Privacy Policy

1. Introduction

StampKit (operated by Farvix LLC, "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital loyalty stamp card platform ("Service"). By using StampKit, you agree to the collection and use of information in accordance with this policy.

Farvix LLC is registered in the State of Wyoming, United States, located at 30 N Gould St Ste 4, Sheridan, WY, USA. For any questions about this policy, contact us at info@stampkit.co.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you register, we collect your name, email address, business name, and password.
• Business Information: Business name, logo, location addresses, reward descriptions, and card design preferences.
• Customer Data: Names, phone numbers, email addresses, and stamp/reward history of your customers that you input into the Service.
• Payment Information: When you subscribe to a paid plan, payment details are collected and processed by Stripe, Inc. We do not store your full credit card numbers on our servers.
• Communications: When you contact us for support, we collect the content of your messages and any attachments.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the Service, click patterns, and referring URLs.
• Device Information: Browser type, operating system, device type, screen resolution, and IP address.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain your session, remember preferences, and analyze usage patterns. See Section 7 for details.
• Log Data: Server logs that record requests made to our Service, including timestamps, request URLs, and response codes.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To operate, maintain, and provide the features and functionality of StampKit, including processing stamp transactions and managing loyalty programs.
• Account Management: To create and manage your account, process payments, and communicate account-related information.
• Analytics and Improvement: To understand how users interact with our Service, identify trends, and improve functionality, user experience, and performance.
• Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical assistance.
• Security: To detect, prevent, and address fraud, unauthorized access, and other illegal activities.
• Communications: To send you service-related notices, updates, security alerts, and promotional materials (with your consent where required).
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share data with third-party service providers who assist us in operating the Service, including Supabase (database hosting), Stripe (payment processing), and Vercel (web hosting). These providers are contractually obligated to protect your data.
• Business Transfers: If Farvix LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• Legal Requirements: We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• With Your Consent: We may share your information for any other purpose with your explicit consent.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes (such as resolving disputes, enforcing agreements, or complying with tax obligations). Customer loyalty data (stamps, visits) associated with your business will be permanently deleted upon account deletion.

6. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL protocols.
• Encryption of sensitive data at rest in our database.
• Row Level Security (RLS) policies to ensure data isolation between businesses.
• Regular security audits and vulnerability assessments.
• Secure authentication using JWT tokens with server-side validation.
• Access controls limiting employee access to personal data on a need-to-know basis.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly notifying affected users in the event of a data breach.

7. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for the Service to function properly, including authentication session cookies and CSRF protection tokens. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with the Service. These are anonymized and used solely for improving user experience.
• Preference Cookies: Remember your settings and preferences (e.g., theme, notification preferences) for a better experience.

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information (subject to legal retention requirements).
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Objection: Object to processing of your personal information for marketing purposes.
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at info@stampkit.co. We will respond to your request within 30 days.

9. Children's Privacy

StampKit is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you believe a child has provided us with their personal data, please contact us at info@stampkit.co.

10. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where applicable.

11. Third-Party Links

The Service may contain links to third-party websites or services that are not owned or controlled by Farvix LLC. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification. Your continued use of the Service after any changes constitutes acceptance of the updated policy.