Privacy and pilot data
Draft notice. Legal/privacy review is required before real personal data enters a pilot.
RePokeIt stores account, loyalty, security, device, support, and operational data needed to run the service. Support reports exclude passwords, cookies, authorization headers, and raw QR/invite/redemption/push tokens.
Customers can export or delete their account from the customer app. Accounting and audit records may remain in minimized form where retention is required.
Logs and error monitoring are access-controlled and retained only for an approved period. Do not paste secrets into support reports.
Contact details, legal entity, jurisdiction, processor list, and final retention periods must be published before production launch.