Rewardable Privacy Policy
Last updated: May 18, 2026
Effective date: May 18, 2026
This Privacy Policy explains how Rewardable, Inc. (“Rewardable”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards personal information when you interact with our Services. It also describes the choices and rights available to you. If you have questions, please contact us using the details in the “Contacting Us” section below.
We may update this Privacy Policy periodically. We encourage you to review it regularly for any changes. See the “Modifications to This Privacy Policy” section for additional information.
User Consent: By accessing or using our Services, you consent to the practices described in this Privacy Policy and confirm that you are at least 18 years of age.
California, Virginia, Colorado, Connecticut, and Utah Residents: If you reside in one of these states, please review the Additional US Privacy Notice below for important information about your rights and our practices.
California Workforce: If you are a California resident who is an employee, job applicant, controlling owner, director, officer, or independent contractor of Rewardable, please see the separate Privacy Notice for California Company Workforce below.
Scope of This Privacy Policy
This Privacy Policy applies to personal information we collect or receive from individuals who: (1) visit getrewardable.com and any other websites or online properties we own and operate (including client and user interfaces), use our software applications, interact with our social media pages (such as Facebook and LinkedIn), or receive emails from us (collectively, the “Rewardable Pages”); and (2) engage with our technologies and platforms provided to our business customers and third parties, including our referral and loyalty platform and our integration platform (together with the Rewardable Pages, the “Services”).
This Privacy Policy does not apply to the privacy practices or data processing activities of third parties (except as required by law), including our business customers or service providers. See the “Third Parties” section for more details.
Your Choices: For information about opting out of marketing emails, disabling our cookies, opting out of third-party interest-based advertising, and limiting precise location data, see the “Choices” section below.
Account Deactivation and Data Rights: Information about deactivating your Rewardable account or accounts with our business customers, as well as how to exercise your data rights, is provided in the “Access and Rights Regarding Personal Information” section.
International Data Transfers: See the “International Information Transfers” section for details on how we handle transfers of your personal data across borders.
Information We Collect
Rewardable Integrations Platform Collection
Our Rewardable Integrations Platform is designed exclusively for access and use by our business customers and their authorized employees and representatives. It enables these customers to connect and integrate with various third-party services and platforms.
The Rewardable Integrations Platform itself does not directly collect personal information from end consumers. However, business customers may use the platform to gather or process personal information about their own customers. This Privacy Policy does not address our business customers’ data collection or processing practices through the Rewardable Integrations Platform. Please consult the relevant business customer’s privacy policy for those details.
As an employee or representative of a business customer, we may collect the following categories of personal information from you:
- name
- email address
- phone number
- physical address
- usage data, including time spent on the Services, pages visited, requested and referring URLs, dates and times of access, email interaction data, and other traffic-related information
- unique identifiers such as IP address and location derived from IP address
- information you voluntarily provide
- login credentials and authentication information
- browser details (type and language settings)
- device information (screen dimensions, brand, model, and mobile device identifiers)
- aggregated information
Some of this data is optional. If you choose not to provide certain required information, you may be unable to access or use certain features or services.
Rewardable Referral and Loyalty Platform Collection
Our Rewardable Referral and Loyalty Platform is used by our business customers, their employees and representatives, and their end customers. The platform enables business customers to manage custom loyalty programs and referral incentives that customers can share with friends and family.
Through the Rewardable Referral and Loyalty Platform, we may collect the following personal information:
- name
- email address
- phone number
- Rewardable user identification account number
- business customer identification number
- unique identification numbers, including IP address and location derived from IP address
- your staff identification number at the business customer using our Rewardable Referral and Loyalty Platform
- physical address
- Twitter user ID
- your Tweets submitted for earning loyalty points through the Rewardable Referral and Loyalty Platform
- usage data, including time spent on the Services, pages visited, requested and referring URLs, dates and times of access, email interaction data, and other traffic-related information
- transaction-related data such as date, time, and location of transactions (e.g., class attendance, check-ins, sessions, referrals, amounts spent), transaction descriptions or categories, quantities, and loyalty points earned or redeemed
- details regarding the specific business terms or referral offers you accepted
- demographic information (such as date of birth or gender) provided by you or the business customer
- information you voluntarily provide
- login credentials and authentication information
- browser details (type and language settings)
- device information (screen dimensions, brand, model, and mobile device identifiers)
- aggregated information
Some of this information is optional. Declining to provide required information may prevent you from accessing or using certain features.
