LoyalClip (“we”, “us”, “our”) is a loyalty and booking platform operated by LoyalClip Inc. This Privacy Policy explains what personal data we collect when you use our services, why we collect it, how we use and share it, and what rights you have over it. It applies to professionals who operate accounts on LoyalClip and to clients who book appointments through a professional’s LoyalClip booking page.
When you create a LoyalClip account via our authentication provider (Clerk), we collect your email address, full name, and any profile details you voluntarily provide such as business name, logo, and brand color preference.
When a client books through your LoyalClip page, we collect their full name, email address, phone number (if provided), the date and time of the appointment, and the service selected. This data is stored on your behalf and is accessible to you in your dashboard.
We record loyalty stamp/point balances, redemption events, and visit history linked to each client’s phone number or email address. This data is used solely to operate the loyalty program configured by the professional.
LoyalClip may request your device’s approximate location (city/region-level) when you use the “Find nearby professionals” feature on our mobile app or web interface. This is used exclusively to surface participating merchants near you. Location data is processed in real time and is not stored beyond the session or linked to your identity. You can deny location permission and still use all core booking and loyalty features without restriction.
LoyalClip collects subscription billing metadata — such as your billing plan, subscription status, and renewal date — from our payment processor, Stripe. We never store full card numbers, CVV codes, or raw payment credentials. All card data is handled exclusively by Stripe, which is certified to PCI DSS Level 1 — the highest standard for payment security.
We automatically collect certain technical data when you interact with LoyalClip: IP address (used briefly for rate limiting and abuse prevention), browser type and version, operating system, referring URL, pages visited, and timestamps. This data is retained in server logs for up to 30 days and is not used to build personal profiles without your consent.
We use cookies and similar technologies as described in our Cookie Policy. Essential session cookies are required for the service to function. Optional analytics and marketing cookies are only set with your explicit consent via our cookie banner.
We do not sell, rent, or trade personal data to third parties. We share data only with the following trusted sub-processors who are contractually required to protect it:
We may disclose personal data to law enforcement or government authorities when required by applicable law or a valid legal process (e.g., court order or subpoena). We will notify affected users of such requests to the extent permitted by law.
In the event of a merger, acquisition, or sale of all or substantially all of our assets, user data may be transferred to the acquiring entity. We will notify users via email and prominent notice on our website at least 14 days before any such transfer.
Location access is strictly opt-in and context-specific. When LoyalClip requests location permission, we explain exactly why before any prompt appears. The current use case is discovering nearby participating professionals on our map feature.
What we do NOT do with location data: We do not store raw GPS coordinates. We do not sell location data to advertisers. We do not correlate location with identity to build profiles. We do not track location in the background.
Denying location permission has no effect on core functionality — you can still book, manage loyalty, and use all dashboard features without it.
LoyalClip does not handle, process, or store raw payment card data at any point. When you enter billing information, it is submitted directly to Stripe via a secure tokenized form that never passes through our servers. Stripe is a PCI DSS Level 1 certified payment processor — the highest certification available.
We retain the following Stripe-provided metadata: your subscription plan, subscription status (active, trialing, cancelled), last renewal date, and the last 4 digits of the card on file (for display purposes only). This metadata is stored in our database for account management and support.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, email privacy@loyalclip.appwith the subject line “Privacy Request” and include your account email and the specific right you wish to exercise. We will respond within 30 calendar days (or sooner as required by applicable law). We may ask you to verify your identity before processing the request.
LoyalClip is not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us at privacy@loyalclip.app and we will delete it promptly.
We comply with the Children’s Online Privacy Protection Act (COPPA) for users in the United States. Users under 18 should use LoyalClip only with parental or guardian consent.
LoyalClip is operated from the United States. If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your personal data may be transferred to and processed in countries that may not provide the same level of data protection as your home country.
For transfers of personal data from the EEA to the US, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, and our sub-processors are required to maintain equivalent protections. Where applicable, we also comply with the UK International Data Transfer Agreement (IDTA).
We take security seriously and implement layered defences:
In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify affected users within 72 hours of becoming aware of the breach (or as required by applicable law) via email and, where appropriate, in-app notification.
We may update this Privacy Policy as our service evolves or as legal requirements change. When we make material changes — for example, changes to how we share data or introduce new data categories — we will:
Continued use of LoyalClip after the effective date of any changes constitutes acceptance of the updated policy. If you do not agree, you may close your account before the changes take effect.
LoyalClip Inc. is the data controller for personal data processed through our platform.
EEA users may also lodge a complaint with their local data protection authority (e.g., the ICO in the UK, or the relevant national DPA in their EU member state).