Point5 LLC ("we," "us," or "our") operates LoyalTrak, a visit pass and loyalty management platform. This Privacy Policy explains how we collect, use, and protect information when you use LoyalTrak — whether as a business customer or as a consumer purchasing a pass from a LoyalTrak-powered business.
1. Who This Policy Covers
This policy covers two types of users:
- Business customers — businesses that create LoyalTrak accounts to sell and manage visit passes
- Consumers (pass holders) — individuals who purchase passes from LoyalTrak-powered businesses
2. Information We Collect from Business Customers
Account information
- Name and business name
- Email address and password (password is hashed — never stored in plain text)
- Business contact information (phone, address, website)
- Terms of Service acceptance timestamp and IP address
Billing information
Payment card information is collected and stored exclusively by Stripe. LoyalTrak does not store card numbers, CVVs, or full billing details. We receive only limited billing metadata from Stripe (e.g., last 4 digits, card type, billing status).
Usage data
- Pass types created, pass sales, redemption activity
- Login activity and session information
- Aggregate analytics (page views, feature usage) via Plausible Analytics
3. Information We Collect from Pass Holders
When you purchase a pass from a business using LoyalTrak, we collect:
- Name and email address (required for pass confirmation and balance link)
- Phone number (optional, if provided)
- SMS opt-in preference (if you choose to receive balance reminders)
- Purchase details (pass type, amount paid, date)
- Redemption history (dates and credits used)
4. How We Use Your Information
For business customers
- Provide, maintain, and improve the LoyalTrak platform
- Process subscription payments via Stripe
- Send account-related emails (welcome, billing receipts, platform notifications)
- Respond to support requests
- Comply with legal obligations
For pass holders
- Send your pass confirmation email and balance link
- Enable you to view your pass balance and QR code
- Send SMS balance reminders (only if you opted in)
- Allow the business's staff to verify and redeem your passes
5. How We Share Information
We do not sell, rent, or share personal data with third parties for marketing purposes. We share data only in these circumstances:
- With Stripe — to process payments and manage subscriptions
- With Resend — to send transactional emails on our behalf
- With Supabase — our database provider, for data storage
- With the business — pass holder information is visible to the business whose pass you purchased
- Legal requirements — if required by law, court order, or to protect the safety of users
6. Analytics
LoyalTrak uses Plausible Analytics for website analytics. Plausible is a privacy-friendly analytics tool that:
- Does not use cookies
- Does not collect or store personal information
- Does not track users across websites
- Is fully compliant with GDPR, CCPA, and PECR without requiring a cookie banner
7. Data Retention
- Active accounts — data is retained for the duration of the account relationship
- Cancelled accounts — data is retained for 30 days after account closure to allow data export, then permanently deleted
- Pass holder data — retained for the duration of the business's account, then deleted with the business account
- Billing records — retained as required by applicable law (typically 7 years)
8. Your Rights
Depending on your location, you may have rights regarding your personal data, including the right to access, correct, delete, or export it. To exercise these rights, contact us at support@loyaltrak.com.
Pass holders may request deletion of their data by contacting us with their email address. Note that deletion of pass holder data may affect the business's redemption records.
9. Security
We take reasonable measures to protect your data, including encrypted data transmission (HTTPS), hashed passwords, and access controls on our database. No system is completely secure; we cannot guarantee absolute security.
10. Children's Privacy
LoyalTrak is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us at support@loyaltrak.com.
11. Data Breach Notification
In the event of a data breach affecting personal information stored on the LoyalTrak platform, we will notify affected business customers and, where required, affected pass holders as required by applicable state law. Ohio law and the laws of many other states require notification within a specific timeframe (typically 45–90 days of discovery). We will provide notification by email to the address on file. If you believe your data may have been compromised, contact us immediately at support@loyaltrak.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify business customers of material changes by email. The updated policy will be posted at loyaltrak.com/privacy with a new effective date.
13. Contact Us
Point5 LLC operating as LoyalTrak
Cleveland, Ohio
Email: support@loyaltrak.com