Privacy Policy.

Who Controls This Policy

This policy applies to rewardloyalty.co, the Reward Loyalty license system, product support, documentation, demo, newsletter, and purchase-related workflows operated by NowSquare, registered in the Netherlands (KvK 17148641, VAT NL001693031B39). NowSquare is the data controller. For privacy questions or data-rights requests, contact us through the support page or email [email protected].

Information We Collect

We collect only what is needed to operate the website, validate licenses, provide support, and improve the product:

• Purchase and license data: license key, checkout order data, buyer email, support expiry, and refund or dispute status.
• Installation and update data: domain, license token, application version, environment, an installation identifier (a one-way hash of the installation's own key and web address), request IP address and user agent, when each installation last checked in, its update checks, and technical logs needed to activate licenses, deliver updates, and detect license misuse.
• Download records: a hashed license key, the release version, your IP address, and the time, kept for 12 months to review for abuse.
• Support and contact data: messages, email address, license key, screenshots, logs, and details you choose to send us.
• Website and marketing data: newsletter email addresses, agency toolkit form details, analytics events, cookie identifiers, page views, browser/device data, referrer, and approximate location.

How We Use Data

We use personal data for the following purposes:

• To validate licenses, prevent abuse, deliver updates, and enforce refund/dispute/license status.
• To provide support, investigate bugs, answer pre-sale questions, and resolve license questions.
• To send product, security, support, and newsletter messages when you request them or when they are necessary for your license.
• To measure website performance, improve product pages, understand conversion paths, protect against fraud, and keep the service secure.

Legal Bases

Where GDPR or similar privacy laws apply, we process data based on contract performance (license activation, updates, and support), legitimate interests (security, fraud prevention, product analytics, and service improvement), consent where required (newsletter and optional marketing cookies), and legal obligations (tax, accounting, dispute, and compliance records).

Third-Party Services

We use third-party services only where needed to sell, validate, support, secure, or improve Reward Loyalty. These services may process data under their own policies when you interact with them directly:

• Our payment and checkout provider (currently Gumroad), for checkout, license keys, purchase receipts, tax and payment handling, and hosted purchase pages.
• Google Analytics for traffic measurement, and Google Ads conversion measurement while an ad campaign runs. The website itself shows no ads.
• Hosting, email, logging, security, and support providers that help us run the website, license server, and customer support.

Cookies and Analytics

The website sets necessary cookies for sessions and security. It uses privacy-limited Google Analytics to measure page quality and effectiveness without a consent banner. Google Signals, ads personalization, and advertising storage are disabled, and the analytics identifier expires after 90 non-renewing days. The cookie policy lists every cookie the site can set, with its purpose and retention period, and always reflects which tags are in use.

Data Retention and Rights

We retain license, purchase, support, security, and accounting records for as long as needed to provide the product, enforce license status, handle disputes, comply with legal obligations, and protect the service. Newsletter data is retained until you unsubscribe or ask us to delete it. Technical logs are retained only as long as reasonably needed for security and troubleshooting. Google Analytics user and event data is retained for two months, and that period is not reset by new activity. This control does not shorten most standard aggregate reports.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export your personal data. You may also withdraw consent where processing is based on consent. To exercise these rights, contact us at [email protected]. You may also have the right to complain to your local data protection authority.

Self-Hosted Installations

Reward Loyalty is self-hosted software. Customer, staff, member, partner, campaign, and loyalty data stored inside your own installation is controlled by you, not by us, unless you separately send it to us for support or have a written managed-service agreement with us. You are responsible for the privacy policy, cookie notices, consent flows, processor agreements, and legal compliance of your own installation.

Security

We use reasonable technical and organizational safeguards, including encrypted transport, restricted access, protected license tokens, and secure storage practices. No system is perfectly secure, so please do not send unnecessary secrets or production credentials unless support specifically requests them through an appropriate channel.