Privacy Policy

1Information We Collect

Depending on how you use Mainleey, we may collect the following types of information.

Information you provide to us

Customers may provide:

• Name
• Email address
• Phone number
• Account login information
• Profile information
• Preferred stores or merchants
• Photos or other content uploaded to the Services
• Communications you send to us
• Information provided when participating in promotions, rewards, surveys, or other programs

Merchants may provide:

• Business name
• Business address
• Business contact information
• Owner or authorized representative information
• Business category
• Store locations
• Payment and billing information
• Business profile information, including photos, logos, menus, products, promotions, and other content
• Information necessary to connect or integrate a merchant's systems with Mainleey

Purchase and rewards information

When you use Mainleey at participating merchants, we may collect information relating to your transactions and rewards activity, including:

• Merchant or store where a transaction occurred
• Date and time of a transaction
• Products or services purchased
• Transaction amount
• Points earned
• Points redeemed
• Rewards received
• Offers or promotions used
• Other information necessary to calculate and maintain your rewards balance

Mainleey may use this information to maintain an accurate rewards ledger and provide the Services.

Location information

With your permission, Mainleey may collect or use location information from your device. Location information may be used to:

• Show nearby participating merchants
• Help you discover relevant offers
• Improve location-based features
• Help merchants understand activity in their service area
• Prevent fraud or misuse of the Services

You can control location permissions through your device settings. Some location-based features may not function if you disable location access.

Automatically collected information

When you use the Services, we may automatically collect certain technical information, such as:

• IP address
• Device type
• Operating system
• Browser type
• App version
• Approximate location
• Usage information
• Pages, screens, or features accessed
• Dates and times of activity
• Diagnostic and performance information

We may use cookies, SDKs, pixels, and similar technologies to operate, secure, analyze, and improve the Services.

2How We Use Information

We use information for purposes including:

• Creating and managing customer and merchant accounts
• Providing rewards, points, offers, and other Mainleey services
• Recording and calculating points and rewards
• Connecting customers with participating merchants
• Processing and verifying transactions
• Providing merchants with tools to understand and engage their customers
• Personalizing offers, rewards, and recommendations
• Communicating with customers and merchants
• Providing customer support
• Detecting and preventing fraud, abuse, and unauthorized activity
• Maintaining the security of our Services
• Improving our products and services
• Understanding how customers and merchants use Mainleey
• Conducting analytics and reporting
• Complying with legal and regulatory requirements
• Enforcing our Terms of Service
• Carrying out other purposes disclosed to you at the time information is collected

We will not use personal information for a new purpose that is materially different from the purpose for which it was collected without providing appropriate notice and obtaining consent where required by applicable law.

3How Customer Information May Be Used by Merchants

Mainleey is designed to help participating merchants understand and build relationships with their customers. Depending on the features a merchant uses, a merchant may receive information about customers' interactions with that merchant through Mainleey, such as:

• Customer name or account identifier
• Purchase history with that merchant
• Products or categories purchased
• Points earned or redeemed
• Rewards and offers used
• Visit or transaction frequency
• Other information necessary to provide merchant-facing Mainleey features

Merchants may only use customer information made available through Mainleey for legitimate business purposes and in accordance with applicable law and their obligations to customers.

4Sharing Information

We may share information in the following circumstances:

With participating merchants

We may provide relevant customer information to the merchant associated with a transaction, rewards program, offer, or other Mainleey interaction.

With service providers

We may use third-party companies to help us operate Mainleey, including providers of:

• Cloud hosting
• Data storage
• Analytics
• Communications
• Customer support
• Security
• Payment processing
• Authentication
• Software infrastructure
• Transaction processing and integrations

These providers may access information only as reasonably necessary to provide services to us.

With other parties when required

We may disclose information when reasonably necessary to:

• Comply with applicable law or legal process
• Respond to lawful requests from authorities
• Protect the rights, property, or safety of Mainleey, our users, merchants, or others
• Detect or investigate fraud, security issues, or other unlawful activity
• Enforce our agreements

Business transactions

If Mainleey is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law. We do not sell personal information simply because you use Mainleey.

5Aggregated and De-Identified Information

We may create aggregated, statistical, or de-identified information from information collected through the Services. Where information has been de-identified so that it can no longer reasonably be used to identify an individual, we may use it for purposes such as:

• Business analytics
• Product development
• Market research
• Reporting
• Measuring program performance
• Improving Mainleey

6Communications

We may send you service-related communications, such as account notifications, transaction confirmations, security alerts, and information about changes to the Services. Where required by law, we will obtain appropriate consent before sending commercial electronic messages.

You may unsubscribe from promotional communications using the instructions included in those communications. You may still receive important service-related communications.

7Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining accurate transaction and rewards records, resolving disputes, preventing fraud, complying with legal obligations, and enforcing our agreements. When information is no longer required, we may securely delete it, anonymize it, or otherwise dispose of it in accordance with applicable law.

8Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or destruction. However, no method of transmitting or storing information can be guaranteed to be completely secure.

9Your Privacy Choices and Rights

Depending on where you live and applicable law, you may have rights relating to your personal information, including the right to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Withdraw consent where applicable
• Ask questions about how your information is collected, used, or disclosed
• Request deletion where applicable
• Opt out of certain communications or optional data uses

Some rights may be subject to legal or contractual limitations. To make a privacy request, contact us using the information below.

10Children's Privacy

Mainleey is not intended for children under the minimum age permitted to use the Services under applicable law. We do not knowingly collect personal information from children in circumstances where doing so would be prohibited by law. If you believe a child has provided personal information to us improperly, please contact us.

11Third-Party Services and Links

The Services may contain links to websites, applications, payment providers, merchant services, or other third-party services. We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies before providing them with personal information.

12Information Stored or Processed Outside Your Province or Country

Mainleey and our service providers may store or process information in Canada, the United States, or other jurisdictions where we or our service providers operate. Information processed outside your jurisdiction may be subject to the laws of that jurisdiction. We take reasonable steps to protect personal information regardless of where it is processed and will comply with applicable legal requirements concerning international transfers.

13Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will provide appropriate notice and obtain consent where required by applicable law. The "Effective Date" at the top of this Privacy Policy indicates when it was most recently updated.

14Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us using the details below. You may also contact us to make a privacy access, correction, or consent-withdrawal request.