Privacy policy

1. What data we process

From the business account: email, business name and your program's settings. If you sign up with Google, we receive the email and name from that account.

From the business's customers: the ID number they use at the counter and, if the business adds them, name, phone, email and date of birth, along with their purchases and points status.

Usage data: navigation and product metrics (pages visited, actions inside the app) to understand what works and what does not.

Payments: subscriptions are charged through Mercado Pago. We never see or store card details; from Mercado Pago we receive the subscription status.

2. What we use it for

To run the program (calculating points, levels and benefits), give you support, charge subscriptions, send you operational notices and improve the product. We do not sell personal data or use it for third-party advertising.

3. If you are a customer of a business using rewa

The business that added you to its program is responsible for your data: it decides what to upload and what benefits to offer. rewa processes it on the business's behalf and only to make the program work.

To review, correct or delete your data, the most direct path is to talk to the business. You can also write to us and we will sort it out with them.

4. Who we share data with

We use providers that process data for us, only as needed to run the service: Supabase (database and authentication), Vercel (hosting and site metrics), PostHog (product analytics), Mercado Pago (subscription billing) and Google (sign-in, if you choose it). Beyond those providers and legal obligations, we do not share personal data with anyone.

5. Cookies

We use session cookies to keep you signed in, a cookie to remember your language and analytics cookies to measure use of the site and the app. We do not use advertising cookies.

6. Where data is stored

Our providers may store data on servers outside your country (for example, in the United States or Europe). When that happens, each provider's contracts and safeguards apply to protect the information.

7. How long we keep it

For as long as the business account is active. If the account is closed, we delete or anonymize personal data within a reasonable period, except for what we must keep for legal or accounting obligations.

8. Security

Data travels encrypted and access is restricted: each business can only see its own customers and sales. No system is infallible; if we detect an incident affecting your data, we will let you know.

9. Your rights

You can request access, correction, update or deletion of your personal data by writing to contact@tryrewa.com. In Argentina, the Agency for Access to Public Information (AAIP) enforces Law 25,326 on Personal Data Protection and you can file complaints with it. If you are in another country, the rights granted by your local law apply.

10. Minors

rewa is aimed at businesses and is not intended for minors. We do not knowingly collect data from minors.

11. Changes to this policy

We will publish the current version here with its update date. If a change is significant, we will announce it inside the app or by email.