Privacy Policy

StampWise ("we", "us", "our") provides digital loyalty stamp cards for businesses and their customers. This Privacy Policy explains what information we collect, why we collect it, and how we handle it.

1. Information we collect

Account information

When a merchant signs up, we collect business name, contact name, email address, password (hashed), and billing details processed by our payment provider.

Customer information

When a customer joins a loyalty card, we collect the identifiers required to operate the card — typically name, email, and/or phone number — along with stamp activity associated with that card.

Usage and device data

We collect basic technical data such as IP address, browser type, device identifiers, and interaction events necessary to operate, secure, and improve the service.

2. How we use information

• To provide and maintain the StampWise service
• To authenticate users and prevent fraud (including referral abuse)
• To process payments and manage subscriptions
• To send transactional notifications (stamps earned, rewards unlocked, account updates)
• To respond to support requests and improve the product
• To comply with legal obligations

3. Legal bases (GDPR)

We process personal data on the basis of contract performance (operating accounts and cards), legitimate interests (security, product improvement), consent (where required, e.g. marketing notifications), and legal obligations.

4. Sharing

We do not sell personal data. We share data only with: (a) merchants, with respect to their own customers' activity on their cards; (b) sub-processors that host or operate the service (cloud hosting, email delivery, payment processing); and (c) authorities where required by law.

5. Data retention

Account data is retained for the life of the account and for a reasonable period after closure to meet legal and accounting obligations. Customer card data is retained as long as the card remains active or until deletion is requested.

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact privacy@stampitnow.com.

7. Security

We use industry-standard safeguards including TLS in transit, encryption at rest, hashed passwords, role-based access control, and row-level security on our database. See our Security page for details.

8. International transfers

Data may be processed in countries other than your own. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

9. Children

StampWise is not directed to children under 13 (or 16 in the EEA).

10. Changes

We may update this policy. Material changes will be communicated by email or in-app notice before they take effect.

11. Contact

Questions? Email privacy@stampitnow.com.