Privacy Policy

1. Introduction

DoLoyalty ("we," "us," or "our") operates a digital loyalty card platform that connects customers with local businesses. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service at doloyalty.com.

2. Information We Collect

We collect information you provide when creating an account or using the service:

• Identity data: first name, last name
• Contact data: email address, phone number
• Profile data: date of birth (used for birthday rewards)
• Loyalty data: visit history, punch counts, points balances, and redeemed rewards
• Business data (for business owners): business name, address, and program configuration

We also automatically collect limited technical data, including session tokens and cookies necessary to keep you signed in and to secure your account.

3. How We Use Your Information

• To create and manage your loyalty account
• To track punches, points, and reward eligibility
• To notify you when rewards are earned or are ready to redeem
• To allow businesses to verify and fulfill your rewards
• To improve the platform and diagnose technical issues

4. Data Sharing

We do not sell your personal data. We share your information only in these limited circumstances:

• With businesses you patronize: When you earn or redeem a reward at a business on DoLoyalty, that business can see your name, loyalty activity, and reward status for their program only.
• Service providers: We may use trusted third-party vendors (e.g., email delivery, hosting) who process data solely on our behalf and under strict confidentiality obligations.
• Legal requirements: We may disclose information if required by law or to protect the rights and safety of our users.

5. Cookies and Session Tokens

We use session cookies and persistent authentication tokens to keep you logged in securely. These are stored in your browser and are not used for advertising purposes. You can clear cookies at any time through your browser settings, which will sign you out of your account.

6. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

7. Your Rights and Deletion Requests

You may request access to, correction of, or deletion of your personal data at any time by contacting us at support@doloyalty.com. We will respond to all requests within 30 days.

8. Security

We use industry-standard measures including encrypted connections (HTTPS) and hashed passwords to protect your data. No system is completely secure, and we encourage you to use a strong, unique password for your account.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the platform. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests, contact us at support@doloyalty.com.