Privacy Policy

This policy explains what personal data PerkTrak collects, why, and your rights.

1. Who we are

PerkTrak operates a loyalty and rewards platform. For data you give us directly (your account, billing, demo requests) we are the data controller. For data your customers give you through your loyalty programmes, the business running the programme is the controller and we are the processor.

2. What we collect

• Account data — name, email, password (stored hashed), business name and branding.
• Billing data — handled by Stripe; we store your Stripe customer reference and subscription status, never card numbers.
• Programme data — participants' names, email addresses, stamps, points and reward activity, collected on behalf of the business running the programme.
• Technical data — server logs (IP address, user agent) kept for security and debugging.

3. How we use it

• To provide and secure the service (legitimate interest / contract).
• To take payment and manage subscriptions (contract).
• To send service emails — receipts, password resets, reward notifications. We do not sell personal data or send third-party marketing.

4. Where it goes

• Stripe — payment processing.
• Railway — application hosting.
• Brevo — transactional email delivery.
• Amazon Web Services — file storage (logos, images), where configured.

We only share data with these processors as needed to run the service, under their standard data processing terms.

5. Retention

Account and programme data is kept while your subscription is active and for 90 days after cancellation, then deleted. You can export your data from the admin at any time before that.

6. Your rights

You have the right to access, correct, export, restrict or delete your personal data, and to complain to the ICO. If you are a participant in a business's loyalty programme, contact that business first — they control your data; we will assist them in fulfilling your request.

7. Cookies

We use only essential cookies: a session cookie for login and a CSRF token for form security. No analytics or advertising cookies are set.

8. Contact

Privacy questions: hello@perktrak.com.