Privacy Policy

Loyal Aura LLC (“we”, “us”, or “our”), a Florida limited liability company, operates Loyal Aura, the loyalty management platform at https://loyalaura.com. Loyal Aura LLC is the data controller responsible for your personal data. We are committed to protecting the personal information of our customers, their end-users, and visitors to our platform.

Account information: When you register, we collect your first and last name, work email address, phone number, company name, and a hashed password.

Business data: Information you provide about your business, including branding assets, loyalty program settings, and customer records you import or generate through the platform.

Payment information: Billing details are processed by our payment processor. We do not store full card numbers — only the last four digits and billing address for invoicing purposes.

Usage data: Log files, IP addresses, browser/device type, pages visited, and interactions with the platform (clicks, scans, redemptions) to improve our service.

Wallet pass data: When your customers add Apple or Google Wallet cards, we store the device identifiers required to push card updates.

We use the data we collect to:

• Provide, operate, and improve the Loyal Aura platform
• Process transactions and send billing notifications
• Send transactional emails (OTP verification, password resets, invoices)
• Send product updates and marketing emails (you can opt out at any time)
• Detect and prevent fraud and abuse
• Comply with legal obligations

For users in the European Economic Area, we process personal data on the following bases:

• Contract performance — to deliver the services you signed up for
• Legitimate interests — for platform security, fraud prevention, and product analytics
• Consent — for marketing communications (revocable at any time)
• Legal obligation — to comply with applicable laws

We do not sell your personal data. We share data only with:

• Our payment processor — subscription billing and payment processing
• Apple & Google — Apple Wallet and Google Wallet pass delivery and update tokens; Google Firebase Cloud Messaging for push notifications; Google Maps Platform for address lookup and location pickers in the merchant dashboard; optional Sign in with Google / Sign in with Apple
• Meta — the Meta Pixel on our own marketing website (see Section 8), and WhatsApp Business onboarding for merchants who choose to connect WhatsApp
• Anthropic — AI features such as drafting review replies and classifying review sentiment, when used by a merchant
• Email and hosting providers — transactional email delivery and the servers that host the platform
• Legal authorities — when required by law or court order

We retain account data for as long as your account is active, plus 30 days after closure to allow for data export, after which it may be permanently deleted. Anonymized, aggregated analytics data may be retained indefinitely. You may request deletion at any time (see Section 9).

We use TLS encryption in transit, hashed passwords, token-based authentication with one-time passcode verification, role-based access controls, and change-history logging. No method of transmission over the Internet is 100% secure — we cannot guarantee absolute security, but we follow industry best practices.

We use strictly necessary cookies and similar browser storage for authentication sessions and preferences. We use the Meta Pixel, provided by Meta Platforms, for marketing measurement on our own website (loyalaura.com): it records page views and conversion events such as contact or demo requests, sign-ups and subscriptions, may set cookies, and sends this information to Meta so we can measure the effectiveness of our advertising. The Meta Pixel is not loaded on white-label agency domains, or on the loyalty card, join, coupon and feedback pages our merchants share with their own customers. You can block or delete these cookies in your browser settings and manage how Meta uses your data in your Meta ad preferences. See our Cookie Policy for details.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict processing
• Data portability (receive your data in a machine-readable format)
• Withdraw consent for marketing at any time

To exercise any of these rights, email us at support@loyalaura.com. We will respond within 30 days.

Loyal Aura is not directed to children under 16. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

We may update this policy periodically. We will notify registered users by email and update the “Last updated” date above. Continued use of the platform after notification constitutes acceptance of the revised policy.

For privacy-related questions or requests, contact our privacy team at: support@loyalaura.com

Or write to us at: