How LoyaltyTap handles data

1. About LoyaltyTap

LoyaltyTap is a QR-based loyalty platform for local businesses. Merchants can create loyalty rewards, display QR codes, let customers join from a browser without downloading an app, track repeat visits, manage reward progress, and review customer feedback and engagement.

This policy applies to our public website, merchant signup and login flows, merchant dashboard, customer-facing loyalty pages, demo/contact forms, Google sign-in flows, and related support or operational communications.

Who is covered

This policy covers merchants and their staff, customers who participate in merchant loyalty programs, visitors who browse the website, and people who contact us for demos, support, or product questions.

2. Information we collect

Merchant account information

When a merchant signs up or completes onboarding, we may collect business name, address, owner or contact name, email address, phone number, password credentials, Google account profile details where Google sign-in is used, selected subscription package, account status, and verification information.

Customer loyalty information

When customers participate in a merchant loyalty program, we may collect information needed to identify the customer within that program, show reward progress, record visits or scans, track rewards claimed, process feedback, and help the merchant manage customer engagement.

Usage, device, and technical information

We may collect browser type, device information, IP address, approximate location derived from technical signals, pages viewed, dates and times of activity, QR visit context, session information, error logs, and security-related events.

Communications and support

If you contact us, book a demo, request support, or communicate through email, phone, WhatsApp, or forms, we may collect your name, business details, contact information, message contents, and related follow-up history.

3. How we use information

We use information to provide, maintain, secure, and improve LoyaltyTap, including to:

• Create, verify, and manage merchant accounts.
• Enable Google sign-in and email/password login flows.
• Operate merchant loyalty programs, QR pages, customer progress, visits, rewards, and feedback.
• Show merchants useful activity, reporting, and engagement information.
• Send verification codes, password recovery messages, service updates, and account notices.
• Respond to support requests, demo requests, and business inquiries.
• Prevent fraud, abuse, unauthorized access, and misuse of the platform.
• Debug errors, measure product performance, and improve usability.
• Manage subscriptions, trials, plan access, billing status, and commercial records.
• Comply with legal, tax, accounting, security, and dispute-resolution obligations.

4. Merchants and customer data

Merchants use LoyaltyTap to run loyalty programs for their own customers. In that relationship, merchants decide what rewards they offer, how they describe those rewards, how staff apply them, and how they communicate with customers.

LoyaltyTap processes customer loyalty information to provide the platform, display reward progress, record activity, and support the merchant's loyalty program. Merchants should use customer information only for legitimate loyalty, support, and business purposes connected to their program.

If you are a customer and have a question about a specific reward, redemption, offer, or business relationship, the participating merchant will usually be the first point of contact. LoyaltyTap can help with platform-related privacy or technical questions.

5. How we share information

We may share information in limited, practical situations:

• With merchants, so they can operate and review their own loyalty programs.
• With service providers that help us host, secure, maintain, analyze, communicate, or support the platform.
• With authentication, email, messaging, payment, analytics, or infrastructure providers where needed for the service.
• With professional advisers, authorities, or other parties where required by law, legal process, safety, or fraud prevention.
• In connection with a business transfer, merger, financing, acquisition, or sale of assets, subject to appropriate confidentiality or legal safeguards.

We do not sell personal information. We also do not allow third parties to use merchant or customer data for their own independent marketing unless you separately consent or the merchant independently provides that information under its own practices.

6. Cookies, storage, and similar technologies

LoyaltyTap may use cookies, browser storage, session storage, local storage, and similar technologies to keep users signed in, remember sessions, protect accounts, preserve pending login or visit flows, route users after signup, and improve the product experience. Read our dedicated Cookie Policy for categories, choices, and examples.

You can control cookies through your browser settings. Some features, including login, session persistence, QR visit flows, and dashboard access, may not work correctly if cookies or storage are disabled.

7. Retention

We keep information for as long as reasonably needed to provide the service, manage active accounts, maintain loyalty history, support reporting, handle billing and accounting, resolve disputes, enforce terms, protect security, and comply with legal obligations.

Retention periods may differ depending on the type of information, whether a merchant account is active, whether data is needed for loyalty history or support, and whether legal or operational obligations require us to keep it longer.

When information is no longer needed, we may delete it, anonymize it, aggregate it, or retain it in backups for a limited period until those backups are replaced or securely removed.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include account authentication, verification flows, access controls, monitoring, and secure service providers.

No online service can guarantee absolute security. Merchants and users should use strong passwords, protect devices, avoid sharing login credentials, and notify us promptly if they believe an account or customer loyalty record has been accessed without authorization.

9. Your choices and rights

Depending on your location and relationship with LoyaltyTap, you may have rights to request access, correction, deletion, restriction, objection, withdrawal of consent, or a copy of certain personal information.

Merchants can update many account details through their account or by contacting us. Customers can contact the participating merchant for reward-specific requests and may also contact LoyaltyTap for platform privacy questions.

We may need to verify your identity or relationship to the relevant merchant program before completing a request. We may decline or limit requests where permitted by law, including where information must be retained for security, legal, billing, or dispute purposes.

10. Children, location, and international services

Children

LoyaltyTap is intended for businesses and general customer loyalty use. It is not directed to children under 13, and we do not knowingly collect information from children under 13 without appropriate consent.

Pakistan-focused service

LoyaltyTap is built primarily for local businesses in Pakistan. Some service providers or hosting infrastructure may process information in other countries, where data protection laws may differ.

External links and services

The website or platform may link to third-party services, such as WhatsApp, Google sign-in, payment providers, or merchant websites. Their privacy practices are governed by their own policies.

11. Changes to this policy

We may update this Privacy Policy as LoyaltyTap evolves, as laws change, or as our operational practices improve. Updated versions will be posted on this page with a new effective date.

If a change is material, we will make reasonable efforts to notify affected users through the website, account dashboard, email, or another appropriate method.