Draft for review. Have a lawyer review this and fill in the bracketed parts before you sell to customers.

Privacy Policy

Last updated: [DATE]

[YOUR COMPANY NAME] runs Puncharoo for small businesses. This explains what we collect and why.

Business owners

We collect your email, password (stored scrambled, never readable), store name and settings. Payments are handled by Stripe; we never see or store card numbers.

Shoppers who join a store's rewards program

When you check in at a store, we store your phone number, first name, points, visit history, and whether you agreed to receive texts (with the exact wording you agreed to and the time). This information belongs to the store you joined and is only visible to that store. We do not sell it, and we do not share it with other stores.

How we use it

• To run the rewards program for the store.
• To send texts only if you agreed, and only on behalf of that store. Reply STOP to any text to opt out.
• To keep the service secure and working.

Who we share it with

Service providers that help us run the service: Supabase (database hosting), Stripe (payments), and, when texting is turned on, our text message provider. They may only use the data to provide their service to us.

Keeping and deleting data

Stores can delete a shopper's information at any time from their dashboard. To ask for your information to be deleted, contact the store you joined or email us at [EMAIL].

Contact

[YOUR COMPANY NAME], [MAILING ADDRESS]