Revio privacy policy

1. Scope and roles

This policy applies to the Revio marketing website, business dashboard, platform administration tools, Revio-powered customer and staff applications, support channels, and related services provided by Revio.

For a participating business’s loyalty program, that business normally decides why member information is used and acts as the data controller or business. Revio provides the platform and normally processes that information on the business’s instructions. Revio acts independently for limited information needed to provide, secure, support, improve, and meet legal obligations for its own services. A participating business may provide an additional privacy notice that also applies.

2. Information we process

• Identity and contact information, including name, email address, phone number, profile image, and authentication identifiers.
• Business and staff information, including organization details, workspace membership, role, locations, program configuration, support communications, and audit activity.
• Loyalty information, including member identifiers, points, stamps, tiers, earning activity, reward redemptions, referrals, challenges, leaderboards, and partner rewards.
• Verification content, including QR or referral codes, submitted receipt images and details, social-profile links or usernames supplied for review, and staff approval records.
• Device and communication information, including IP address, browser or device type, app version, locale, notification preferences, push tokens, and diagnostic or security logs.
• Wallet and integration information, including Apple or Google Wallet identifiers and registrations, OAuth connection data, connected Meta assets, and encrypted integration credentials.
• Usage and support information, including pages or features used, timestamps, interactions, errors, messages, and information included in support requests.

3. Where information comes from

We receive information directly from users and participating businesses; automatically from browsers, devices, and service infrastructure; from staff who verify loyalty activity; and from providers or integrations a user or business chooses to connect.

4. Why we use information

• Create, authenticate, and secure accounts and workspaces.
• Operate loyalty programs; calculate balances, tiers, rewards, referrals, and eligibility; and maintain accurate activity records.
• Provide customer and staff apps, Wallet passes, notifications, localization, support, and requested integrations.
• Review receipts or other earning evidence, prevent duplicate or fraudulent claims, enforce program rules, and protect users and services.
• Administer subscriptions or business agreements, communicate service information, troubleshoot failures, and maintain operational records.
• Comply with law, enforce agreements, respond to lawful requests, and establish or defend legal claims.
• Improve product reliability and usability using aggregated, de-identified, or limited service data where appropriate.

5. Legal bases

Where European or UK data-protection law applies, processing may rely on performance of a contract, steps requested before a contract, legitimate interests in operating and protecting the service, compliance with legal obligations, and consent where the law requires consent. A participating business determines the legal basis for its own loyalty-program purposes. Consent can be withdrawn for future processing where consent is the basis, without affecting earlier lawful processing.

6. How information is disclosed

Information may be disclosed to the participating business that operates the relevant program; authorized business staff; infrastructure, storage, authentication, email, push-notification, analytics, app-distribution, Wallet, and integration providers; professional advisers; authorities when legally required; and a successor involved in a legitimate corporate transaction.

Revio does not sell personal information or share it for cross-context behavioral advertising. The current principal providers are identified on the Subprocessors page.

7. International transfers

Revio and its providers may process information in countries other than the user’s country. Where required, Revio uses an approved transfer mechanism and supplementary safeguards appropriate to the data and destination, such as contractual protections and security controls.

8. Retention and deletion

Information is kept only while reasonably necessary for the purpose described, the participating program, security and fraud prevention, accounting, dispute resolution, backup cycles, and legal obligations. Retention depends on the record type and the instructions or duties of the participating business.

When a customer deletes an account in the app, Revio removes the authentication account and active push and Wallet registrations, then anonymizes and archives the loyalty member record. De-identified transaction records may remain when needed for accounting, program integrity, disputes, security, or law. Additional details and an external request route are available on the Account deletion page.

9. Your choices and rights

Depending on location and applicable law, a person may request access, correction, deletion, restriction, portability, or objection; withdraw consent; opt out of a sale or qualifying sharing; limit certain sensitive-information uses; or complain to a data-protection authority. Revio will not discriminate against a person for exercising an applicable privacy right.

Program members should normally contact the participating business because it controls the loyalty relationship. Revio will assist that business with verified requests when acting as its processor. Requests concerning a Revio business account or Revio’s independent processing may be directed to the contact below.

10. Security

Revio applies technical and organizational safeguards designed for the nature of the service, including authenticated access, role checks, business-scoped authorization, encrypted transport, protected credentials, audit records, and managed infrastructure. No internet service can guarantee absolute security.

11. Children

Revio is not designed for children to create accounts without any consent or authorization required by applicable law. Participating businesses are responsible for configuring and operating their programs for an appropriate audience. Contact the relevant business or Revio if you believe a child’s information was collected improperly.

12. Automated program operations

Revio can automatically calculate points, tier placement, reward eligibility, campaign audiences, and fraud or validation signals based on rules configured by a participating business. These operations administer the loyalty program and are not intended to make decisions producing legal or similarly significant effects. Contact the business if you believe a program result is incorrect.

13. Changes to this policy

This policy may be updated as the product, providers, or legal requirements change. Material changes will be communicated through an appropriate service channel when required. The date above identifies the current version.

14. Contact

The Revio service operator is Revio. Postal address: Skopje, 1000 Skopje, North Macedonia. For loyalty-program decisions, points, rewards, or program-specific privacy questions, contact the participating business shown in the app.