Privacy Policy

Draft for legal review · Last updated: September 21, 2026

Legal review required: This policy is a practical launch draft, not legal advice. It should be reviewed and approved by qualified U.S. counsel before paid commercial use.

1. Scope

This Privacy Policy explains how LOYALTY US collects, uses, stores, and shares information when customers and participating businesses use our website, loyalty accounts, QR enrollment links, dashboards, and related services.

2. Information we collect

We may collect customer account information such as name, mobile number, email address, password hash, address, city, state, ZIP code, date of birth, consent records, participating-business relationships, reward balances, and transaction activity. We may collect business account information such as business name, owner or administrator contact details, login credentials, subscription status, billing history, loyalty settings, customer records, and transactions entered by the business.

We may also collect technical and usage information such as browser type, device type, IP address, pages viewed, approximate location derived from IP address, timestamps, diagnostic information, and security events.

3. How we use information

We use information to create and secure accounts; operate loyalty programs; display balances and activity; connect customers with participating businesses; process purchases and reward redemptions; provide QR links and business dashboards; manage subscriptions; prevent fraud and abuse; maintain, troubleshoot, and improve the service; communicate service notices; and comply with legal obligations.

4. Passwords and account security

Passwords are intended to be stored as secure password hashes rather than readable passwords. Users are responsible for protecting their credentials and should contact us promptly if they suspect unauthorized account activity. No method of storage or transmission is completely secure, but we use reasonable administrative and technical safeguards appropriate to the service.

5. Payments

Business subscription payments may be processed by Stripe or another disclosed payment processor. Payment-card details are handled by the payment processor and are subject to that provider’s privacy policy. LOYALTY US may receive limited billing information such as payment status, amount, transaction identifier, subscription dates, and the last four digits or brand of a payment method when provided by the processor.

6. Analytics, cookies, and similar technologies

We may use cookies, local storage, and privacy-focused analytics tools, including Vercel Analytics when enabled, to maintain sessions, remember account state, measure website performance and usage, diagnose errors, and improve the service. Browser settings may allow users to limit certain storage technologies, although doing so may affect account functionality.

7. How we share information

We may share information with participating businesses as needed to operate their loyalty programs; with infrastructure, database, hosting, analytics, security, communications, and payment providers that process information on our behalf; when required by law or valid legal process; to protect users, the service, or the public; or as part of a merger, financing, reorganization, or sale of the business. We do not sell personal information for money.

8. Participating businesses

Participating businesses control their own customer relationships, loyalty offers, communications, and any information they collect outside LOYALTY US. Their privacy practices may differ from ours. Customers should review any notices provided by the business whose loyalty program they join.

9. Data retention

We retain information for as long as reasonably necessary to provide the service, maintain security and transaction records, resolve disputes, enforce agreements, and meet legal, tax, accounting, and regulatory obligations. Retention periods may vary by data type and account status.

10. Access, correction, and deletion requests

Users may request access to, correction of, or deletion of their account information, subject to identity verification and legal exceptions. Some transaction, security, billing, or compliance records may need to be retained. Requests can be submitted through the support method provided in the service or on this website.

11. U.S. state privacy rights

Residents of certain U.S. states may have rights to know, access, correct, delete, or obtain a copy of personal information, and to appeal a denied request. Applicable rights and exceptions depend on the user’s state and our legal obligations. We will not discriminate against a user for exercising an applicable privacy right.

12. Children’s privacy

LOYALTY US is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that such information was collected, we will take reasonable steps to delete it.

13. Changes to this policy

We may update this Privacy Policy as the service, providers, or legal requirements change. The updated date at the top of the page will show when the policy was last revised. Material changes may also be communicated through the service when appropriate.

14. Contact

Questions, privacy requests, and security reports may be submitted through the support contact provided in the LOYALTY US service or on this website. We may request information needed to verify the requester’s identity and authority before completing a request.