This Privacy Policy explains how Worthify, Inc. collects, uses, discloses, and protects personal information through its websites, applications, merchant services, payment experiences, rewards programs, online shops, customer communications, and related services.

1. Who We Are

Worthify, Inc. is a Delaware C Corporation operating in Canada and the United States.

Our principal business address is:

1008 9 St SW

Calgary, Alberta T2R 1B1

Canada

Questions or privacy requests may be sent to privacy@worthifyrewards.com.

2. Our Role

Worthify may handle personal information in different capacities.

For merchant account, billing, website, security, and direct-support information, Worthify generally determines why and how the information is processed.

When Worthify processes customer information on behalf of a merchant, the merchant generally determines the purposes for which that information is used. Customers may need to contact the relevant merchant regarding certain requests.

3. Information We Collect

Depending on how you use Worthify, we may collect:

Account and identity information

Name

Email address

Telephone number

Login credentials

Business role

Account identifiers

Verification information

Business information

Business name

Business address

Locations

Branding

Products and menus

Tax and payment settings

Employee and authorized-user information

Payment and transaction information

Transaction amount

Products purchased

Date, time, and location

Order and fulfilment information

Refunds and disputes

Payment method type and limited card details, such as brand and last four digits

Complete payment-card information is generally collected and processed by payment providers such as Stripe rather than stored directly by Worthify.

Customer and rewards information

Customer name and contact details

Rewards membership

Points, visits, tiers, and redemptions

Purchase and order history

Customer preferences

Wallet-pass activity

Merchant relationships

Marketing and engagement information

Messages sent

Email delivery and engagement

Push-notification activity

Offers received or redeemed

Communication preferences

Unsubscribe status

Campaign audience or segment

Device and technical information

IP address

Browser and device type

Operating system

App and website activity

Device identifiers

Log and diagnostic information

Cookie and similar-technology data

Location information

Worthify may process approximate or precise location information when a feature requires it and the user grants the necessary device permission. Location permissions can normally be changed through device settings.

Communications

We may collect information contained in support requests, surveys, feedback, interviews, and other communications with Worthify.

4. Sources of Information

We may receive information:

Directly from merchants and customers.

Automatically through websites, applications, and devices.

From participating merchants.

From payment processors and integration partners.

From service providers.

From authorized employees or account administrators.

5. How We Use Information

We may use personal information to:

Create and administer accounts.

Provide payments, ordering, rewards, marketing, and insights.

Process and record transactions.

Operate merchant-branded customer experiences.

Deliver receipts, order updates, rewards messages, and notifications.

Personalize merchant and customer experiences.

Measure rewards and customer engagement.

Produce reports and insights for merchants.

Detect fraud, misuse, and security incidents.

Provide support.

Maintain and improve the Services.

Comply with legal and regulatory obligations.

Enforce agreements and protect legal rights.

Send Worthify marketing where permitted.

We may aggregate or de-identify information so it can no longer reasonably identify an individual and use that information for analytics, reporting, and product improvement.

6. Consent and Other Legal Grounds

Depending on the jurisdiction and context, Worthify processes personal information based on:

Consent.

Performance of a contract.

Legitimate business purposes.

Compliance with legal obligations.

Protection against fraud and security threats.

Other grounds permitted by applicable law.

You may withdraw consent where processing is based on consent, subject to legal or contractual restrictions.

7. How We Disclose Information

We may disclose personal information to:

Participating merchants

When customers join a merchant’s program, place an order, make a payment, or otherwise interact with that merchant through Worthify.

Service providers

Providers supporting payment processing, hosting, authentication, communications, wallet passes, analytics, security, customer support, and other business operations.

Payment processors

Including Stripe and relevant banking or payment partners.

Legal and regulatory recipients

When required by law, court order, regulatory request, or reasonably necessary to protect rights, safety, security, and the integrity of the Services.

Business transactions

In connection with financing, reorganization, merger, acquisition, asset sale, or another corporate transaction, subject to appropriate protections.

