1. Introduction

Mazaya respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how Mazaya collects, uses, stores, processes, and shares personal data of platform users, merchants, and end-customers. Using the platform constitutes confirmation that you have read and understood this policy.

2. Scope of Policy

This policy applies to: 1. Merchants using the platform. 2. Business owners. 3. Authorized employees. 4. End-customers. 5. Website visitors.

3. Information We Collect

3.1 Merchant account data: Company name, owner's name, phone number, email address, physical business address, billing details, and subscription/usage records. 3.2 End-customer loyalty data: Name, phone number, email, loyalty points, visit history, stamp counts, cashback logs, vouchers, coupons, and redemption records. 3.3 Technical data: IP addresses, browser types, device types, operating systems, session timestamps, logs, and security metadata.

4. Information We Do Not Collect

Mazaya does not collect, process, or store credit card numbers, CVV codes, card expiration dates, or bank account details. All transactions are securely handled by PayPlus in accordance with their compliance policies.

5. Purposes of Processing

We use the data for: 1. Operating the loyalty platform. 2. Merchant account management. 3. Managing loyalty programs and tiers. 4. Updating digital passes in Apple Wallet and Google Wallet. 5. Customer support and troubleshooting. 6. Ensuring system security and fraud prevention. 7. Complying with legal and regulatory obligations. 8. Statistical analysis and reporting. 9. Product and feature development.

6. Legal Basis for Processing

Mazaya processes personal data to deliver the core service, fulfill contractual obligations, pursue legitimate business interests, comply with applicable laws, or based on explicit consent when required.

7. Sharing & Third-Party Disclosure

Information is shared only with trusted infrastructure providers required to operate the service (e.g., Vercel and Convex for hosting, PayPlus for payments, Apple Developer Program for pass signing, and Google Wallet API). We will disclose data to comply with legal requests when required.

8. Data Storage Location

Data is stored on secure cloud servers, including Vercel and Convex Cloud. Mazaya reserves the right to use other secure cloud providers as necessary.

9. Data Retention

We retain personal data as long as necessary to provide platform services, manage accounts, resolve disputes, enforce terms, or meet legal obligations. Thereafter, data is deleted or fully anonymized.

10. Information Security

Mazaya implements industry-standard technical and organizational security measures to safeguard data but cannot guarantee absolute security against all cyber threats.

11. User Rights

Subject to applicable law, users may request access, correction, export, or deletion of their personal data. For requests, contact privacy@mazaya.co.il.

12. Children's Privacy

Mazaya is a B2B SaaS platform and is not designed or intended for individuals lacking legal capacity under applicable local laws.

13. Policy Changes

We may update this policy periodically. The updated version published on the website is immediately binding.

Privacy Policy