Privacy Policy

When you create a merchant account, we collect your account and business details, contact information, billing references, and communications with us, including conversations with our AI assistant.

When customers join a merchant's loyalty program, we process the information that program requests, such as names, email addresses, phone numbers, loyalty balances, and reward activity. We also process the identifiers needed to deliver and update digital passes.

If a merchant connects a point-of-sale system, such as Square, we import that merchant's sales records on its behalf, as described in section 6.

We collect technical and usage information, such as browser and device details, IP addresses, pages visited, and service errors. Optional analytics and session recordings are described below.

We use information to provide loyalty programs, manage accounts and subscriptions, deliver rewards, provide support, prevent fraud, keep the service reliable, and meet legal obligations. With your permission, we also use analytics to understand navigation and identify confusing or broken features.

We do not sell personal information. We do not use customer pass data for third-party advertising.

Each merchant decides what information its loyalty program collects and how the program uses it. We process that information on the merchant's behalf. Please contact the merchant about its program, rewards, or customer-data requests.

StayLoyal is responsible for information used to operate our own merchant accounts, billing, security, support, and website.

We share information with providers that support hosting, data storage, account security, payments, email delivery, analytics, artificial intelligence, and digital-wallet functionality. They receive information relevant to the services they provide.

We may also disclose information when required by law or necessary to protect users and the service. Information may be processed outside your country, subject to applicable safeguards and legal requirements.

Merchants on eligible plans can ask Ask StayLoyal, our AI assistant, questions about their loyalty program. To answer, we send the merchant's question and the relevant loyalty activity to an AI model provider. This can include customers' first names and last initials, visit and reward counts, and program and location names. Phone numbers, email addresses, and full surnames are not sent.

If the merchant has connected a point of sale, answers can also use sales figures, item names, and the spending of individual loyalty members, shown by first name and last initial. Card details are never sent.

We only use AI model providers that do not use this information to train their models, and we choose providers that do not retain it. The assistant suggests campaigns but cannot send messages; a merchant must review and send them.

We store each merchant user's conversations with the assistant so they can return to them. A conversation is visible only to the user who started it, in that workspace. Conversations do not expire automatically. They are deleted when the user deletes them, when the user leaves the workspace or their account is deleted, or when the workspace is deleted. When a merchant deletes a customer, any conversation that listed that customer is also deleted.

Merchants on eligible plans can connect a point-of-sale (POS) account, such as Square, to get sales insights. The merchant grants StayLoyal read-only access, which it can revoke at any time in StayLoyal or with the POS provider. We import completed orders, items, discounts, refunds, tips, and the time and location of each sale. We do not receive or store card numbers.

To show how loyalty members spend, we compare the phone number or email on the POS customer profile attached to a sale with the merchant's loyalty members. These contact details are used only for that comparison and are not stored; we keep only the resulting match.

Access credentials are encrypted. When a merchant connects, we import up to 13 months of past sales and keep sales data while the merchant uses StayLoyal. A merchant can disconnect and delete all imported sales at any time; disconnecting without deleting keeps past sales for reporting. Imported sales are deleted when the workspace is deleted, and when a merchant deletes a loyalty customer, that customer's sales are no longer linked to them.

Essential cookies keep you signed in, support security, and remember your preferences. They are needed for those features to work.

With your consent, optional analytics and session recordings help us understand clicks, scrolling, navigation, and feature usage on our website and merchant pages. Sensitive fields are masked or excluded; passwords, payment details, and customer pass content are not included in these recordings.

We use Microsoft Clarity for heatmaps and session recordings on our public marketing pages. Microsoft also processes this website-usage data as described in the Microsoft Privacy Statement linked below.

You can decline optional tracking and still use the service. Change or withdraw your choice through Cookie preferences in the footer, account menu, or on this page. Withdrawal stops new optional collection; information already collected remains subject to our retention policy. We also use limited operational and aggregate performance information to keep the service reliable.

Microsoft Privacy Statement

We retain information for as long as reasonably needed to provide the service, meet legal and accounting requirements, resolve disputes, and protect security. The period depends on the type of information and its purpose.

We use technical and organizational safeguards, including encryption and access controls, to protect information. No service can guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a copy of your personal information. Contact us to make a request. We may need to verify your identity, and legal exceptions may apply.

Merchants can update account details in the portal. For information held as part of a loyalty program, contact the merchant that issued your card; we can help direct your request.

We may update this policy as the service changes. We will publish the current effective date and request renewed consent when legally required.

Privacy questions and requests can be sent to support@stayloyal.app. StayLoyal Software Inc. is responsible for this policy.