Privacy Policy

Information we collect

• Account. Email address or mobile number used for passwordless sign-in, and the profile SalesArck creates for that sign-in.
• Wallet. Points balances, ledger entries, redemptions, and marketing preferences for each merchant a customer belongs to.
• Merchant. Business name, country, onboarding details, and the people the merchant invites to operate the account.
• Point of sale. When a merchant Connects Square, Clover, Lighthouse, or Toast, we receive an authorization for that location. We read the merchant, customers, orders, and payments so Points can be awarded once for a completed sale. POS access tokens are encrypted at rest. We do not change items, employees, or the register.
• Website. If you write to us or join the inventory waitlist, we receive the name, business, email, and message you submit.
• Technical. Standard server logs such as IP address, browser type, and timestamps, used to operate and protect the service.

How we use it

• To sign you in and keep the session tied to the right account.
• To calculate, record, and show Points, and to process a redemption.
• To connect a merchant’s Square, Clover, Lighthouse, or Toast location and award Points from completed sales.
• To send a sign-in code, a service message, or a reply to a question you sent us.
• To honor marketing preferences a customer sets for a merchant.
• To keep an audit trail. Wallet and reward records are append-only. A correction is a new reversing entry, not an edit of the original.
• To secure the service, investigate abuse, and meet legal obligations.

We do not sell personal information.

Who we share it with

We share information with service providers that process it on our instructions:

• Supabase, for authentication and the application database.
• Cloudflare, for the public website.
• Render, for the application API.
• Resend, for email we send from the application.
• Sentry, for error reports. Personal identifiers are stripped before those reports are sent.
• Google Analytics, only when a merchant turns on a measurement id and the consumer chooses Allow. We do not load an analytics script before that choice.
• Web3Forms, for messages submitted on this website.
• Square, Clover, Lighthouse, or Toast, when a merchant has Connected that point of sale. We send only what that connection requires.

A merchant can see loyalty activity for their own customers. We do not give one merchant another merchant’s customer list. We may also disclose information if the law requires it, or to protect SalesArck, a merchant, or a customer from fraud or abuse.

Where it is stored

SalesArck is a Canadian company. Our application database is hosted in the United States. By using SalesArck you understand that your information may be processed in Canada and the United States.

How long we keep it

We keep account and Wallet information while the account is in use and for as long as we need it to operate the loyalty program, resolve a dispute, or meet a legal duty. Ledger entries are kept because the record of Points awarded and reversed has to stay auditable. Raw checkout payloads from the point of sale are kept for 90 days so a failed award can be retried, then deleted. Campaign email copies of an address are cleared after 90 days, or sooner when the consumer redacts them in preferences. Website messages are kept long enough to respond and to keep a record of that conversation. Server logs are kept for a shorter operational period.

Your choices

You can ask us to access, correct, or delete personal information we hold about you, or to withdraw consent where consent is the basis for processing. Some records, including append-only Points entries a merchant relies on, may be retained or de-identified instead of deleted. Marketing messages from a merchant can be turned off in Wallet preferences. Sign-in and service messages are part of the account.

You can download a copy of your information from the preferences page in the app, or email info@salesarck.com. We will respond within 30 days. If you are in Canada and you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada. Quebec residents who are not satisfied may also contact the Commission d'accès à l'information du Québec.

Children

SalesArck is not directed at children under 16, and we do not knowingly collect their personal information.

Changes

If we change this policy, we will post the new version on this page and update the date above. Continued use of SalesArck after the new version is posted is acceptance of that version.