Privacy Policy

1. Information We Collect

We collect information you provide directly, including your name, email address, business details, and payment information when you create an account or subscribe to our services.

When merchants use integrations (such as our Shopify app), we process the minimum customer data required to operate loyalty features: typically customer email, name, and order amount. We do not collect more data than needed for points, rewards, and customer account linking.

2. How We Use Your Information

We use your information to provide and improve our loyalty platform services, process transactions, send notifications, and communicate with you about your account.

For merchant integrations, we use end-customer data solely to award and track loyalty points, display balances and rewards, and sync customer records. We do not use this data for unrelated advertising or profiling.

3. Merchant and Customer Roles

Merchants using Ploints are responsible for their relationship with their customers, including providing appropriate notice and obtaining any required consent for loyalty program participation. Ploints processes end-customer data on the merchant's instructions and only for loyalty program functionality.

4. Data Sharing

We do not sell personal information. We do not sell, rent, or trade end-customer data from merchant stores. We share data only with service providers necessary to operate our platform (e.g., hosting, payment processors, email services) and as required by law.

5. Data Retention

We retain merchant account data while the account is active and for a reasonable period afterward to meet legal, billing, or support obligations. End-customer loyalty data is retained while the merchant maintains an active program. When a merchant closes their account or uninstalls an integration, associated integration credentials and shop connection data are deleted. Loyalty records may be deleted upon verified merchant or customer request via privacy@ploints.space.

6. Data Security

We protect data using encryption in transit (HTTPS/TLS), encrypted storage for sensitive credentials, secure authentication, and separation of development and production environments. Database hosting providers encrypt data at rest and encrypted backups. We follow a data-minimization approach and limit internal access to systems that store personal data.

7. Security Incidents

If we become aware of unauthorized access to personal data, we will investigate promptly, take steps to contain the issue, and notify affected merchants without undue delay. Report security concerns to privacy@ploints.space.

8. Your Rights

You have the right to access, correct, or delete your personal data. You can manage your account settings or contact us to exercise these rights.

9. Contact

For privacy-related inquiries, contact us at privacy@ploints.space.