For both platforms, we may collect the above information through your browser or device, mobile device identifiers, your activity on the Services, your IP address, data aggregation techniques, and the use of cookies and similar tracking technologies (see the “Cookies and Similar Technologies” section below).
We may also collect personal information when you inquire about our Services, register through our client or user interfaces, or request access to resources.
For the Rewardable Referral and Loyalty Platform only, we may receive your information when a friend or family member refers you, or when a business customer designates you as one of their customers. You may optionally provide names and email addresses of friends and family members when using referral features.
Some personal information may also be provided by business customers’ staff when they register their business for the Rewardable Referral and Loyalty Platform.
See the “Access and Rights Regarding Personal Information” section for details on how to exercise your rights regarding this data.
How We Use Your Information
Rewardable Integrations Platform Uses
When you are an employee or representative of a business customer, we may use your personal information to:
- respond to your inquiries, fulfill your requests, and manage your business customer account
- send you communications we believe may interest you, including marketing messages directed at the business customer you represent
- conduct internal business operations such as data analysis, fraud prevention and security, product development, service improvement, trend identification, and measuring Service effectiveness
- evaluate and report on the performance of marketing campaigns, and for any other purposes with your consent
Rewardable Referral and Loyalty Platform Uses
We may use personal information collected through the Rewardable Referral and Loyalty Platform to:
- respond to inquiries, fulfill requests, and manage user accounts
- track and award loyalty points within the program
- send you communications we believe may interest you, including marketing messages related to the Services
- contact individuals you refer through the platform
- enable business customers’ staff to access and manage their loyalty programs
- permit business customers to engage developers for business intelligence, loyalty point redemption, and integration of loyalty data into other applications
- allow business customers to share your information with their partners and service providers when they direct or request us to do so
- support internal business activities such as tracking customer conversion, data analysis, fraud prevention, product development, Service improvement, trend identification, and effectiveness measurement
- display the nearest location where you can redeem an offer
- measure and report on marketing campaign performance (including conversion tracking) and for any other purposes with your consent
For both platforms, we may also use your information to:
- send you administrative or service-related communications
- operate, maintain, analyze, and improve the Services
- ensure proper functionality of the Services
- monitor usage patterns to enhance design and features
- diagnose technical issues and manage the Services using your IP address
- comply with legal obligations, respond to lawful requests, enforce our terms, protect the security and integrity of our Services, safeguard rights and safety, pursue remedies, or prevent illegal, unethical, or harmful activity
We may also work with third-party partners to analyze Service usage patterns and deliver advertising on other websites and applications based on your activity. These partners may use cookies, web logs, or web beacons. See the “Cookies and Similar Technologies” and “Choices” sections for more information and opt-out options.
When We Share Your Information
Rewardable Integrations Platform Sharing
We may disclose your personal information to:
- third-party service providers who assist with email management, hosting, storage, web services, technical support, marketing analytics, and other operational needs
- anyone you directly share information with through features that allow you to post content in your account or other public areas of the Services
Rewardable Referral and Loyalty Platform Sharing
We may disclose your personal information to:
- our business customers and their employees or service providers for purposes of operating the Services and analyzing performance
- third-party service providers who assist with email management, transaction processing, campaign measurement, hosting, storage, performance tracking, technical support, marketing analytics, and related services
- anyone you directly share information with through features that allow you to post content (including social media pages)
- our business customers’ partners and service providers when the business customer directs or requests us to share your information
Business customers may instruct Rewardable (acting as their service provider) to share your information with their partners or service providers to enable targeted advertising. In these cases, we rely on the business customer to provide any required notices or obtain necessary consents.
For both platforms, we may also share information:
- with our affiliates for the purposes described in this Privacy Policy
- with another business entity when directed by our business customer
- with a successor entity in connection with a merger, acquisition, sale, bankruptcy, or similar transaction
- when we believe disclosure is necessary to comply with applicable law, legal process, government requests, enforce our terms, protect our operations and security, safeguard rights and safety, pursue remedies, or prevent illegal, unethical, or harmful activity
- with other third parties when you provide consent
We may also share aggregated or de-identified information, such as overall user counts or business customer counts, as needed to develop and improve our Services.
