Rewaly Business Privacy Policy
Last updated: October 15, 2026
This Privacy Policy explains how Awaz Solutions, a company registered in India ("Rewaly," "we," "us," or "our"), handles personal data in Rewaly Business, the service businesses use to run loyalty programmes for their customers (the "Service").
It covers two groups of people:
Businesses and their teams — the people who sign up for and use Rewaly Business.
Customers of those businesses — people who join a business's stamp card or points programme.
The terms for businesses using the Service are in the Rewaly Business Terms of Service. Use of the Rewaly consumer app is covered by the Rewaly Privacy Policy.
1. Who Is Responsible for Your Data
Business and team data. Rewaly is responsible for the data of the businesses and team members who use the Service.
Customer data. When you join a business's loyalty programme, that business is responsible for your data and decides how it is used. Rewaly processes it on the business's behalf to run the programme. If you have a question about your data in a programme, you can contact the business directly or write to us at support@rewaly.com and we will pass it on.
2. Data We Collect
2.1 Businesses and Teams
Account details: name, email address and password for each login (passwords are handled by our sign-in provider and never stored by us in readable form).
Business details: business name, logo, locations and counters, listings and offers.
Billing details: plan, billing history and the email used for billing. Card payments are handled by our payment provider, Chargebee; we do not store card details.
Activity: an activity log of what each team member does in the account, such as sign-ins, changes, stamps, points and redemptions, and the device a login is signed in on.
2.2 Customers of a Business
When you join a programme, we collect on the business's behalf:
Email address — required, to identify your card. The business may ask you to confirm it with a code sent by email.
Other details the business asks for — for example your name, phone number or date of birth (used for birthday rewards), and answers to the business's own sign-up questions.
Your card's activity — stamps, points, rewards earned and redeemed, tier, the counter and location of each visit, and, if staff enter it, the amount of a purchase.
Your marketing choice — whether you agreed to receive offers and news from the business, and when.
Wallet passes — if you add your card to Apple Wallet or Google Wallet, the identifiers those services use to keep your pass up to date.
Rewaly app — if you choose to add your card to the Rewaly app, the link between your card and your Rewaly account.
Technical data — your IP address when you use the join page or your web card, used to protect against abuse.
3. How We Use Data
To provide the Service: running programmes, cards and passes, the counter, campaigns, analytics and records.
To send emails that are part of the Service: sign-in and confirmation codes, welcome emails with your card, invitations, notices about your card, plan and billing emails, and account warnings.
To send a business's offers and news only to customers who agreed to receive them. You can change your choice at any time on your web card.
To bill businesses for their plan.
To keep the Service secure, prevent abuse and fix problems.
To meet legal obligations.
We do not sell personal data, and we do not use customer data for our own advertising.
4. Who We Share Data With
The business whose programme you joined, and the members of its team allowed to see it.
Service providers who help us run the Service, under contracts that require them to protect the data: cloud hosting and databases, email delivery, sign-in, payment processing (Chargebee), and Apple and Google for wallet passes.
Authorities, when the law requires it.
5. Data Retention
Customer cards stay while the customer remains a member of the programme. A business can choose to delete customers who have been inactive for a period it sets; its administrator is warned before this happens.
When a customer deletes their card from their web card, the card is removed, and the business is told that the customer asked for their data to be deleted.
When a business closes its account, its team's logins are removed at once, and all of the business's data, including its customers' cards and history, is deleted permanently after a short grace period (currently 30 days).
Inactive businesses — when no one in a business has used the Service for 180 days — are warned by email, then deactivated if they remain unused, and their data is deleted permanently after a further period.
Activity logs are kept for a limited period and then deleted automatically.
Billing records may be kept longer where the law requires it.
6. Your Rights
Depending on where you live, you may have the right to access, correct or delete your data, to object to or restrict its use, and to withdraw consent.
Customers can delete their card themselves from their web card (after confirming with a code sent by email), and can turn offers and news on or off there at any time. For other requests, contact the business, or write to us at support@rewaly.com.
Businesses and team members can update their details in the Service, and the administrator can close the business account in Settings. For other requests, write to support@rewaly.com.
7. Security
We protect data with encryption in transit, access controls that limit each team member to what their role allows, sign-in codes for sensitive actions, and limits on repeated attempts. No system is completely secure, but we work to protect your data and will act promptly if a problem arises.
8. International Transfers
Data may be processed and stored on servers outside your country. Where it is, we apply appropriate safeguards, including encryption, to protect it.
9. Children
Rewaly Business is for businesses and is not intended for children. Businesses must not knowingly enrol children in their programmes where the law does not allow it.
10. Changes to This Policy
We may update this policy. If a change is significant, we will tell businesses by email or in the Service before it takes effect. The date at the top shows when it was last updated.
11. Contact Us
Rewaly Business is provided by Awaz Solutions, registered in India. If you have questions about this policy or your data, contact us at support@rewaly.com.