Privacy Policy

1. Introduction

Loyarax operates a platform that enables retail businesses ("Merchants") to manage customer loyalty programs, send SMS and email communications, and run marketing campaigns. We process data on behalf of Merchants and in connection with our own operations. This policy describes what data we collect, how we use it, and your rights.

2. Data We Collect

2.1 End-User (Customer) Data

When a Merchant uses our platform, end-user (customer) data may be collected and stored. This data includes:

• Name
• Phone number
• Email address
• Gender
• Date of birth
• Loyalty points, transaction history, and campaign engagement data

Important: All end-user data is collected and stored only with the explicit consent of the end user. The Merchant is solely responsible for obtaining, maintaining, and documenting such consent. Loyarax acts as a data processor on behalf of the Merchant. Any failure to obtain or maintain proper consent, or any misuse of end-user data, is the sole responsibility of the Merchant. Loyarax shall not be liable for the Merchant's failure to comply with applicable consent or data protection laws.

2.2 Merchant (Store Owner) Data

We collect and store the following information from Merchants who use our platform:

• Full name
• Phone number
• Email address
• Brand / business name
• Description of services offered by the store
• Campaigns created (content, targeting, schedules)
• Account credentials, billing information, and usage logs

3. How We Use Data

We use the data described above to:

• Provide, operate, and improve our platform
• Deliver SMS and email messages on behalf of Merchants
• Manage loyalty programs and points
• Process transactions and provide customer support
• Comply with legal obligations and enforce our Terms of Service
• Send service-related communications (e.g., account updates, security alerts)
• Analyze usage patterns to improve our services (in aggregated, anonymized form where possible)

4. SMS and Email Communications

Our platform facilitates SMS and email delivery. By using our services, you acknowledge that:

• SMS and email delivery depends on third-party carriers and providers; we do not guarantee delivery
• Merchants are responsible for ensuring that all messages comply with applicable telecom and marketing laws (e.g., TCPA, GDPR, CAN-SPAM)
• We may retain message logs, metadata, and delivery status for operational and compliance purposes
• We reserve the right to suspend or terminate accounts that send spam or violate applicable laws

5. Data Sharing and Disclosure

We do not sell personal data. We may share data with:

• Service providers (hosting, SMS/email gateways, payment processors) who assist in operating our platform, under strict contractual obligations
• Legal authorities when required by law, court order, or to protect our rights and safety
• Affiliates or acquirers in the event of a merger, acquisition, or sale of assets

6. Data Retention

We retain data for as long as necessary to provide our services, comply with legal obligations, and resolve disputes. End-user data is retained according to the Merchant's account settings and our retention policies. Upon account termination, we may retain certain data for backup, legal, or audit purposes for a period we deem reasonable. We are not obligated to delete data upon request if we have a legitimate basis to retain it.

7. Security

We implement technical and organizational measures to protect data. However, no method of transmission or storage is 100% secure. You use our services at your own risk. We are not liable for unauthorized access, data breaches, or loss of data arising from circumstances beyond our reasonable control.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your data. To exercise these rights, contact us at hello@loyarax.com. For end-users whose data is held by a Merchant, we recommend contacting the Merchant first, as they are the data controller for that relationship. We will respond to valid requests within a reasonable timeframe as permitted by law. We may charge a fee for excessive or repetitive requests.

9. Cookies and Tracking

We use cookies and similar technologies on our website for functionality, analytics, and marketing. By using our site, you consent to such use. You may disable cookies in your browser, but some features may not work properly.

10. International Transfers

Data may be processed and stored in jurisdictions outside your country. By using our services, you consent to such transfer. We rely on appropriate safeguards (e.g., standard contractual clauses) where required by law.

11. Children

Our services are not intended for individuals under 16. We do not knowingly collect data from children. If you believe we have collected such data, contact us and we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy at any time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our services after changes constitutes acceptance. We encourage you to review this policy periodically. Material changes may be communicated via email or in-app notice at our discretion.

13. Contact

For privacy-related questions or requests: hello@loyarax.com