We require our service providers to maintain privacy and security practices consistent with our own, limit their use of data to the specific services we request, and not use the information for any other purpose.
Third-party analytics providers may use your information to deliver more relevant advertising on other sites and apps. You can opt out of interest-based advertising by following the instructions in the “Choices” section.
When you voluntarily post information in any public forums or community features we offer, that information (along with your username) may be visible to other users and the general public if the forum is open.
Cookies and Similar Technologies
We and our service providers use cookies and similar technologies on the Services. A cookie is a small file stored on your device that helps us remember your preferences and improve your experience (for example, keeping you logged in across visits).
Cookies also help us understand how users interact with the Services so we can make improvements. Some cookies are essential for providing core functionality; disabling them may prevent you from using certain features, such as staying logged in to earn or redeem loyalty points.
If you submit an inquiry that includes your name and email, we do not link that information to interest-based advertising across other sites. However, you may still receive our marketing emails, and third parties may show you interest-based ads based on cookies they place.
We and our service providers may also use pixel tags, web beacons, clear GIFs, or similar technologies to analyze usage and measure marketing effectiveness.
Third parties may use cookies or similar technologies on our Services to deliver interest-based advertising when you visit other websites or apps. Our business customers may also use these technologies to monitor their loyalty programs or enable targeted advertising by their partners.
Third-party data practices are governed by their own privacy policies, which we do not control.
For more information about cookies and how to manage them, visit www.allaboutcookies.org and www.youronlinechoices.eu. See the “Choices” section for your specific options regarding our cookies and third-party advertising.
We do not track users across third-party websites in a way that would require us to respond to “Do Not Track” (DNT) signals, and we do not engage in targeted advertising based on cross-site tracking.
Legal Basis for Processing Personal Information of European Data Subjects
Acting as Data Processor. When we process personal data on behalf of our business customers (who act as data controllers), we do so according to their instructions. In these situations, the business customer is responsible for establishing a valid legal basis for processing.
Acting as Data Controller. In certain cases—such as when we collect personal information (e.g., name, phone number, or email) directly through our Rewardable Pages without connection to a specific business customer—we act as the data controller. In those situations, we typically rely on legitimate interests to provide and improve our Services. We may also rely on your consent or other lawful bases such as contract performance or legal obligations where appropriate.
Data Retention
We retain your personal information only as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law, or you request deletion in accordance with applicable rights. See the “Access and Rights Regarding Personal Information” section for more details.
Your Choices
Opting Out of Marketing Communications
You may opt out of receiving promotional emails from us at any time by contacting us at privacy@getrewardable.com or by clicking the unsubscribe link included in our marketing emails.
Note that even if you opt out of marketing messages, we may still send you important administrative or service-related communications that are necessary to provide the Services.
Opting Out of Our Cookies
You can disable cookies (including ours) through your browser settings. However, because our cookies are required to keep you logged in and enable core functionality such as earning and redeeming loyalty points, disabling them may make the Services unavailable to you.
Opting Out of Third-Party Interest-Based Advertising
Many third parties that use cookies on our Services participate in industry opt-out programs. You can learn more and exercise choices at optout.aboutads.info or www.aboutads.info/choices.
Opt-outs apply only to the specific browser or device where they are set. You will need to opt out separately on each browser and each mobile device.
For general information on managing cookies, visit www.allaboutcookies.org and www.youronlinechoices.eu.
Opting Out of Precise Location Data
You can prevent collection of precise location information through your mobile device settings.
Access and Rights Regarding Personal Information
To access, correct, update, or request deletion of the personal information we maintain about you, please email us at privacy@getrewardable.com.
California, Virginia, Colorado, Connecticut, and Utah Residents: Additional rights are described in the Additional US Privacy Notice below.
European Residents (EEA, UK, Switzerland): You have specific rights under applicable data protection laws, including the right to be informed, access, rectification, erasure, restriction of processing, data portability, objection, and the right to lodge a complaint with a supervisory authority. You may also have rights regarding automated decision-making and profiling. To exercise these rights, email privacy@getrewardable.com or contact our designated European or UK representative listed in the “Contacting Us” section.
If your data is processed on behalf of a business customer, you may also exercise rights directly with that customer.
Users of the Rewardable Referral and Loyalty Platform may deactivate their account and manage connections to business customers through the user settings page. Employees or representatives using the Rewardable Integrations Platform may also contact us at support@getrewardable.com.
