Legal

Privacy Policy

Industry Registry Network LLC  ·  Effective August 4, 2026

Table of Contents
  1. Introduction
  2. Information We Collect
  3. How We Use Your Information
  4. Third-Party Services
  5. Data Retention
  6. Your Rights (GDPR)
  7. Your Rights (CCPA)
  8. Cookies
  9. Children's Privacy
  10. Data Security
  11. Changes to This Policy
  12. Contact

1. Introduction

Industry Registry Network LLC ("Company", "we", "us", or "our") operates Loylty, a B2B outreach automation platform accessible at loylty.io and app.loylty.io. This Privacy Policy explains what information we collect when you use Loylty, how we use it, who we share it with, and what choices you have.

By creating an account or using Loylty, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, do not use the service.

2. Information We Collect

Account Information

When you register for a Loylty account, we collect your name, email address, and password. Passwords are hashed using bcrypt before storage — we never store your password in plain text and cannot read it.

Google OAuth

If you choose to sign in using Google, we receive your name and email address from Google. We do not receive your Google password or any other Google account data beyond what is needed to create and authenticate your Loylty account.

Usage Data

We collect information about how you use the platform, including:

  • Campaigns created, modified, and deleted
  • Records imported and processed
  • Sender profiles configured
  • Activity logs and submission history
  • Feature interactions and page views within the application

Payment Information

All payment processing is handled by Stripe. When you enter billing information, it goes directly to Stripe — we never see or store your card number, CVV, or full billing address. We do receive and store a Stripe customer ID and subscription status to manage your plan.

Communications

If you email us at support@loylty.io or contact us through any other channel, we retain those communications to help resolve your inquiry and improve the service.

3. How We Use Your Information

We use the information we collect to:

  • Provide the service — operate your account, process campaigns, deliver features, and maintain the platform.
  • Improve the service — analyze usage patterns to understand what's working and prioritize product improvements.
  • Send transactional emails — deliver welcome emails, password reset instructions, billing confirmations, and service notifications. We do not send marketing emails unless you opt in.
  • Prevent fraud and abuse — detect patterns that suggest unauthorized access, misuse of the platform, or violation of our Terms of Service.
  • Comply with legal obligations — retain billing records, respond to lawful requests from government authorities, and enforce our agreements.

We do not sell your personal information, use it to build advertising profiles, or share it with third parties for their marketing purposes.

4. Third-Party Services We Use

We rely on the following third-party providers to operate Loylty. Each has its own privacy practices governing your data:

  • Stripe — Payment processing. Stripe handles all credit card transactions. Privacy policy: stripe.com/privacy
  • Brevo (formerly Sendinblue) — Transactional email delivery (welcome emails, password resets, billing notifications). Privacy policy: brevo.com/legal/privacypolicy
  • Google OAuth — Optional sign-in via Google. If you use this feature, Google's privacy practices apply. Privacy policy: policies.google.com/privacy
  • Supabase — Database infrastructure for storing prospect records and campaign data. Privacy policy: supabase.com/privacy
  • Hetzner Online — Server hosting (EU-based data centers). Privacy policy: hetzner.com/legal/privacy-policy

We select providers that meet appropriate data security standards and, where required, execute data processing agreements with them.

5. Data Retention

We retain your account data for as long as your account is active. If you cancel your account, your data is retained for 30 days and then deleted, giving you time to retrieve anything you need.

You may request deletion of your account and associated data at any time by emailing support@loylty.io. We will process your request within 30 days.

Billing records — invoices, payment history, and subscription records — are retained for 7 years as required by applicable accounting and tax law, regardless of account status.

6. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data under the General Data Protection Regulation:

  • Right of access — You may request a copy of the personal data we hold about you.
  • Right to rectification — You may request that we correct any inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten") — You may request that we delete your personal data, subject to legal retention requirements.
  • Right to data portability — You may request your data in a structured, machine-readable format so you can transfer it to another service.
  • Right to object — You may object to processing of your personal data where we rely on legitimate interests as the legal basis.
  • Right to restrict processing — In certain circumstances, you may request that we limit how we use your data.

To exercise any of these rights, email support@loylty.io. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

Our legal basis for processing your data is contract performance (providing the service you signed up for), legitimate interests (security, fraud prevention, service improvement), and legal obligation (billing record retention).

7. Your Rights (CCPA)

California residents have the following rights under the California Consumer Privacy Act:

  • Right to know — You may request details about the categories and specific pieces of personal information we have collected about you in the past 12 months.
  • Right to delete — You may request deletion of personal information we have collected from you, subject to certain exceptions.
  • Right to opt out of sale — We do not sell personal information. There is nothing to opt out of.
  • Right to non-discrimination — We will not discriminate against you for exercising your privacy rights.

To submit a CCPA request, email support@loylty.io with the subject line "CCPA Request." We will respond within 45 days.

8. Cookies

Loylty uses essential cookies to keep you signed in. Specifically, we store a session token in a cookie so your browser remains authenticated between visits. This cookie is required for the application to function — without it, you would be logged out on every page load.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. We do not use cookies to build behavioral profiles or share any data with ad networks.

You can configure your browser to block or delete cookies. Blocking our session cookie will prevent you from staying logged in to Loylty, but will not affect your ability to browse our marketing pages.

9. Children's Privacy

Loylty is a business-to-business software platform intended for use by adults running commercial operations. It is not directed to children under the age of 13, and we do not knowingly collect personal information from anyone under 13.

If you believe we have inadvertently collected information from a child under 13, please contact us at support@loylty.io and we will delete it promptly.

10. Data Security

We take the security of your data seriously and employ the following measures:

  • Encryption in transit — All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
  • Password hashing — Passwords are hashed using bcrypt with a strong work factor. We cannot recover your password — only reset it.
  • Access controls — Access to production systems is restricted to authorized personnel only.
  • Infrastructure security — Our servers are hosted at Hetzner Online, which maintains SOC 2 equivalent physical and network security controls.

No security system is perfect, and we cannot guarantee the absolute security of your data. In the event of a data breach that affects your personal information, we will notify you via email within 72 hours of becoming aware of it, in compliance with applicable breach notification laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time as our practices change or as required by law. When we make material changes, we will notify you by sending an email to the address on file for your account and by posting a prominent notice on the site.

Changes take effect on the effective date stated at the top of the updated policy. Continued use of Loylty after that date constitutes your acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or want to exercise any of your rights, please contact us:

✉️
Industry Registry Network LLC
State of Florida
Email: support@loylty.io