Privacy Policy

LoyaltyChips is operated by Sharka Software, LLC(“LoyaltyChips,” “we,” “us”). This policy explains what we collect, why we collect it, who we share it with, and the choices you have. It applies to loyaltychips.com, the venue dashboard, and the reward pages that LoyaltyChips hosts for venues. It works together with our Terms of Service and Cookie Policy.

Two roles: who controls what

• Venue customer lists.When a customer shares a name and a phone number or email at a venue’s reward page, that information joins the venue’s customer list. For that data, the venue owner is the data controller and LoyaltyChips (Sharka Software, LLC) is the processor. In plain English: the list belongs to the venue, and we store and process it only to run the venue’s loyalty program, on the venue’s instructions.
• Platform accounts, billing, and site analytics. For the accounts people create with us, subscription billing, and analytics on our own site, LoyaltyChips is the controller — we decide how that information is used, and this policy governs it.

Information we collect

• Venue accounts — the email address or phone number a venue owner signs in with (via email magic link, one-time SMS passcode, Google, or Apple), plus venue details, reward configuration, and any logos or artwork uploaded for branding and hardware.
• Member accounts (optional) — rewards members may create an account using the same sign-in options. A member account lets a person view their reward progress across venues.
• Reward claims without an account— a customer may claim rewards anonymously at a venue’s reward page by providing a name and a phone number or email, with checkbox consent. We also record visit and claim activity for that program. This data belongs to the venue’s customer list (see the roles above).
• Payment data — subscription and hardware payments are processed by Stripe. Card details go directly to Stripe and never touch our servers; we receive confirmation of payment and subscription status, not card numbers.
• Usage data— server logs, plus cookieless, aggregate analytics from Vercel that we treat as essential (no cookies, no individual profiles). Optional analytics and advertising tools (PostHog, Google Analytics 4, Meta Pixel) run only after you choose “Accept all” in the cookie banner.

How we use information

• To run loyalty programs: serve reward pages, track progress, and issue rewards.
• To maintain each venue’s customer list on the venue’s behalf.
• To sign you in and secure your account.
• To bill subscriptions, fulfill hardware orders, and provide support.
• To send transactional messages: sign-in links and passcodes, receipts, and service notices.
• To secure, maintain, and improve the service.

Text messages and email

• One-time passcodes are transactional.We send an SMS passcode only when you request one to sign in. Carriers’ message and data fees may apply.
• Marketing comes from venues, and only with separate consent. A venue may send marketing texts or emails only to customers who checked the separate, optional marketing-consent box. Reply STOP to any marketing text to stop receiving them; marketing emails include an unsubscribe link.
• Transactional email is delivered through Resend.

Service providers (subprocessors)

We share data only with the providers that help us run LoyaltyChips, under contract:

• Supabase — database, authentication, and storage, hosted in the United States.
• Stripe — payment processing. Card data never touches our servers.
• Resend — transactional email (sign-in links, receipts, service notices).
• Vercel — hosting, plus cookieless, aggregate analytics that we treat as essential.
• PostHog, Google Analytics 4, and Meta Pixel — product analytics, traffic measurement, and ad measurement. These three load onlyafter you choose “Accept all” in the cookie banner.

We do not sell personal information.

Cookies and Global Privacy Control

Details of every cookie we set — and exactly when — are in the Cookie Policy. If your browser sends a Global Privacy Controlsignal, we honor it as a decline: the optional analytics and advertising tools do not load, and we do not “share” your data for advertising purposes.

Data retention

We keep account data and venue customer lists while the relevant subscription or account is active, and for a reasonable period afterward, then delete or anonymize them. You can request earlier deletion at any time; venues can also instruct us to delete customer data we process on their behalf.

Your rights and choices

• Depending on where you live (including under the CCPA/CPRA and the GDPR), you may have the right to access, correct, delete, and export your personal data, and to opt out of the “sharing” of your data for targeted advertising. We will not discriminate against you for exercising these rights.
• Venue owners can export their customer list as a CSV from the dashboard at any time.
• Members and customers can request deletion by emailing privacy@loyaltychips.com or by asking the venue directly. Because the venue controls its customer list, requests about a specific venue’s program may be fastest through that venue — but if you come to us, we will assist and route your request.
• To opt out of analytics and advertising cookies, decline in the cookie banner, change your choice anytime via the “Cookie preferences” link in the site footer, or use a browser that sends a Global Privacy Control signal.

Security

Data is encrypted in transit, database access is restricted with row-level security, and secrets are kept server-side. No system is perfectly secure, but protecting your data is a design requirement, not an afterthought.

Children

LoyaltyChips is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We will update this policy as the product evolves and revise the effective date above. For material changes, we will notify account holders by email at least 30 days before the changes take effect.

Questions about this policy or your data? Write to privacy@loyaltychips.com.