Privacy Policy.

Who Controls This Policy

This policy applies to rewardloyalty.co, the Reward Loyalty license system, product support, documentation, demo, newsletter, and purchase-related workflows operated by NowSquare, registered in the Netherlands (KvK 17148641, VAT NL001693031B39). NowSquare is the data controller. For privacy questions or data-rights requests, contact us through the support page or email [email protected].

Information We Collect

We collect only what is needed to operate the website, validate licenses, provide support, and improve the product:

• Purchase and license data: license key, checkout order data, buyer email, support expiry, and refund or dispute status.
• Installation and update data: domain, license token, application version, environment, request IP address, timestamps, and technical logs needed to activate licenses and deliver updates.
• Download records: a hashed license key, the release version, your IP address, and the time, kept for 12 months to review for abuse.
• Support and contact data: messages, email address, license key, screenshots, logs, and details you choose to send us.
• Website and marketing data: newsletter email addresses, agency toolkit form details, analytics events, cookie identifiers, page views, browser/device data, referrer, and approximate location.

How We Use Data

We use personal data for the following purposes:

• To validate licenses, prevent abuse, deliver updates, and enforce refund/dispute/license status.
• To provide support, investigate bugs, answer pre-sale questions, and resolve license questions.
• To send product, security, support, and newsletter messages when you request them or when they are necessary for your license.
• To measure website performance, improve product pages, understand conversion paths, protect against fraud, and keep the service secure.

Legal Bases

Where GDPR or similar privacy laws apply, we process data based on contract performance (license activation, updates, and support), legitimate interests (security, fraud prevention, product analytics, and service improvement), consent where required (newsletter and optional marketing cookies), and legal obligations (tax, accounting, dispute, and compliance records).

Third-Party Services

We use third-party services only where needed to sell, validate, support, secure, or improve Reward Loyalty. These services may process data under their own policies when you interact with them directly:

• Our payment and checkout provider (currently Gumroad), for checkout, license keys, purchase receipts, tax and payment handling, and hosted purchase pages.
• Google Analytics and Google Ads for traffic measurement, conversion measurement, and advertising performance.
• Hosting, email, logging, security, and support providers that help us run the website, license server, and customer support.

Cookies and Analytics

The website uses essential cookies for security and session functionality, and analytics/advertising tags to understand usage and measure campaigns. Browser settings and privacy tools can limit or block cookies. If a consent banner is shown in your region, your selection controls optional tracking where required by law.

Data Retention and Rights

We retain license, purchase, support, security, and accounting records for as long as needed to provide the product, enforce license status, handle disputes, comply with legal obligations, and protect the service. Newsletter data is retained until you unsubscribe or ask us to delete it. Technical logs are retained only as long as reasonably needed for security and troubleshooting.

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or export your personal data. You may also withdraw consent where processing is based on consent. To exercise these rights, contact us at [email protected]. You may also have the right to complain to your local data protection authority.

Self-Hosted Installations

Reward Loyalty is self-hosted software. Customer, staff, member, partner, campaign, and loyalty data stored inside your own installation is controlled by you, not by us, unless you separately send it to us for support or have a written managed-service agreement with us. You are responsible for the privacy policy, cookie notices, consent flows, processor agreements, and legal compliance of your own installation.

Security

We use reasonable technical and organizational safeguards, including encrypted transport, restricted access, protected license tokens, and secure storage practices. No system is perfectly secure, so please do not send unnecessary secrets or production credentials unless support specifically requests them through an appropriate channel.