Privacy Policy
Last updated: April 29, 2026
GDPR & CCPA Compliant
Your data is encrypted, stored in EU, never sold.
Who We Are
Zea SAS, based in Paris, France. We make digital loyalty cards for businesses. Contact us: privacy@zealoyalty.com
What We Collect
1 Your Business Account
- Name, email, business name
- Payment info (via Stripe—we don't store it)
- Your logo and brand colors
- AI guardrail settings
2 Your Customers' Loyalty Data
- Name, email, phone (optional)
- Points, stamps, tier status
- Transaction history
- Wallet device IDs
You own this data. We process it for you.
3 Usage & Analytics
- Card scans, views, redemptions
- Device type, IP address
- AI action logs (90 days)
How We Use It
- Sync cards to Apple/Google Wallet
- Run AI Manager within your limits
- Process payments (Stripe)
- Provide support
- Improve our service
Security
Data stored in EU servers. We use:
TLS 1.3 encryption
AES-256 at rest
Role-based access
Regular audits
We Never Share With
- Advertisers
- Data brokers
- Anyone without your permission
Only Apple/Google get wallet pass data (required for cards to work). Stripe processes payments.
Your GDPR Rights
Access
Get a copy of your data
Rectify
Fix inaccurate data
Delete
Request removal
Export
Portable format
Email privacy@zealoyalty.com
Retention
- Account data Deleted 90 days after close
- Customer data Deleted 30 days after you cancel
- AI logs Anonymized after 90 days
Privacy Questions?
Our privacy officer responds within 30 days:
privacy@zealoyalty.comComplaints? Contact CNIL (France) or your national authority.