Privacy Policy

2. Information We Collect

• Account details: name and email/phone number supplied during registration.
• Business data: loyalty program configuration, branding assets, and staff assignments.
• Loyalty activity: stamp counts, reward redemptions, and audit logs required to operate the platform.
• Admin payment data: when ads have been disabled with a one-time payment, we store the identifiers, amount, status, and timestamps supplied by Razorpay.

3. How We Use Information

• Authenticate administrators and members, and secure access to loyalty data.
• Deliver SMS verification codes and other service notifications through trusted external API providers.
• Operate loyalty features such as stamping, reward redemption, and reporting.

4. Sharing and Disclosure

We share data only when required to operate the Service:

• Service providers: SMS, hosting, storage, and security vendors.
• Advertising partner: Monetag receives aggregated impression/click metrics for banner ads only. End customers never see ads. Razorpay processes one-time opt-out payments when administrators choose that option.
• Legal compliance: when we must respond to lawful requests or protect our rights.

5. Admin Cookie Consent & Advertising

Advertising cookies are presented only to authenticated administrators. Upon consent we:

• Load a single PropellerAds tag to show one banner advertisement modal.
• Store optional opt-out payments in the ad_opt_out_payments table when an administrator elects to disable advertising by paying a one-time INR 50 (~USD 0.56) fee processed through Razorpay. We retain the payment link ID, payment ID, payment signature, amount, status, and timestamp.

Administrators can withdraw consent by clearing cookies or by paying the Razorpay-processing opt-out fee if they prefer not to display the banner. Members never see ads and are not asked for advertising consent.

6. Data Retention

Loyalty data persists while a business account remains active. Deleting an account triggers immediate and complete removal of personal and/or business information, except in our database backups where retention is legally mandated.

7. Your Rights

Depending on your jurisdiction, you may access, update, export, or delete personal data. Administrators can manage consent records by contacting support. Members manage communication preferences through their profile. We respond to GDPR, CCPA, and similar requests submitted via support.

8. Changes to This Policy

We may update this policy to reflect product, legal, or operational changes. When updates are material, administrators receive notice through the dashboard or email, and the “Effective Date” will be revised.

9. Contact

Questions about privacy or data requests can be sent to ashwinmram@gmail.com.