Other parties at your direction

When you request, authorize, or intentionally connect a third-party service.

Worthify does not sell personal information for money. Worthify does not use merchant customer lists to independently market unrelated third-party products to those customers.

8. Merchant Communications

Merchants may use Worthify to send rewards, promotional, and operational messages.

Merchants are responsible for obtaining required consent and complying with applicable communications laws. Worthify supports communication preferences and unsubscribe mechanisms where applicable.

Customers may:

Use the unsubscribe option in marketing emails.

Disable push notifications through device settings.

Remove a wallet pass.

Contact the merchant regarding program-specific messages.

Certain transactional messages, such as receipts, security notices, and order updates, may still be sent when necessary to provide a requested service.

9. Cookies and Similar Technologies

Worthify may use cookies and similar technologies to:

Keep users signed in.

Remember preferences.

Secure accounts.

Understand website and product usage.

Diagnose errors.

Measure performance.

Improve the Services.

Where required, users will be given choices concerning non-essential cookies.

10. International Processing

Worthify operates in Canada and the United States and may use service providers in other jurisdictions.

Personal information may therefore be processed outside the province, state, or country where it was collected. It may become subject to the laws and lawful-access requirements of those jurisdictions.

We use contractual, organizational, and technical measures intended to protect information when it is transferred internationally.

11. Data Retention

We retain personal information only for as long as reasonably necessary to:

Provide the Services.

Maintain business and transaction records.

Meet contractual obligations.

Resolve disputes.

Prevent fraud.

Comply with legal, tax, accounting, and regulatory requirements.

Retention periods vary by information type and relationship. We may retain de-identified information where it no longer identifies an individual.

12. Security

Worthify uses reasonable administrative, technical, and organizational safeguards intended to protect personal information.

No system is completely secure. Users are responsible for protecting their credentials and notifying Worthify of suspected unauthorized access.

13. Privacy Rights

Depending on where you live, you may have the right to:

Request access to personal information.

Request correction of inaccurate information.

Request deletion, subject to legal exceptions.

Withdraw consent.

Object to or restrict certain processing.

Request information about disclosures.

Receive a portable copy of certain information.

Appeal or complain about a privacy decision.

We may verify your identity before completing a request.

If Worthify processes your information for a merchant, we may direct the request to that merchant or assist the merchant in responding.

Requests may be sent to privacy@worthifyrewards.com.

14. Canadian Residents

Worthify handles personal information in accordance with applicable Canadian private-sector privacy laws, which may include federal and provincial requirements.

Canadian residents may request access to or correction of their information and may withdraw consent, subject to lawful limitations.

You may also contact the applicable federal or provincial privacy regulator if you are dissatisfied with our response.

Commercial electronic messages are managed in accordance with applicable Canadian anti-spam requirements.

15. United States Residents

Residents of certain US states may have additional rights concerning access, correction, deletion, portability, and specific disclosures or uses of personal information.

Where an applicable state law grants these rights, requests may be submitted to privacy@worthifyrewards.com.

Worthify will not discriminate against an individual for exercising an applicable privacy right.

16. Children

Worthify is intended for businesses and general commercial transactions. It is not designed for children under 13, and we do not knowingly collect personal information directly from children under 13 without appropriate authorization.

If you believe a child has provided personal information improperly, contact us so we can investigate and take appropriate action.

17. Third-Party Services

Worthify may link to or integrate with third-party services. Their handling of personal information is governed by their own privacy policies.

We encourage users to review those policies before using third-party services.

18. Changes to This Policy

We may update this Privacy Policy to reflect changes to the Services, legal requirements, or data practices.

If a change is material, we will provide reasonable notice through the Services, by email, or by another appropriate method.

19. Contact Worthify

Privacy questions and requests may be sent to:

Worthify, Inc.

1008 9 St SW

Calgary, Alberta T2R 1B1

Canada

privacy@worthifyrewards.com