Privacy Policy

1. Who We Are

LoyalLoop is a digital loyalty card platform for Indian small and medium businesses. We help businesses retain customers through points, stamps, and rewards programs.

• Platform Name: LoyalLoop
• Website: https://loyalloop.in
• Email: support@loyalloop.in
• Location: Haryana, India

2. Information We Collect

For Business Owners:

• Full name and business name
• Email address and phone number
• Business type, city, and address
• Payment information (processed securely by Razorpay)
• Business logo and branding preferences

For Customers (Loyalty Card Holders):

• Full name
• Phone number
• Date of birth (optional, for birthday offers)
• Points balance and transaction history
• Rewards earned and redeemed

Automatically Collected:

• Browser cookies for session management
• Device type and browser information
• IP address
• Pages visited and time spent

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Process loyalty points and rewards
• Send important account notifications
• Process payments (business owners only)
• Improve our platform and services
• Send birthday offers (if date of birth provided)
• Provide customer support
• Comply with legal obligations

4. Cookies

We use cookies to:

• Keep you logged in (365-day session cookie)
• Remember your preferences
• Improve platform performance

You can clear cookies from your browser settings. Clearing cookies will log you out of your account.

5. Data Sharing

We do not sell your personal data to anyone.

We share data only with:

• Supabase (database hosting) — for secure data storage
• Razorpay (payment processing) — for business subscription payments
• Fast2SMS (SMS service) — for OTP delivery
• Vercel (hosting) — for platform delivery
• Legal authorities if required by Indian law

6. Data Security

We protect your data through:

• Encrypted database storage (Supabase)
• HTTPS encryption on all connections
• Hashed passwords and PINs (bcrypt)
• Row-level security on all database tables
• Regular security audits

We process personal data in accordance with applicable Indian laws, including the Digital Personal Data Protection Act (DPDP Act), 2023 where applicable.

7. Data Retention

• Business accounts: Retained while account is active + 90 days after deletion
• Customer loyalty data: Retained while business account is active
• Payment records: Retained for 7 years (legal requirement)
• OTP records: Deleted after 24 hours

8. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Export your data
• Withdraw consent

To exercise these rights, email us at support@loyalloop.in

9. Children's Privacy

LoyalLoop is not intended for users under 18 years of age. We do not knowingly collect data from minors.

10. Changes to This Policy

We may update this policy occasionally. We will notify you via email or dashboard notification for significant changes. Continued use of LoyalLoop after changes means you accept the updated policy.

11. Contact Us

For privacy-related questions:

• Email: support@loyalloop.in
• Response time: Within 48 hours