Third Parties
This Privacy Policy does not cover the privacy practices of any third parties, including business customers, partners, service providers, or websites linked from our Services. We are not responsible for their data practices (except as required by law).
Sensitive Information
We ask that you do not send us or disclose any sensitive personal information (such as Social Security numbers, government identifiers, racial or ethnic origin, political opinions, religious beliefs, health or medical information, criminal background, trade union membership, or sexual orientation) through the Services unless it is legally required.
Children’s Privacy
Our Services are not directed to individuals under 18 years of age, and we ask that minors (or anyone under the legal age in their jurisdiction) not provide personal information to us.
Business customers using our loyalty platform may occasionally share information about minors included in a parent’s or guardian’s account. We ask business customers not to do so without proper parental consent. If we learn that we have collected personal information from a child under 18 without verifiable parental consent, we will take steps to delete it.
If you believe your child has provided us with personal information without your consent, or if a business customer has done so, please contact us at privacy@getrewardable.com.
Security
We implement reasonable physical, organizational, administrative, and technical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, or destruction, taking into account the nature, sensitivity, and volume of the data.
International Information Transfers
Your personal information may be transferred to, stored, and processed in countries outside your home jurisdiction (including the United States) where privacy laws may differ from those in your location. By using our Services or providing information to us or our business customers, you consent to this transfer and processing.
For individuals in the European Economic Area, United Kingdom, or Switzerland, we protect transferred data by relying on adequacy decisions where available or by using appropriate safeguards such as the European Standard Contractual Clauses. Rewardable currently relies on these Standard Contractual Clauses for international transfers.
Modifications to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time. The “Last updated” date at the top of this page indicates when the most recent changes were made. Where required by law, we will seek your consent before implementing material changes.
Contacting Us
If you have questions or concerns about this Privacy Policy or our privacy practices, please contact us by email at privacy@getrewardable.com or by mail at:
Rewardable, Inc.
Attn: Privacy
11869 Teton Park Drive, Herriman, UT 84096
USA
California Shine the Light Law
California residents may request information about our disclosures of personal information to third parties for direct marketing purposes by contacting us using the information above.
Additional US Privacy Notice
This Additional US Privacy Notice applies to California, Virginia, Colorado, Connecticut, and Utah residents (and to California residents acting in a business capacity) when we collect their personal information, in addition to the information provided above. If you are part of Rewardable’s California workforce, please see the separate Privacy Notice for California Company Workforce below.
Categories of Personal Information We Collect
We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular consumer, device, or household. The categories and examples are as follows:
| Category | Examples |
|---|---|
| Identifiers | For example, name, email address, physical address, cookie ID, IP address, and account information. |
| Personal information categories listed in the California Customer Records statute | For example, name and phone number. |
| Protected classification characteristics under California or federal law | For example, age and gender. |
| Commercial information | For example, consuming tendencies and histories. |
| Biometric information | For example, exercise data for users who use our loyalty program for their gym visits. |
| Internet or other similar network activity | For example, browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement. |
| Geolocation data | For example, physical location or movements. |
| Professional or employment-related information | For example, current or past job history of employees and representatives of our business customers. |
| Inferences drawn from other personal information | Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
| Sensitive personal information | A consumer’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account. |
| Sensitive personal information | A consumer’s precise geolocation. |
Sensitive Personal Information
We collect the following sensitive personal information:
- your loyalty account information with Rewardable as a customer of our business customer
- your account information with Rewardable as an employee of our business customer
- a referred prospect’s account information with Rewardable
- your location provided by your browser or derived from IP address
- your location when you earn and redeem transactions
We use this sensitive information solely to provide our services. We do not use it to infer characteristics about you, sell it, or process it for behavioral advertising purposes.
To opt out of precise location collection, see the “Opting Out of Precise Location Data” section. To request deletion of precise location data, email privacy@getrewardable.com.
How We Use Personal Information
We use personal information to fulfill requests, provide and improve the Services, send communications, conduct business operations, comply with legal obligations, and as otherwise described at the time of collection or permitted by the CCPA.
Sources of Personal Information
We obtain personal information from:
- you directly
- automatic collection through your use of the Services
- our business customers
- our business customers’ partners and service providers
- our own service providers
- third-party single sign-on services when you log in that way
Deidentified Information
We maintain deidentified information in deidentified form and do not attempt to reidentify it except to verify our deidentification processes.
