Privacy Policy & Terms of Service

1. Who We Are

VIRO Points ("we", "us", or "our") operates a digital loyalty stamp card platform that connects local businesses with their customers. By using our platform, you agree to the terms below.

2. Information We Collect

Customers: When you register, we collect your name, email address, phone number (optional), and date of birth (optional). We also record stamp activity, rewards earned, and redemptions associated with your account.

Businesses & Staff: We collect your business name, email address, phone number, business address, and staff details. We record loyalty card configurations, stamp and redemption events, and campaign activity.

Business setup requests: If you submit a business registration request, we collect the business and contact details you provide, including location information and any optional website or loyalty goals. These details are emailed to the VIRO Points administrator to review your request and contact you about setup. Submitting a request does not create an active business account.

We do not sell your personal information to third parties.

For customer QR check-ins, we request your phone's location after you choose to earn a stamp, check it against the business's map pin and apply repeat limits. Your precise coordinates are used for this check but are not saved in the loyalty record. We retain the check-in timestamp, approximate distance and reported location accuracy. A location check indicates reported proximity, not proof of a purchase. Staff/manual purchase records may also include purchase amounts or receipt references. Pro businesses can use loyalty activity for customer groups, retention analysis, referral tracking and reward expiry. Spending groups use recorded amounts, not estimates from points. Promotional email requires your opt-in; change it in your profile or use the unsubscribe link in an email. Opting out does not stop service messages or change your points.

3. How We Use Your Information

• To operate your loyalty account and track stamps and rewards.
• To allow businesses to identify and reward their members.
• To send you notifications about rewards, campaigns, and account activity.
• To provide birthday rewards if you have shared your date of birth.
• To improve the platform and troubleshoot issues.

4. Data Sharing

When you join a business's loyalty card, that business can see your name and stamp history within their card. Businesses cannot see your password, full phone number, or activity on other businesses' cards.

We do not share your data with advertisers or unrelated third parties.

5. Data Security

All passwords are stored using industry-standard hashing (bcrypt/PBKDF2). Sessions are protected with secure, HTTP-only cookies. We apply security headers on all responses to protect against common web attacks. Access to your account data is limited to authorised users only.

6. Your Rights

You may request a copy of the personal data we hold about you, correction of inaccurate data, or deletion of your account and associated data. To exercise these rights, please contact the platform administrator.

7. Cookies & Sessions

We use a single session cookie to keep you logged in. No third-party tracking or advertising cookies are used. If you choose "Remember me", your session persists for up to 30 days; otherwise it ends when you close your browser or log out.

8. Terms of Service

By using VIRO Points, you agree to:

• Provide accurate information when registering.
• Keep your login credentials confidential.
• Not attempt to manipulate stamp counts, exploit the system, or access other users' accounts.
• Use the platform only for its intended purpose of earning and redeeming genuine loyalty rewards.

We reserve the right to suspend or terminate accounts that violate these terms.

9. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via an in-app notice. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or data requests, please contact the platform administrator through the app or at the email address used to set up your account.