Last updated:
Privacy notice
This notice explains what happens to the information you share on the Loyever website and its waitlist, and to the details we hold about you and your business when you use the Loyever service.
Who is responsible
For the English-language website and the global waitlist, the data controller is the company below. The address is its registered office.
Loyever is operated by LATIFZADA LTD, company no. 15471604, 60 Tottenham Court Road, Office 943, London W1T 2EW
The Azerbaijani-language website and the Azerbaijan waitlist have their own controller, the sole proprietor Elvin Latifzada in Azerbaijan, as set out in the Azerbaijani version of this notice.
What we collect
- Your email address, when you join the waitlist.
- The language of the page, the market you signed up for (Azerbaijan or global) and the page you used.
- Whether you ticked "Send me launch news and offers". If you did, we keep the exact wording you agreed to and when you agreed.
- A Turnstile check by Cloudflare that confirms a person, not a bot, sent the form. To do this, Cloudflare looks at technical signals from your browser and at your IP address.
- When you open a page, Cloudflare, which delivers the site, and our server process your IP address and browser details to send you the page and protect the site from abuse.
The waitlist form is on our pricing page.
Why we use it
- To tell you when Loyever launches in your market. This is why you joined the waitlist.
- To send you launch news and offers, only if you ticked the box.
- To keep automated spam off the waitlist.
We keep you on the waitlist because you asked to join it. We send launch news and offers only with your consent, and you can withdraw it at any time.
How long we keep it
We keep waitlist details until Loyever launches in your market and for 12 months after that, and then delete them. If you ask us to delete them sooner, we will.
Where it is kept
The website and the waitlist are hosted on servers in Germany, in the European Union. Cloudflare also delivers the site through its own network.
The anti-bot check is run by Cloudflare, Inc., a company in the United States, which may process this data outside Azerbaijan and the UK.
Your rights
- Ask for a copy of the details we hold about you.
- Ask us to correct or delete them.
- Withdraw your consent to launch news and offers at any time. You stay on the waitlist unless you ask us to remove you.
To do any of this, email us from the address you signed up with: hello@loyever.com
When you use the Loyever service
This part is about the business account itself: what we hold when you sign up at app.loyever.com, run loyalty cards and pay for a plan.
For this data the owner and operator is the seller of the service in Azerbaijan, whichever language you are reading:
Seller: Elvin Latifzada, sole proprietor registered in Azerbaijan, taxpayer ID (VÖEN) 1605412122
Address: 13a Mehdi Abbasov Street, Baku, Azerbaijan
Your business remains the owner of your members’ personal data; Loyever only processes it for you, as the operator.
What we do with members’ data, and on what terms, is in the data processing agreement. Each of your members also gets their own privacy notice on your join page.
What we hold about your business
- Your name and email address, and your password kept only as a hash we cannot read back.
- Your business details: its name, country, time zone, locations, opening hours, logo and photos.
- The staff you invite and the till devices you pair, with the times they were last used.
- Your loyalty cards and their settings, and the messages and reminders you write.
- Your payment records: the plan, the period, the amount, the receipt number and the bank’s order and approval codes.
- Your API keys and webhook endpoints, kept hashed or encrypted, and the technical records of requests made with them.
- Anything you write to us by email, so we can answer it.
We never hold your card number, its expiry or its security code: those are entered on Kapital Bank’s own page and never reach us.
Why we hold it, and on what basis
- To run the service you asked for: your account, your cards, the till, messages, statistics and the API. This is how we perform our contract with you.
- To take payment and to issue receipts, and to keep the accounting records the tax law requires us to keep.
- To keep the service secure and working: sign-in records, rate limits and technical logs that show abuse and faults.
- To send you service messages about your account — receipts, billing notices, security notices. These are part of the service, not marketing.
Your data is stored on servers in Germany, in the European Union, with Hetzner Online GmbH. By creating an account you agree to it being kept there and handled by the providers named below, which may process it outside Azerbaijan.
Those providers are Hetzner Online GmbH (hosting), Cloudflare, Inc. (network delivery and bot protection), Apple Inc. and Google LLC (delivering and updating Wallet cards) and ImprovMX (email delivery). They are listed, with what each one does, in the data processing agreement. Card payments are taken by Kapital Bank ASC on its own page; it never receives your members’ data, so it is not a sub-processor under that agreement.
On our marketing site, and on the screens where you create and set up an account, we use Google Analytics — but only if you allow it, and never on the dashboard pages that show your members. Which cookies that involves, what Google receives and how to change or withdraw your choice are set out in the cookie notice.
How long we keep it
- Account and business data: while the account is open, and then deleted within 90 days of closure.
- Payments and receipts: for as long as the tax law requires accounting records to be kept, even after the account is closed.
- Backups of the database: 14 days.
- API event records: 30 days.
- Technical and security logs: a limited period, and no longer than we need them to run and protect the service.
Emails and choices
Receipts, billing notices and security messages are part of the service and cannot be turned off while your account is open. Product news is separate: it is sent only if you ask for it, and you can stop it at any time.
You can ask what we hold about your business account and why, have it corrected or deleted, ask who has received it, withdraw a consent you gave, and ask us to close the account and export your data. Write to us from the account’s email address using the address above.
Language
This notice exists in Azerbaijani and in English. For customers in Azerbaijan the Azerbaijani text prevails; the English text is a translation, provided for convenience.
You can read the Azerbaijani version of this notice here.
Contact
Questions about this notice or your data: hello@loyever.com