Privacy Policy & Terms of Service

1. Who We Are

VIRO Points ("we", "us", or "our") operates a digital loyalty stamp card platform that connects local businesses with their customers. By using our platform, you agree to the terms below.

2. Information We Collect

Customers: When you register, we collect your name, email address, phone number (optional), and date of birth (optional). We also record stamp activity, rewards earned, and redemptions associated with your account.

Businesses & Staff: We collect your business name, email address, phone number, business address, and staff details. We record loyalty card configurations, stamp and redemption events, and campaign activity.

We do not sell your personal information to third parties.

3. How We Use Your Information

• To operate your loyalty account and track stamps and rewards.
• To allow businesses to identify and reward their members.
• To send you notifications about rewards, campaigns, and account activity.
• To provide birthday rewards if you have shared your date of birth.
• To improve the platform and troubleshoot issues.

4. Data Sharing

When you join a business's loyalty card, that business can see your name and stamp history within their card. Businesses cannot see your password, full phone number, or activity on other businesses' cards.

We do not share your data with advertisers or unrelated third parties.

5. Data Security

All passwords are stored using industry-standard hashing (bcrypt/PBKDF2). Sessions are protected with secure, HTTP-only cookies. We apply security headers on all responses to protect against common web attacks. Access to your account data is limited to authorised users only.

6. Your Rights

You may request a copy of the personal data we hold about you, correction of inaccurate data, or deletion of your account and associated data. To exercise these rights, please contact the platform administrator.

7. Cookies & Sessions

We use a single session cookie to keep you logged in. No third-party tracking or advertising cookies are used. If you choose "Remember me", your session persists for up to 30 days; otherwise it ends when you close your browser or log out.

8. Terms of Service

By using VIRO Points, you agree to:

• Provide accurate information when registering.
• Keep your login credentials confidential.
• Not attempt to manipulate stamp counts, exploit the system, or access other users' accounts.
• Use the platform only for its intended purpose of earning and redeeming genuine loyalty rewards.

We reserve the right to suspend or terminate accounts that violate these terms.

9. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via an in-app notice. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or data requests, please contact the platform administrator through the app or at the email address used to set up your account.