This notice is for Organizations and staff who administer loyalty programs on Loyalú (admin, scan desk, and related staff tools).
1. Organization account data
To run an Organization on Loyalú we process staff emails and authentication data needed to sign in and administer the workspace. Business login is for authorized staff and administrators only.
2. Customer and program data you manage
Organization staff can create and update memberships, progress, offers, prizes, and related records for their own Organization. That operational data is visible to staff with access to the Organization. Loyalú does not use it to run competing stores’ programs.
3. Branch directory and map data
Addresses and map coordinates that staff enter for branches may appear in public discovery surfaces (for example the marketing map and Explore) so Clients can find venues. Keep directory details accurate and appropriate for public display.
4. Security responsibilities
Organizations are responsible for securing staff accounts, devices, and operational practices. Loyalú applies reasonable platform safeguards, but we are not responsible for hacking, account takeover, insider misuse, or incidents caused by Organization practices beyond our direct control—except where required by law for our own proven failures.
5. Sharing and processors
Infrastructure providers that host the Service may process Organization and staff data solely to operate the platform under their agreements with us. We may disclose information if required by law or to protect the integrity of the Service.
6. Retention
We retain platform data for as long as needed to provide the Service and for legitimate operational, legal, or security purposes. Admins may delete or update client records they manage within the product, subject to available features.
7. Related notices
See also the privacy overview and client privacy notice. Questions about a store’s own in-store collection practices should go to that Organization.