Legal

Privacy Policy

Last updated: July 17, 2026

This Policy describes how Pointos collects, uses and protects the personal information of Merchants and of the end customers who take part in the loyalty programs operated on the Platform.

1. Data controller

Pointos is the controller of the data processed to operate the Platform. Each Merchant is the controller of their own customers' data collected and loaded into their program.

2. Data we process

Merchant data: name, contact details, billing information and program configuration (rules, rewards, imagery).
End-customer data: name, contact channel (email or phone) and loyalty data (stamps, points, rewards, visits).
Usage data: technical records needed for operation, security and aggregated analytics.

3. Purposes

Providing and maintaining the contracted loyalty service.
Sending Wallet card update notifications (stamps, points, rewards).
Generating metrics and analytics for the Merchant.
Meeting legal and billing obligations.

4. Legal basis and consent

We process Merchant data on the basis of contract performance, and end-customer data on the basis of the consent the Merchant obtains at enrollment, as well as the performance of the loyalty program itself.

5. Sharing

We share strictly necessary data with the providers that enable the service (infrastructure, email delivery, payment gateways, Apple Wallet and Google Wallet), under agreements that ensure its confidentiality. We never sell personal data.

6. Retention

We keep data for the duration of the relationship with the Merchant and afterwards for the legally required periods. End-customer data is retained as determined by the responsible Merchant.

7. Your rights

You may exercise your rights of access, rectification, cancellation, objection, restriction and portability by writing to privacidad@pointos.club. You may also contact your country's data protection authority.

8. Changes

This Policy may be updated; the version in force is always the one published on this page.