Privacy Policy

1. Who we are

Zupy (zupy.com) is a loyalty program platform that connects businesses and consumers. We are responsible for processing your personal data and act as Controller under the Brazilian General Data Protection Law (LGPD — Law No. 13,709/2018).

2. Data we collect

Registration data: name, email, phone number (WhatsApp).
Usage data: points history, redemptions, and transactions in the loyalty program.
Device data: device identifiers for sending push notifications via Apple Wallet and Google Wallet.
Navigation data: IP address, session cookies, access logs.
Social login data: basic profile information when you authenticate via Google, Facebook, or Apple (name, photo, and email provided by the provider).

3. How we use your data

Create and manage your account and loyalty cards.
Process points, rewards, and redemptions.
Send notifications about updates to your loyalty card (via Apple Wallet / Google Wallet).
Transactional communications via WhatsApp or email about your account.
Improve our services based on aggregated and anonymous analysis.
Comply with legal and regulatory obligations.

4. Data sharing

We do not sell your personal data. We may share it only with:

Partner businesses: the business you visit has access to your points history and transactions within the respective program.
Service providers: companies that help us operate the platform (hosting, email, analytics), bound by confidentiality agreements.
Authorities: when required by law or court order.

5. Cookies

We use strictly necessary cookies for authentication and platform operation. We also use analytical cookies (PostHog) to understand how users interact with our services, always in aggregate form. You can disable analytical cookies in your browser settings.

6. Data retention

We keep your data as long as your account is active or as necessary to provide services. After account closure, data is anonymized or deleted within 90 days, unless legal retention is required.

7. Your rights (LGPD)

Under the LGPD, you have the right to:

Confirm the existence of data processing.
Access your data.
Correct incomplete, inaccurate, or outdated data.
Request anonymization, blocking, or deletion of unnecessary data.
Request data portability.
Revoke consent at any time.

To exercise your rights, contact us: support@zupy.com

8. Security

We adopt appropriate technical and organizational measures to protect your data against unauthorized access, loss, or improper disclosure, including encryption in transit (TLS) and at rest, access controls, and continuous monitoring.

9. Contact

For questions about this policy or to exercise your rights, contact us:

10. Fabinho in ChatGPT and Claude

When you talk to Fabinho, Zupy's specialist, the conversation stays in ChatGPT or Claude, under each one's privacy policy. Zupy does not receive or keep the conversation. We receive only what Fabinho passes to Zupy's tools to do the work:

the details of your business that you share: menu, prices, names of coupons and rewards, the average ticket and how often customers come;
the conversation's diagnosis: the business segment, the pain point you described in one sentence and the objective identified. It is kept even when you do not sign in to Zupy. Before keeping it, we remove phone numbers, e-mails and CPFs; do not share names or details of your customers;
when you sign in to Zupy: your account details, the objective and the goal you agreed on with Fabinho, what you published and the images you sent;
your WhatsApp number and the store name, if you want to be contacted by the team.

What we use it for: to build and publish your coupon and your loyalty program, so the Zupy team can contact you when you ask, and to understand businesses' pain points and objectives in aggregate and improve Fabinho.

Who we share it with: we do not sell this data. It stays with Zupy and with the providers that host and run the service for us, who use it only for that.

How long: the diagnosis and the proposals that were not linked to an account are kept for 12 months and then deleted. Everything else follows section 6.

Your controls: you can disconnect Fabinho in the dashboard at any time and ask for your data to be deleted at support@zupy.com or on the data deletion page.