Privacy Policy

Introduction

Your privacy is important to us! At ursreward ("ursreward," "we," "us," or "our"), we are committed to respecting and protecting your privacy when you use our website, platform, and services. This Privacy Policy ("Policy") outlines how we collect, use, disclose, and safeguard your information in compliance with applicable data protection laws.

This Policy applies to our website (www.ursreward.com), our loyalty platform, mobile/web applications, and other services that link to this Policy (collectively, the "Services").

By accessing or using our Services, you consent to the collection and use of your personal data as described in this Policy.

If you have any questions regarding this Policy, please contact us at privacy@ursreward.com.

Scope of this Policy

This Privacy Policy explains:

• What information we collect and how we collect it.
• How we use and share your information.
• Your rights over your information.
• How we protect and retain your data.
• Your options and choices with respect to your information.

Definitions

Personal Data: Any information that identifies, relates to, or can reasonably be linked to an individual, such as name, email address, phone number, or online identifiers.

Sensitive Personal Data: Information such as financial details, authentication credentials, health data, or any information categorized as sensitive under applicable laws (e.g., GDPR, CCPA/CPRA, Indian IT Act).

Processing: Any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.

Data Subject: Any individual whose personal data is collected, used, or processed by ursreward (e.g., website visitors, customer employees, end-users of loyalty programs).

Data Controller: ursreward, determining the purposes and means of processing personal data.

Data Processor: Third parties engaged by ursreward to process data on our behalf (e.g., hosting providers, analytics vendors).

Information We Collect

1. From Customer Companies

When organizations sign up or request a demo, we may collect:

• Full name, business email, company name, phone number.
• Billing and financial information for paid services.

2. From End-Users (Loyalty Program Participants)

When enrolled through our platform, we may collect:

• Name, email, mobile number, or loyalty ID.
• Account preferences, transactions, and reward redemption history.
• Device information (IP address, browser type, device ID).

3. Technical & Usage Data

We may automatically collect:

• IP addresses, device identifiers, browser type, and operating system.
• Website and app usage data, including log files and cookies.

4. Payment Data

For direct purchases, billing and payment information is collected securely (processed via third-party providers such as Stripe, Razorpay, PayPal, etc.).

5. Other Sources

We may also collect information from publicly available sources, business partners, or third-party integrations (CRM, marketing automation, HRMS, etc.) when authorized by you or your company.

How We Use Your Information

We use your information to:

• Deliver, operate, and improve our Services.
• Enable organizations to configure and run their loyalty programs.
• Authenticate users and secure accounts.
• Provide customer support and respond to inquiries.
• Process payments and send billing updates.
• Send service updates, security alerts, and promotional communications (where permitted).
• Analyze usage trends to enhance user experience.
• Comply with legal obligations and prevent fraud or misuse.

Sharing of Information

We do not sell or rent your personal data.

We may share information only in these cases:

1. With Service Providers/Partners -- For cloud hosting, analytics, customer support, and secure payment processing.
2. For Legal Reasons -- To comply with applicable law, regulations, legal process, or government requests.
3. Business Transfers -- In the event of a merger, acquisition, or restructuring, your data may be transferred to the new entity.
4. With Consent -- Where you explicitly authorize sharing.

Data Security

We implement industry-standard safeguards to protect your data, including:

• SSL/TLS encryption in transit and at rest.
• Secure access controls, role-based authentication, and MFA.
• Regular security audits, penetration testing, and monitoring.
• Restricted access to personal data by authorized personnel only.

Data Retention

We retain personal data only as long as necessary for business, contractual, or legal purposes:

• Customer & End-User Data: Up to 7 years from termination of account.
• Financial/Payment Data: 8 years (as per Indian Companies Act & tax laws).
• Technical Logs: 12 months.
• Other Business Records: 3 years or as legally required.

Children's Privacy

ursreward does not knowingly collect data from individuals under 16 years of age. If you believe a child has provided data to us, please contact us at privacy@ursreward.com for prompt removal.

Your Rights

Depending on your location (e.g., under GDPR, CCPA/CPRA), you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion ("right to be forgotten").
• Restrict or object to processing.
• Request data portability.
• Opt-out of marketing communications.

To exercise these rights, please email us at privacy@ursreward.com.

Updates to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will update the "Last Modified" date and provide notice where required.

Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our practices, please contact:

Data Protection Officer
📧 Email: privacy@ursreward.com
🌐 Website: www.ursreward.com