Indie Rewards Privacy Policy

Last Updated: September 6, 2024

1. Introduction

Welcome to Indie Rewards. We are committed to protecting the personal information and privacy rights of both our business clients and their customers. This Privacy Policy explains how we collect, use, disclose, and safeguard information for both user types when using our digital stamp card service.

2. Definitions

- "Business Users" refers to businesses that use Indie Rewards to offer loyalty programs to their customers.
- "End Users" refers to individual customers who participate in loyalty programs offered by our Business Users through Indie Rewards.

3. Information We Collect

3.1 Business Users
We collect the following information from our Business Users:
- Business name and contact information
- Login credentials (email and password)
- Loyalty program details and settings
- Payment information

3.2 End Users
We collect the following information from End Users:
- Email address
- Password (encrypted)
- Stamp card data and reward redemption history
- Temporary GPS location data (in specific cases, see details below)

3.2.1 GPS Location Data
In some cases, we may collect GPS location data from End Users. This occurs only when:
- The specific Business requires location verification for their loyalty program
- The End User is actively attempting to earn a stamp
Important notes about GPS location data:
- This data is collected solely to verify the End User's presence in the store
- The GPS location data is not stored or persisted in our systems
- It is used only for immediate verification and then discarded
- End Users will be prompted to allow location access when it's required

4. How We Use Your Information

4.1 Business Users
We use Business User information to:
- Provide and maintain our service
- Process payments and manage accounts
- Offer customer support
- Communicate about service updates and features
- Generate analytics and insights about loyalty program performance

4.2 End Users
We use End User information to:
- Facilitate participation in loyalty programs
- Process stamp card transactions and reward redemptions
- Authenticate users and manage accounts
- Communicate about account activity and rewards
- Verify in-store presence for stamp collection or reward redemption, when required by the Business User (using temporary GPS data)

5. How We Share Your Information

5.1 Business Users
We may share Business User information with:
- Service providers (e.g., payment processors, hosting services)
- Legal authorities when required by law

5.2 End Users
We may share End User information with:
- The specific Business whose loyalty program the End User is participating in (limited to relevant stamp card and reward data)
- Service providers (e.g., hosting, database management)
- Legal authorities when required by law
We do not sell personal information of either Business Users or End Users to third parties.

6. Data Security

We implement industry-standard security measures to protect both Business User and End User data, including:
- Secure authentication through Supabase
- Encrypted database storage
- Regular updates

7. Your Rights

Both Business Users and End Users have the right to:
- Access the personal information we hold about them
- Request correction of their personal information
- Request deletion of their account and associated data
- Opt-out of marketing communications

8. Business Users' Responsibilities

Business Users are responsible for:
- Using End User data provided through Indie Rewards only for the purposes of managing their loyalty program
- Complying with applicable data protection laws in their jurisdiction when handling any additional customer data outside of the Indie Rewards platform
- Ensuring that their use of the Indie Rewards platform aligns with their own privacy policies and customer agreements
- Informing their customers about their participation in the Indie Rewards program and directing them to the Indie Rewards privacy policy for information on data handling practices

9. Indie Rewards' Responsibilities

Indie Rewards is responsible for:
- Obtaining necessary consents from End Users for data collection and processing through our platform
- Providing clear information to End Users about how their data will be used and shared
- Ensuring that Business Users only have access to the End User data necessary for managing their loyalty programs
- Implementing and maintaining appropriate technical and organizational measures to protect user data

10. Changes to This Policy

We may update this policy from time to time. We will notify both Business Users and End Users of any significant changes by email or through our service.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
Email: [email protected]
Indie Rewards, LLC