Privacy Policy

Your privacy matters to us. This policy explains what data Staampt collects, why, and how we protect it.

What we collect

Customers: name, phone number, email (optional), and a hashed PIN for login. We also store your stamp history, point balance, and referral activity.

Shop owners: business name, email, password (hashed), shop details (category, address, Instagram handle), and subscription and payment records.

Automatically: we collect basic access logs (IP address, browser type, timestamps) for security and debugging. We do not use tracking cookies or third-party analytics.

How we use it

We use your data to operate the Service: authenticating you, recording stamps, managing rewards, processing referrals, and communicating service updates. We do not sell, rent, or share your personal data with third parties for marketing.

Data storage

Data is stored on servers provided by Neon (PostgreSQL) and hosted on Vercel, with servers located in the United States. Passwords and PINs are hashed with bcrypt. Sessions use signed JWT tokens stored in HTTP-only cookies.

Data retention

We keep your data as long as your account is active. If you ask us to delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it.

Your rights

You can request access to, correction of, or deletion of your personal data at any time by emailing us. Shops can export their customer data from the dashboard.

Children

Staampt is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes

We may update this policy as the Service evolves. We will notify registered users of material changes via email.

Contact

For privacy questions or data requests, email hello@staampt.com.