Security & Privacy
Your customers' data and your business data are protected at every layer. Here's how we keep Loyal Aura secure.
TLS 1.2+
Data encrypted in transit
Encrypted at rest
Stored data is encrypted
Secure payments
We never store full card numbers
Role-based access
Staff see only what they need
Regular backups
Your data is backed up regularly
Export anytime
Your data stays yours
Data Encryption
Data is encrypted in transit with TLS 1.2+ and encrypted at rest. Passwords are hashed and never stored in plaintext.
Access Control
Role-based access for your staff — owners, managers and staff each see only what their role needs. Sign-in is token-based with one-time passcode verification.
Change History
Important actions such as stamps, redemptions and settings changes are recorded with who made them and when, so you can review what happened.
Infrastructure
Hosted with a cloud provider in North America, with restricted administrative access and separate production and staging environments. Data is backed up regularly.
Keeping Things Patched
We keep our dependencies and infrastructure up to date and welcome reports from security researchers through responsible disclosure.
Privacy
We collect only what's needed to run your loyalty program and never sell customer data. See our Privacy Policy for how GDPR and CCPA requests are handled.
Security FAQ
Where is my data stored?
Customer data is stored with our cloud hosting provider in North America.
Can I delete my data?
Yes. You can export or delete all business and customer data at any time from the dashboard settings. On account termination, all data is deleted within 30 days.
How do you handle security vulnerabilities?
We follow a responsible disclosure policy. If you discover a vulnerability, please contact support@loyalaura.com. We aim to acknowledge reports promptly.
How are payments handled?
Subscription payments are processed by our payment processor. Loyal Aura never stores full card numbers — card details are entered into and held by our payment processor, not by us.
Report a vulnerability
We follow a responsible disclosure policy. If you find a security issue in Loyal Aura, please email us. We aim to acknowledge reports promptly and keep you updated while we investigate.