Privacy Policy
LoyaltyLoop ("the App", "we") is a loyalty points application for the LeadConnector platform, provided by IR Official. This policy explains what data the App handles when you install and use it, and your choices. We do not sell your data and we do not use it for advertising.
1. Who is who
When you use LoyaltyLoop, you (the business or agency) are the controller of your customers' data and we act as your processor, handling it only to provide the features you configure. This policy covers our handling of both your account information and the customer data you ask the App to process.
2. Data we handle
| Category | What | Why |
|---|---|---|
| Installation data | Location ID, company (agency) ID, installing user ID, OAuth access and refresh tokens, granted scopes | To act on your behalf in your CRM and to keep each location's data separate |
| Session data | The user ID, name, email, role and active location LeadConnector provides when you open the App inside your CRM | To sign you in. We keep only a short-lived signed session token; we do not store your name or email |
| Configuration | Your rules, VIP tier settings, the ID of the points custom field, and a workflow webhook key | To run your loyalty programme |
| Loyalty ledger | For each rewarded contact: contact ID, display name (cached to label the dashboard), points balance, and a log of points changes with the reason and time | To calculate balances and show activity and leaderboards |
| Event data | Webhook events from LeadConnector (such as a paid invoice, an appointment status, a tag change). Contents are processed to apply your rules; we keep only a short-lived identifier to prevent the same event being counted twice | To award points exactly once |
We do not collect payment card details, passwords, or the contents of messages. We do not store contacts' email addresses or phone numbers; these are read live from your CRM only when you search for a member in the dashboard.
3. Permissions we request
The App requests access to read and update contacts and their tags, to read and create contact custom fields, to read invoices and calendar events (to detect paid invoices and appointment status), and to read locations and generate location access tokens. We use each permission only for the purpose described above.
4. How we use data
- To award, deduct and display loyalty points according to your rules.
- To write the points balance and VIP tags back to your contacts.
- To secure the service, prevent abuse and troubleshoot errors.
5. Storage and security
- OAuth tokens are encrypted at rest (AES-256-GCM). All traffic uses HTTPS.
- Webhook requests from LeadConnector are verified using LeadConnector's digital signature before they are processed.
- Each location's data is stored under that location's own keys. Dashboard sessions are bound to a single location and cannot read another's data.
- Data is hosted with our infrastructure providers (application hosting and a managed Redis database) who process it only to provide hosting.
6. Sharing
We do not sell, rent or share your data. We share it only with the infrastructure providers described above, with LeadConnector (because the App operates through its API), or if required by law.
7. Retention and deletion
We keep data while the App is installed. When you uninstall, we delete the tokens, rules, settings, balances, activity log and cached names we hold for the location. Points values already written to your contacts' custom fields remain in your CRM, which you control. Short-lived event identifiers expire automatically within seven days. You can also request deletion at any time at idylle_radieuse@outlook.com.
8. Your rights
Depending on where you or your customers live, you may have rights to access, correct, delete or export personal data. Because we act on your behalf, please direct requests from your customers to your business; we will assist you in fulfilling them. Contact us at idylle_radieuse@outlook.com.
9. Children
The App is intended for businesses and is not directed at children.
10. Changes
We may update this policy and will change the effective date above when we do. Material changes will be communicated through the App or by email.
11. Contact
IR Official
Email: idylle_radieuse@outlook.com