Disclosures of Personal Information
We disclose personal information for business purposes to the following categories of third parties:
- our affiliates
- our business customers and their partners and service providers
- our service providers
- a buyer or successor in the event of a business transaction
- the public when you voluntarily post information
- other third parties with your consent
We may also disclose information when required or permitted by law, to respond to legal process or government requests, to protect rights and safety, or to prevent illegal or harmful activity.
The categories of personal information we may disclose are the same as those listed in the collection table above.
No Sales of Personal Information
We do not sell personal information.
No Targeted Advertising / Sharing for Behavioral Advertising
We do not use your information for targeted advertising or share it with third parties for cross-context behavioral advertising. When business customers direct us to share information with their partners for their own targeted advertising, we rely on the business customer to provide required notices and obtain any necessary consents.
No Profiling for Significant Decisions
We do not engage in profiling that produces legal or similarly significant effects concerning you.
Your Rights and Choices (California, Virginia, Colorado, Connecticut, Utah)
You have the right to know/access, correct, delete, and data portability regarding your personal information. You also have the right to be free from discrimination or retaliation for exercising these rights.
If we received your data from a business customer, you should exercise these rights directly with that customer unless they have authorized us to respond on their behalf.
Appeal Rights (Virginia, Colorado, Connecticut): You may appeal any decision by emailing privacy@getrewardable.com with “Appeal” in the subject line. Response timelines are 60 days (Virginia/Connecticut) or 45 days (extendable by 60 days for Colorado).
How to Exercise Rights: Submit a verifiable consumer request by emailing privacy@getrewardable.com with your full name, email address, and a clear description of your request.
Business Capacity Requests (California): Include your business email address and the type of request.
No account is required to submit a request. If you have an account, we may ask you to submit through it for verification.
Privacy Notice for California Company Workforce
This notice applies only to California residents who are employees, job applicants, controlling owners, directors, officers, or independent contractors of Rewardable.
Categories of Personal Information Collected
| Category | Examples |
|---|---|
| A. Identifiers | A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers. |
| B. California Customer Records personal information categories | A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, financial information, medical information, or health insurance information. |
| C. Protected classification characteristics | Age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, disability, sex, gender identity, gender expression, pregnancy, sexual orientation, veteran or military status, and genetic information. |
| D. Commercial information | Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
| E. Biometric information | Genetic, physiological, behavioral, and biological characteristics or activity patterns used to extract a template or other identifier. |
| F. Internet or other similar network activity | Browsing history, search history, and information on interaction with a website, application, or advertisement. |
| G. Geolocation data | Physical location or movements. |
| H. Sensory data | Audio, electronic, visual, thermal, olfactory, or similar information. |
| I. Professional or employment-related information | Current or past job history or performance evaluations. |
| J. Non-public education information | Education records directly related to a student maintained by an educational institution or party acting on its behalf. |
| K. Inferences drawn from other personal information | Profiles reflecting preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
| L. Sensitive personal information | Social security, driver’s license, and other IDs; account log in information; precise geolocation; race, ethnic origin, religious beliefs; contents of emails; health information; sexual orientation. |
Sensitive Personal Information
We collect the sensitive personal information listed above for the purposes described in the “Use of Personal Information” section below. We do not use it to infer characteristics, sell it, or process it for behavioral advertising.
Sources
- Directly from you
- Automatically collected
- From service providers (e.g., recruiters, background check providers)
Use of Personal Information
We use this information for purposes appropriate to each role (employees, job applicants, independent contractors), including identification, verification, payroll and benefits administration, performance evaluation, compliance with laws, and other legitimate business needs. We also use it for legal compliance, security, and protection of rights.
Disclosures
We disclose the listed categories to affiliates, service providers, business buyers, the public (when you voluntarily share), and as required or permitted by law, or with your consent.
No Sale or Sharing for Behavioral Advertising
We do not sell personal information or share it for cross-context behavioral advertising.
Your California Workforce Rights
You have the right to know/access, data portability, correction, deletion, and protection from retaliation or discrimination.
To exercise these rights, email hr@getrewardable.com with your full name, email address, and the type of request, or call (801) 382-9554.
Only you (or your authorized representative) may make a verifiable request. You may also make requests on behalf of your minor child.