Privacy Policy

1. Who We Are

MyLoyalink is operated by Xtek AI LLC, located at United States. You can reach us for any privacy question at info@myloyalink.com.

2. If You Are an End Customer: Who Is Responsible for Your Data

When you join a loyalty program through a business using MyLoyalink, that business — not MyLoyalink — decides what information is collected about you, why it's collected, and how long it's kept. MyLoyalink is the technology platform the business uses to run its program: we store the data, generate your wallet pass, and send the notifications the business asks us to send, but we do this on the business's instructions, not our own.

This means:

• The business you enrolled with is responsible for telling you how they use your data, and for honoring your requests to access, correct, or delete it.
• MyLoyalink does not use your individual name, email, phone number, or birthday for our own marketing, our own advertising, or to build a profile of you. The only way we look at loyalty-program data across businesses is in combined, anonymized form — for example, "the average customer earns 4 stamps a month" — never tied back to you by name.
• MyLoyalink does not sell your personal information, to anyone, ever.

To access, correct, or delete your information, please contact the business you're enrolled with first — they have direct visibility into your account and control your data. If you've contacted the business and haven't received a response within 30 days, or the business is no longer operating, you may contact us directly at info@myloyalink.com and we will process your request on the business's behalf, consistent with our data processing agreement with them.

3. If You Are a Business Owner: How This Applies to You

As a Business Owner, you are the party responsible for the personal information of your own customers collected through your loyalty program — sometimes called being the "controller" or "business" under privacy law, with MyLoyalink acting as your "processor" or "service provider." This means:

• You're responsible for telling your customers how their data will be used (a short in-app or point-of-sale notice is usually enough) and for complying with the privacy laws that apply to your business and your customers' location.
• You're responsible for responding to your customers' requests to access, correct, or delete their data. MyLoyalink gives you the tools to do this from your dashboard.
• MyLoyalink processes your customers' data only according to your instructions and the terms of our Data Processing Addendum, which is part of your agreement with us.
• Your own account information (your name, email, business details, and payment information) is handled by MyLoyalink as our own responsibility — for that data, we are the ones who decide how it's used, as described in Section 5 below.

4. Information We Collect

From Business Owners (about their own account):

• Name, email address, and login credentials
• Business name, address, and category
• Billing and payment information (processed by our payment provider — we do not store full card numbers)

From End Customers (on behalf of, and at the instruction of, the Business Owner):

• Name, phone number, email address, and birthday, where the business collects these to enroll you in their program
• Visit and transaction data used to calculate stamps and rewards
• Wallet pass activity (e.g., when your pass is viewed or updated)

From anyone using the Platform:

• Device and usage data (browser type, device type, general performance and error data) to keep the Platform working and secure
• Location data, only if you've explicitly enabled it (for example, for location-based notifications)
• Cookies and similar technologies — see our Cookie Policy for details

5. How We Use Information

Information we use as the responsible party (our own account data, and aggregated/anonymized platform data):

• To operate and maintain your MyLoyalink account and billing
• To provide customer support
• To understand overall platform usage in combined, anonymized form (never tied to an individual End Customer) so we can improve MyLoyalink
• To detect, prevent, and respond to fraud, abuse, and security incidents
• To comply with legal obligations

Information we use only on a Business Owner's instructions (End Customer loyalty data):

• To issue and update digital stamp cards and wallet passes
• To calculate and apply stamps, rewards, and program status as defined by the business
• To send the push notifications and reward updates the business has configured
• To give the Business Owner access to their own customers' data through their dashboard

We do not use individual End Customer data for MyLoyalink's own marketing, advertising, or profiling, and we do not sell personal information.

6. How We Share Information

We share information only as needed to run the Platform:

• Apple Wallet and Google Wallet, to generate and update your digital pass
• Payment processors, to handle billing for Business Owner accounts
• Hosting and infrastructure providers, to store and secure data
• Analytics providers, using aggregated or pseudonymized data where possible
• The Business Owner, who can see their own customers' data through their dashboard
• Law enforcement or regulators, only where required by law

A current list of the third-party service providers (sub-processors) we use is available on request at info@myloyalink.com.

We do not sell personal information to third parties, and we do not share End Customer data across unrelated businesses.

7. International Data Transfers

MyLoyalink is based in the United States. If you are located outside that country, your information may be transferred to, stored, and processed there or in other countries where our service providers operate. Where required by applicable law (including transfers of personal data originating in the European Economic Area, the United Kingdom, or Brazil), we use appropriate safeguards, such as Standard Contractual Clauses or an equivalent legal mechanism, to protect your information.

8. Data Retention

• Business Owner account data is retained for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, or dispute-resolution obligations.
• End Customer loyalty data is retained according to the Business Owner's instructions and settings, typically for as long as the loyalty program relationship is active, and is deleted upon the business's request, account closure, or as required by our data processing agreement with the business.

9. Your Privacy Rights

Depending on where you live, you may have rights to:

• Access the personal information we (or, for End Customers, the Business Owner) hold about you
• Correct inaccurate information
• Delete your information, subject to certain legal exceptions
• Object to or restrict certain processing
• Receive a copy of your information in a portable format
• Opt out of the sale or sharing of personal information (MyLoyalink does not sell personal information)
• Not be discriminated against for exercising these rights

To exercise these rights: End Customers should contact the relevant business first, per Section 2 above. Business Owners, and End Customers whose business is unresponsive, should contact info@myloyalink.com. We will respond within the timeframe required by applicable law.

If you are in the European Economic Area, the United Kingdom, or a similar jurisdiction, you also have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

MyLoyalink is not directed at children, and Business Owners must be at least 18 years old to create an account. We do not knowingly collect personal information from children through the Platform. If you believe a child's information has been collected, please contact info@myloyalink.com.

11. Data Security

We use reasonable technical and organizational measures — including encryption in transit, access controls, and regular security review — to protect information against unauthorized access, loss, or misuse. No system is completely secure, and we encourage Business Owners to use strong, unique credentials for their accounts.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify users of significant changes via email or a notice on the Platform, and will update the effective date above.

13. Contact Us

For any privacy question, or to exercise your rights as described above, contact us at info@myloyalink.com.