Privacy Policy

1. Data controller

FidelyStamp acts as the controller of personal data collected through its public site, customer-facing application, business tools, onboarding forms, and support channels, except where FidelyStamp acts as a processor on behalf of a business client using the platform.

2. Data we collect

Depending on how you interact with FidelyStamp, we may collect identification and contact data such as name, email address, phone number, business name, branch details, and account identifiers.

We may also collect loyalty and transactional data such as store enrollments, points, stamps, redemptions, rewards activity, campaign participation, coupons, promos, and feedback.

We may process technical and usage data such as device identifiers, browser data, IP-derived metadata, session logs, app usage events, referral context, and support diagnostics.

3. Purposes of processing

We use personal data to provide the FidelyStamp platform, authenticate users, maintain accounts, and operate loyalty programs for customers and businesses.

We use data to enable reward earning and redemption, support store discovery, process demo requests, and provide customer and technical support.

FidelyStamp and businesses that use the platform may process customer data for authorized advertising, campaigns, customer relationship improvement, service quality improvement, customer experience improvement, loyalty analysis, satisfaction measurement, and customer segmentation.

We use data to improve product performance, generate analytics, prevent abuse or fraud, monitor service reliability, and maintain security controls.

We may use anonymized, aggregated, or pseudonymized data to develop, train, evaluate, and improve artificial intelligence models, analytics, recommendations, fraud prevention, personalization, and platform quality systems. Where identifiable personal data is involved, processing will be subject to the applicable authorization and legal safeguards.

4. Legal basis and authorization

When required by Colombian law, FidelyStamp processes personal data based on prior, express, and informed authorization from the data subject.

We may also process data when permitted by law, including to comply with legal duties, respond to competent authorities, secure the platform, or perform the services requested by the user or our business clients.

Businesses using FidelyStamp are responsible for obtaining and preserving the authorizations required to process their customers' personal data for advertising, commercial campaigns, relationship management, service improvement, analytics, and artificial intelligence purposes where applicable.

5. Sharing and business access

We may share personal data with business clients that operate stores or loyalty programs through FidelyStamp, to the extent necessary for the operation of those programs.

Business clients may access customer data within FidelyStamp only for authorized purposes, including loyalty management, advertising, commercial campaigns, customer relationship management, customer support, performance analysis, and service or experience improvement.

FidelyStamp does not sell personal data as a standalone commercial asset.

6. Artificial intelligence training

Business clients may opt in or opt out of allowing data associated with their business account to be used for artificial intelligence model training, without limiting the individual rights of data subjects.

FidelyStamp will seek to use anonymized, aggregated, or pseudonymized data for model training whenever reasonably possible. Identifiable personal data will not be used for model training where the required authorization is absent or the data subject has validly exercised an applicable right that prevents such processing.

7. Retention and deletion

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, comply with legal or contractual obligations, resolve disputes, enforce our agreements, and support legitimate business and security needs.

When a data subject requests deletion and the request is legally applicable, FidelyStamp will process the request within the timeframes established by Colombian law. Technical deletion or anonymization may take up to thirty (30) business days after the request has been validated, unless a legal, contractual, accounting, security, or dispute-related obligation requires certain information to be retained.

8. Rights and contact

Data subjects may request access, update, rectification, proof of authorization, deletion when applicable, revocation of authorization when legally appropriate, and information about how their personal data is being processed.

Data subjects may request that FidelyStamp or an applicable business client stop using their personal data for advertising, commercial prospecting, or artificial intelligence model training where such restriction is legally applicable.

If you need to contact us about privacy or personal data matters, please use our contact page.