Privacy Policy

This Privacy Policy explains how LoyVue ("we", "us") collects, uses and protects personal data when you visit loyvue.com, use the LoyVue dashboard or branch apps, or hold a loyalty card issued through LoyVue.

1. Who we are and our role

LoyVue is a software service that lets businesses ("Businesses" or "merchants") create digital loyalty programs and issue loyalty cards to their customers ("Cardholders").

• For merchant accounts (the people who sign up and use the dashboard), LoyVue is the data controller.
• For Cardholder data (the customers of a Business), the Business is the data controller and LoyVue acts as a data processor, handling that data only on the Business's instructions to provide the service. If you are a Cardholder, please direct privacy requests to the Business that issued your card; we will support them in answering you.

For privacy and data protection questions, contact us at contact@loyvue.com.

2. Data we collect

Merchant account data

• Account details: full name, business name, email address and password (stored as a secure hash, never in plain text).
• Workspace settings: locations (including addresses and map positions), programs, rewards, products or services, card designs, team members and their roles.
• Billing data: plan, billing period and subscription status. Card payments are handled by Stripe; we do not receive or store full card numbers.
• Communications: messages you send through our contact form or by email.

Cardholder data (processed for Businesses)

• The details entered when a card is issued, such as name and phone number.
• Loyalty activity: card number, program, visits, stamps, points, amount spent, rewards earned and redeemed, transaction dates, the service purchased and the location.
• Wallet data: which wallet the card was added to (Apple Wallet or Google Wallet) and the technical registration needed to update the card on a device.
• If a Business connects an e-commerce integration such as Salla, order information received from that platform to credit loyalty balances.

Technical data

• Log and security data such as IP address, browser type, device information and the pages or actions requested, used to run and protect the service.
• Branch app data: app version and platform, used to check for required updates. The camera is used only to scan loyalty card codes; camera frames are processed on the device and are not stored or uploaded. On Android, scanning uses Google ML Kit (see section 4).

3. How we use data and legal bases

• To provide the service (create accounts, issue and update cards, record visits and rewards, run the dashboard and branch apps) — performance of our contract with the Business.
• To process payments and manage subscriptions through Stripe — performance of contract.
• To send service emails such as password resets, security notices and platform announcements — contract and legitimate interest.
• To keep LoyVue secure and prevent fraud and abuse — legitimate interest.
• To comply with legal obligations, such as tax and accounting records — legal obligation.
• To answer your messages — legitimate interest.

We do not sell personal data, we do not use it for advertising, and we do not operate our own analytics or advertising trackers on our website or in our apps. The only exception is that the barcode scanning library in the Android version of the LoyVue Branch App (Google ML Kit) may send limited technical and diagnostic telemetry to Google, as described in section 4.

4. Service providers we share data with

We share data only with providers that help us run LoyVue, under contracts that require them to protect it:

• Stripe — payment processing and subscription billing. Stripe processes payment data under its own privacy policy.
• Apple (Apple Wallet) and Google (Google Wallet) — to deliver cards to phones and push card updates. Once a card is in a wallet, the wallet provider's own privacy terms also apply.
• Salla — only when a Business chooses to connect its Salla store.
• Cloudflare Turnstile — checks that messages sent through our contact form come from a person.
• OpenStreetMap — map tiles and address search in the dashboard; your browser sends requests, including your IP address, to OpenStreetMap servers.
• Hosting, infrastructure and email delivery providers — to store data securely and to send service emails such as password resets and announcements.
• Google ML Kit — barcode scanning in the Android version of the LoyVue Branch App. See the details below.

Google ML Kit — Android Branch App

LoyVue uses Google ML Kit for barcode scanning on Android devices. The barcode scanning functionality processes camera frames on the device to detect and decode loyalty card barcodes. The LoyVue Branch App does not store or upload the camera frames used for barcode scanning.

Google ML Kit may automatically collect limited technical and diagnostic information related to the performance and use of its APIs. This may include:

• device information
• application/package information
• app version
• performance metrics
• API configuration
• input/output size information

This information may be used by Google for diagnostics, performance monitoring, and usage analytics of the ML Kit APIs.

This applies to the Android version of the LoyVue Branch App. The iOS version uses Apple's Vision framework for barcode scanning and does not use Google ML Kit. LoyVue does not use Google ML Kit for advertising, behavioral tracking, or user profiling. Information transmitted by Google ML Kit is protected in transit using encryption.

We may also disclose data if required by law, to protect our rights or users' safety, or as part of a merger or acquisition, in which case this policy will continue to apply.

5. International transfers

Some providers, including Stripe, Apple and Google, may process data outside your country, including in the United States. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses.

6. How long we keep data

• Merchant account and workspace data: for as long as the account is open. When an account is closed, we delete or anonymise this data within a reasonable period, except where we must keep it longer to meet legal obligations, resolve disputes or enforce our agreements.
• Cardholder data: for as long as the Business keeps it in LoyVue, or until the Business's account is closed.
• Billing and invoice records: for the period required by applicable tax and accounting law.
• Backups: deleted data may remain in backups for a limited time, until those backups are overwritten in the normal course of operations.

7. Account and data deletion

• Merchants can ask us to close their workspace and delete its data by writing to contact@loyvue.com from the account's email address. Before closing, you can ask us for an export of your customer and visit data.
• Businesses can ask us to export or delete a specific Cardholder's record.
• Cardholders can remove a card from Apple Wallet or Google Wallet at any time, which stops further updates to that device. To have your loyalty record deleted, contact the Business that issued the card; if you can't reach them, write to contact@loyvue.com.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive it in a portable format, and to withdraw consent. You also have the right to complain to your local data protection authority. To exercise these rights, contact contact@loyvue.com. We will answer within the time required by law and may need to verify your identity.

9. Security

We use encryption in transit (HTTPS), hashed passwords, access controls and role-based permissions for team members. No system is completely secure, so please use a strong password and tell us immediately at contact@loyvue.com if you suspect unauthorised access.

10. Children

LoyVue is a business service and is not directed at children. Businesses must not use LoyVue to collect data from children below the age of digital consent in their country without the permission required by law.

11. Cookies

We use only the cookies needed to run the website and dashboard. See our Cookie Policy.

12. Changes

We may update this policy as LoyVue changes. We will post the new version here with a new date and, for significant changes, notify account owners by email or in the dashboard.

13. Contact

Questions about privacy: contact@loyvue.com or our Contact & Support page.