Privacy Policy
Loyalty depends on trust. This policy explains what data the platform holds for brands and their members, why, and the choices each person has.
Two kinds of data
The platform handles two kinds of personal data. Account data belongs to the people at a brand who use the dashboard, such as owners, marketers and cashiers. Member data belongs to the shoppers who join a brand's loyalty programme.
For account data we decide how it is used. For member data the brand decides, and we process it only on the brand's instructions to run its loyalty programme.
Account data we collect
- Name, work email, role and city given at sign up
- Brand name, category, number of stores and expected member count
- Login activity, device and browser details, and actions taken in the dashboard
- Billing details for paid plans, handled by our payment provider
Member data processed for brands
- Mobile number and the consent records captured at enrolment
- Optional details the member chooses to give, such as name, birthday month and preferred store
- Bills, items, stores, points earned and redeemed, tier and referral history
- Channel preferences and message delivery, read and opt-out events
We never ask members for religion, caste, health, ethnicity, political opinions, sexual orientation, financial account numbers or any similar sensitive trait, and brands are not permitted to upload such data.
Consent and member choices
A member joins only after agreeing to the programme terms. Consent to marketing messages is a separate, optional choice for each channel. Members can change channels, pause messages, check what is held about them, leave the programme or ask for their data to be deleted at any time, through the brand, by replying STOP, or from their member page.
These rights are designed to meet the Digital Personal Data Protection Act, 2023 and similar laws in the places brands operate.
How AI is used
The AI Loyalty Planner groups members by purchase behaviour within one brand only. It does not combine members across brands, does not infer sensitive traits and does not make decisions with legal or similarly significant effects. Every campaign it suggests must be approved by a person at the brand before anything is sent.
Member data from one brand is never used to train models that serve another brand.
Messages
Campaign messages go only to members who opted into that channel. Brands set a frequency cap per member, quiet hours are applied, and every message carries an easy way to opt out. Opt-outs take effect immediately for future sends.
Security
Data is encrypted in transit with TLS and at rest. Access inside a brand workspace is limited by role and store. Our staff access member data only to provide support requested by the brand, and such access is logged.
Retention and deletion
Member data is kept for as long as the brand runs its programme and the member stays enrolled. When a member leaves or asks for deletion, their personal details are removed and their past bills are kept only in anonymous form for the brand's reports. When a brand closes its account, its data is exported on request and then deleted within 90 days.
Changes
If we change this policy in a way that affects how member or account data is used, we will tell account owners by email before the change applies.
Questions about this page can be sent through the Member Desk.