Privacy Policy

1. Introduction

KeepCo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our loyalty app platform and related services.

If you have any questions about this Privacy Policy, please contact us at contact@keepco.app.

2. Information We Collect

Business Owner Data

When you sign up as a business owner, we collect:

• Email address
• Business name
• Business type and category
• Business logo and branding assets
• Contact information

Loyalty Member Data

When customers use your branded loyalty app, we collect on your behalf:

• Email address
• Name
• Phone number (optional)
• Points balance and tier status
• Visit history and frequency
• Spend history and average transaction value

POS Integration Data

When you connect your Square or Clover account:

• OAuth access tokens (securely stored)
• Merchant IDs and location information
• Menu and inventory data

Transaction Data

• Transaction amounts and timestamps
• Points earned and redeemed
• Items purchased (for rewards tracking)

Technical Data

• IP address
• Browser type and version
• Device information and identifiers
• App usage analytics

3. How We Use Information

We use the information we collect to:

• Build, deploy, and maintain your branded loyalty app
• Process loyalty points and rewards
• Sync transactions with your POS system
• Send push notifications and marketing communications on your behalf
• Generate analytics and customer insights reports
• Improve our platform and develop new features
• Provide customer support
• Comply with legal obligations

4. Data Sharing

We may share your information with:

• Square/Clover: To sync transactions and process payments through your connected POS
• Payment processors: To process subscription payments for your account
• Analytics providers: To understand platform usage and improve our services
• Cloud infrastructure providers: To host and secure your data

We do not sell your personal information or your customers' data to third parties for their marketing purposes.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. If you cancel your subscription:

• You may request a full export of your customer data
• We will delete your data within 90 days of account closure, unless required to retain it by law
• Some aggregated, anonymized data may be retained for analytics purposes

6. Data Security

We implement appropriate technical and organizational measures to protect your data:

• All data is encrypted in transit (TLS/SSL) and at rest
• We use Supabase for secure database hosting with row-level security
• OAuth tokens for POS integrations are securely stored and never exposed
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements for all staff

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct any inaccurate or incomplete data
• Deletion: Request that we delete your personal data
• Portability: Request a copy of your data in a machine-readable format
• Objection: Object to certain types of processing
• Restriction: Request that we restrict processing of your data

To exercise any of these rights, please contact us at contact@keepco.app.

8. Third-Party Services

Our platform integrates with or uses the following third-party services:

• Supabase: Database and authentication infrastructure
• Square: POS integration and payment processing
• Clover: POS integration and payment processing
• Calendly: Consultation booking
• Apple App Store: iOS app distribution
• Google Play Store: Android app distribution

Each of these services has its own privacy policy governing their use of data.

9. Children's Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.