Privacy Policy

Point5 LLC ("we," "us," or "our") operates LoyalTrak, a platform businesses use to run digital punch cards, memberships, and prepaid passes. This Privacy Policy explains how we collect, use, and protect information when you use LoyalTrak — whether as a business customer or as a consumer who buys or claims a pass from a business that uses LoyalTrak.

      Key points:
      We do not sell personal data. We do not use advertising trackers or advertising cookies. We do not delete records — pass and visit history is kept so passes stay valid and verifiable — except where the law requires deletion.
    

1. Who This Policy Covers

This policy covers two types of users:

Business customers — businesses that create LoyalTrak accounts to sell or offer passes
Pass holders — individuals who buy, claim, or are issued a pass (paid or free) by a business that uses LoyalTrak

2. Information We Collect from Business Customers

Account information

Name and business name
Email address and password (passwords are stored only in hashed form by our authentication provider — never in plain text)
Business contact information (phone, address, website, logo)
Record of your acceptance of our Terms of Service, including the date and the version accepted

Billing information

Payment card information is collected and stored exclusively by Stripe. LoyalTrak does not store card numbers, CVVs, or full billing details. We receive only limited billing information from Stripe (for example, plan, billing status, and amounts).

Usage data

Pass types created, pass sales and claims, and check-in and redemption activity
Sign-in activity and technical information such as browser type and IP address, as recorded by our hosting and database providers

3. Information We Collect from Pass Holders

When you buy or claim a pass from a business that uses LoyalTrak, or a business issues a pass to you, we collect:

Name and email address (required, so we can send your pass and QR code)
Phone number (optional — it helps the business find your account at check-in)
Pass details (pass type, price paid if any, and dates)
Visit, check-in, and reward history

If you buy a paid pass, your payment is processed by Stripe on behalf of the business. LoyalTrak does not receive or store your card number.

      Note:
      When you get a pass, your relationship is with the business, not with LoyalTrak. The business is the controller of your personal information. LoyalTrak processes it on the business's behalf to provide the service.
    

4. How We Use Information

For business customers

Provide, maintain, secure, and improve the LoyalTrak platform
Process subscription payments via Stripe
Send account-related emails (welcome, billing, and platform notices)
Respond to support requests
Comply with legal obligations and enforce our Terms

For pass holders

Send your pass, QR code, and confirmation by email
Let you view your pass, balance, punch card progress, and QR code
Send emails about your pass on the business's behalf — for example, visit and reward updates, low-balance notices, and expiration reminders
Let the business's staff look up your pass, check you in, and redeem visits and rewards

LoyalTrak does not send marketing emails to pass holders and does not send text messages.

We do not sell, rent, or share personal data with third parties for their marketing purposes. We share data only in these circumstances:

With the business you get a pass from — the business receives your name, email, optional phone number, and pass and visit history. When you buy or claim a pass, you are told that the business may email you about your pass and occasional offers. The business's own privacy practices apply to its emails. To stop receiving offers, use the unsubscribe link in any offer email or contact the business directly. Businesses are required by our Terms to honor unsubscribe requests, follow email marketing laws, and not sell or share your information.
With service providers who help us run LoyalTrak — Stripe (payments), Supabase (database and sign-in), Netlify (website hosting), Resend (email delivery), and Cloudflare (a security check on free-pass sign-up forms that helps block automated abuse). They may use the information only to provide their services to us or to the business.
For legal reasons — if required by law, subpoena, or court order, or to protect the rights, safety, or property of LoyalTrak, our users, or others
In a business transfer — if Point5 LLC or LoyalTrak is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy

6. Cookies and Analytics

LoyalTrak does not use advertising cookies or cross-site tracking. We use your browser's storage only to keep business users signed in and to remember simple display settings. If we add website analytics, we will use a privacy-friendly tool that does not use cookies or collect personal information, and we will update this policy. Because we do not track users across websites, we do not respond differently to browser "Do Not Track" signals.

7. Data Retention

      We do not delete records.
      Account data, pass holder information, and pass, visit, and redemption history are retained indefinitely — including after a business cancels its account, stops paying, or is suspended or terminated — so that passes remain valid and verifiable and transaction records stay accurate. The only exception is where deletion is required by applicable law.
    

Business accounts — retained indefinitely, including after cancellation
Pass holder data — retained indefinitely as part of the business's pass and visit records
Billing records — retained indefinitely

8. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, or delete your personal information, or to receive a copy of it. We will respond to requests as required by applicable law.

Pass holders: because the business is the controller of your information, please contact the business first. You may also email us at support@loyaltrak.com from the email address on your pass, and we will work with the business to respond.
Deletion requests: where the law gives you a right to deletion, we will honor it, subject to the exceptions the law allows — for example, keeping records needed to honor a pass you still hold, complete a transaction, or comply with a legal obligation. We honor a deletion request by permanently removing your name, email address, phone number, and notes; the related pass and visit records are kept in de-identified form, with no personal details attached, so the business's records stay accurate.
Marketing emails from a business: use the unsubscribe link in the email or contact the business directly.

9. Security

We take reasonable measures to protect your data, including encrypted data transmission (HTTPS), hashed passwords, database access controls, and safeguards that prevent records from being deleted. No system is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

LoyalTrak is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at support@loyaltrak.com.

11. Data Breach Notification

If a data breach affects personal information stored on LoyalTrak, we will notify affected business customers and, where required, affected pass holders, as required by applicable state law. We will provide notice by email to the address on file. If you believe your data may have been compromised, contact us immediately at support@loyaltrak.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify business customers of material changes by email. The updated policy will be posted at loyaltrak.com/privacy.html with a new effective date.

13. Contact Us

Point5 LLC operating as LoyalTrak
Cleveland, Ohio
Email: support@loyaltrak.com