pipeline — anonymizers for users, employees, guests and inquiries, a deletion-request processor, employee PII encryption and export coverage.
Full tenant archive — the company export now carries CRM, leads and staff-ops graphs; demo tenants purge the same traffic while keeping config.
Agent-facing surface — markdown mirrors, llms.txt/llms-full.txt, AI-crawler telemetry, IndexNow pings on public content and schema.org graph linking.