Home · Last updated: September 29, 2026

Privacy Policy

This notice explains what personal data Puntek processes, why, who we share it with, and your rights. It covers the marketing site, business sign-up, dashboard, POS, and customer registration for digital wallet cards.

1. Who we are

Puntek operates a multi-tenant digital loyalty platform (phone wallet cards, web POS, and dashboard). Puntek is the controller for marketing-site and business-account data.

When a business uses Puntek to enroll its customers, that business is the controller of its customers’ data; Puntek acts as a processor to deliver the service. Contact: info@puntek.com.

2. What data we collect

We collect only what is needed to run the service:

• Business account: business name, email, password (stored securely), branding (colors, logo), plan, and data needed for billing and subscription charging.

• Staff / POS: email and credentials for cashiers or users authorized by the business.

• End customers: name and contact details the business requests at sign-up, points/stamps, redemption history, and data needed to issue the digital card.

• Scanned receipts: receipt images and automatically extracted fields (e.g. amount, date) to award points.

• Technical data: auth logs, approximate IP, identifiers needed to update the card on the device, and essential session cookies or local storage.

3. How we use data

We process data to: create and authenticate accounts; provide loyalty and POS features; bill subscriptions; send transactional email (welcome, password reset); improve security and prevent abuse; and meet legal duties. We do not sell personal data.

4. Who we share data with

We do not sell personal data. We may share it only with service providers acting on our behalf (processors), under our instructions and with confidentiality and security obligations, in these categories:

• Payment processing and subscription management.

• Cloud hosting, infrastructure, and file storage (e.g. logos and receipt images).

• Application databases and backups.

• Transactional email delivery.

• Automated image or text processing of receipts to award points.

• Device wallet platforms, when the customer chooses to save or update their card.

• Authorities or advisors, only when legally required or to protect legal rights.

5. Retention

We keep account data while the account is active and for additional time needed for billing, security, and legal obligations.

Photos, files, and generated documents — including the receipt image and files created to read it or process a request — are kept for a maximum of 15 days and then deleted. After that they are not available and cannot be recovered. They are not a permanent archive, and no one can require that they remain stored.

Points or visits already credited, the digital card, and the business logo are not deleted under that 15-day period.

6. Cookies

We use essential cookies and local storage for session, locale preference, and security. We do not use third-party advertising cookies on the marketing site. If we add non-essential analytics later, we will update this notice and seek consent where required.

7. Your rights

Depending on your jurisdiction (e.g. Mexico’s LFPDPPP, GDPR/CCPA where applicable), you may request access, correction, deletion, objection, restriction, or portability. End customers of a business should first exercise rights with that business; Puntek will assist as processor.

Email info@puntek.com. We will respond within a reasonable time and verify identity before acting.

8. Security and children

We apply reasonable technical and organizational measures (HTTPS, password hashing, role-based access). No system is 100% secure.

The service is for businesses. It is not directed at children under 13; if we learn we hold such data without a lawful basis, we will delete it.

9. Changes

We may update this notice. The “last updated” date shows the current version. For material changes, we will post an update on the site or email you when feasible.