Legal

Privacy Policy

Last updated: April 1, 2025

At Kyro, we take your privacy seriously. This policy explains what data we collect, how we use it, and your rights regarding your information. This policy applies to merchants using our platform, their customers who use digital loyalty cards, and visitors to our website.

1. Data We Collect

From Merchants

Account information: company name, contact name, email address, phone number
Billing information: processed securely through our payment provider
Usage data: dashboard activity, feature usage, login history

From Customers (via Loyalty Cards)

Personal information: first name, last name, email address, phone number
Loyalty data: visit history, stamps/points earned, rewards redeemed
Device information: wallet type (Apple/Google), pass installation date

From Website Visitors

Analytics data: pages visited, time on site, referral source
Technical data: browser type, device type, IP address (anonymized)

2. How We Use Your Data

Service delivery: To operate the loyalty card platform and provide features you use
Communication: To send account-related notifications, updates, and support responses
Analytics: To understand usage patterns and improve the Service
Push notifications: To deliver merchant-initiated messages to customers via wallet passes
Legal compliance: To comply with applicable laws and regulations

We do not sell, rent, or trade personal data to third parties. We do not use customer data for advertising purposes.

3. Data Ownership

Customer data collected through loyalty cards belongs to the merchant. Kyro processes this data as a data processor on behalf of the merchant (the data controller). Merchants are responsible for obtaining proper consent from their customers and complying with applicable data protection laws.

4. Data Security

We use industry-standard security measures to protect your data, including encryption in transit (TLS), encryption at rest, secure authentication, and regular security audits. Access to personal data is restricted to authorized personnel who need it to operate the Service.

5. Data Retention

We retain merchant account data for the duration of the subscription and 30 days after account closure. Customer loyalty data is retained as long as the merchant's account is active. Upon account termination, all associated data is permanently deleted within 30 days unless required by law.

6. Your Rights

Under applicable data protection laws (including GDPR), you have the right to:

Access: Request a copy of the personal data we hold about you
Rectification: Request correction of inaccurate or incomplete data
Erasure: Request deletion of your personal data
Portability: Request your data in a machine-readable format
Objection: Object to processing of your personal data
Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, contact us at support@wearekyro.com.

7. Cookies

We use essential cookies to operate the Service (authentication, session management). We use analytics cookies to understand how visitors use our website. You can disable non-essential cookies in your browser settings. The Service will continue to function with only essential cookies.

8. Third-Party Services

We use third-party services to operate the platform, including cloud hosting, payment processing, and analytics. These providers are bound by data processing agreements and may only process data as instructed by us. We do not share personal data with third parties for their own marketing purposes.

9. International Transfers

Data may be processed in countries outside your country of residence. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or adequacy decisions.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact Us

For any privacy-related questions or requests, contact our data protection team at support@wearekyro.com.