Privacy Policy

1. Scope and Who We Are

TagTreat is the brand and service provider responsible for personal information it controls in connection with the TagTreat website, applications, QR-code campaigns, and related services.

This Policy applies to business account holders, prospective customers, website visitors, and individuals who participate in a TagTreat-powered campaign. It does not replace the privacy policies of participating businesses, social networks, Paddle, or other third parties.

Our Terms of Service govern use of the service, and our Refund Policy explains refunds for paid subscriptions.

2. Information We Collect

Account and business information

When a business creates or manages an account, we may collect:

• Email address and authentication credentials stored in protected or hashed form
• Business name, locations, logo, social-media handles, and other profile details
• Campaign settings, hashtags, instructions, reward configurations, and staff settings
• Plan, usage allowance, account status, and support communications

Campaign participation information

When someone scans a campaign QR code or participates in a campaign, we may collect:

• Campaign and business identifiers
• Selected social platform and submitted social-post URL
• Submission, verification, eligibility, voucher, and redemption status
• Approximate timestamps and a browser- or device-associated identifier used to limit duplicate scans or participation

We may review publicly available information associated with a submitted post URL to verify campaign participation. We do not claim ownership of the customer’s social-media content.

Billing and transaction information

Paid purchases are processed by Paddle, our Merchant of Record. Paddle may provide us with limited billing records needed to activate and support a subscription, such as customer, subscription, transaction, order, receipt, plan, currency, tax, payment status, and partial payment-method details such as card brand and last four digits.

TagTreat does not receive or store full payment-card numbers or card security codes. Paddle collects and processes checkout information under its own privacy notice.

Technical and usage information

We and our service providers may automatically collect information such as IP address, browser and device type, operating system, referring page, pages viewed, approximate timestamps, feature usage, error logs, and diagnostic or analytics data.

Communications

If you contact us, we collect the information included in your message and any information reasonably required to respond or provide support.

3. How We Use Information

We use information to:

• Create, authenticate, secure, and administer accounts
• Provide campaign pages, QR-code flows, post verification, vouchers, and reward redemption
• Calculate usage, enforce plan limits, and show campaign analytics
• Process subscription events, activate plans, maintain transaction records, and provide billing support
• Send service, security, verification, billing, and usage-related communications
• Respond to support requests and resolve technical problems
• Monitor reliability, prevent fraud and abuse, and protect the service and its users
• Analyze and improve our website, product, and customer experience
• Comply with law and enforce our agreements

4. Legal Bases

Where data-protection law requires a legal basis, we process personal information as necessary to perform a contract, take steps requested before entering a contract, comply with legal obligations, protect vital or legal interests, pursue legitimate interests that are not overridden by individual rights, or act with consent.

Legitimate interests may include operating and improving the service, securing accounts, preventing abuse, supporting customers, and understanding product usage. Where processing is based on consent, consent may be withdrawn at any time without affecting earlier lawful processing.

5. How We Share Information

TagTreat does not sell personal information. We may disclose information in the following circumstances:

• Participating businesses: campaign submission and redemption information may be made available to the business operating the relevant campaign so it can verify participation and fulfill rewards.
• Paddle: account and transaction information may be exchanged with Paddle to process and administer purchases, taxes, receipts, subscriptions, cancellations, refunds, fraud prevention, and buyer support.
• Service providers: vendors may process information for hosting, content delivery, database infrastructure, analytics, email delivery, security, and customer support under appropriate obligations.
• Legal and safety reasons: we may disclose information when reasonably necessary to comply with law, legal process, or valid government requests, or to protect rights, safety, and security.
• Business transfers: information may be disclosed in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable safeguards.
• With direction or consent: we may disclose information when you direct us to do so or otherwise consent.

6. Paddle and Payment Data

Paddle is the authorized reseller and Merchant of Record for TagTreat’s paid online orders. Paddle acts independently for payment processing, taxes, transaction compliance, receipts, buyer support, cancellations, and refunds. Information entered directly into Paddle Checkout is governed by Paddle’s privacy notice and buyer terms.

For more information, visit Paddle’s Privacy Notice.

7. Cookies, Local Storage, and Analytics

TagTreat and our service providers may use cookies, browser local storage, and similar technologies to keep users signed in, remember progress, prevent duplicate campaign activity, maintain security, measure website usage, diagnose issues, and improve the service.

We may use analytics services such as Google Analytics. These providers may receive technical and usage information under their own privacy terms. Browser or device controls may allow you to delete or block cookies and stored data, but doing so may affect sign-in, campaign participation, and other features.

8. Data Retention

We retain information for as long as reasonably necessary to provide the service, maintain account and transaction records, fulfill the purposes described in this Policy, resolve disputes, prevent abuse, enforce agreements, and comply with legal, tax, accounting, or reporting obligations.

Retention periods vary according to the type of information and why it is processed. When information is no longer required, we take reasonable steps to delete, anonymize, or securely isolate it, subject to technical and legal limitations.

9. International Data Transfers

TagTreat and its service providers may process information in countries other than the country where it was collected. Those countries may have different data-protection laws. Where required, we use appropriate contractual or other safeguards for international transfers.

10. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. No online service, transmission method, or storage system can guarantee absolute security.

Account holders are responsible for using a strong password, protecting credentials and devices, and notifying us promptly about suspected unauthorized access.

11. Your Choices and Privacy Rights

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, or object to certain processing; receive a portable copy of information; withdraw consent; or appeal or complain to a data-protection authority.

To submit a request, email support@tagtreat.com. Describe your request and the account, campaign, or email address involved. We may verify your identity and authority before responding. Some information may be retained or excluded where permitted or required by law.

You may opt out of non-essential marketing email using the unsubscribe method provided in the message. Service, transaction, security, and account communications may continue while an account remains active.

12. Children’s Privacy

TagTreat business accounts are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action.

13. Third-Party Sites and Social Platforms

The service may link to or interact with third-party websites and social platforms. Their collection and use of information is governed by their own terms and privacy policies. TagTreat is not responsible for third-party privacy practices.

14. Changes to This Policy

We may update this Policy to reflect changes to our service, practices, or legal obligations. We will update the “Last updated” date and provide additional notice where required by law.

15. Contact Us

For privacy questions or requests, contact: