Privacy Policy

Last Revised: July 10, 2026

Introduction

This Privacy Policy (the “Policy”) applies to the Pintuna platform, including our website at https://www.pintuna.com (the “Site”), our software and mobile applications, and our integrations available through third-party app marketplaces, including the Square App Marketplace, the Clover App Market, and the Shopify App Store (collectively, the “Pintuna Platform”), developed, owned, and operated by Pintuna Inc. (“Pintuna,” “we,” “us,” or “our”).

This Policy applies any time you interact with us — in person, by phone, by mail or email, or through the Pintuna Platform — unless we provide a different policy that states it applies instead.

This Policy explains:

how we collect, use, and share information from or about you;
your choices about our use of your personal information; and
how you can access and update your information on the Pintuna Platform.

We provide the Pintuna Platform to merchant businesses (“Merchants”) so they can offer memberships, loyalty programs, gift cards, store credit, event tickets, coupons, and digital liability waivers (the “Services”) to their own customers (“End Users”). If you are an End User, the Services let you manage the accounts you hold with a Merchant — such as a gift card balance, loyalty points, a membership, store credit, a ticket or coupon, or a signed waiver — including through Apple Wallet and Google Wallet. Our Waivers app is integrated with our Membership app and our Events & Tickets app, so a Merchant can require a waiver be signed as part of purchasing a membership or event ticket.

Sometimes we may appear on a site owned by a third party, a co-branded site, or a social media page, or we may link to a third-party site. In those cases, that third party’s privacy policy and terms, not ours, will apply unless we tell you otherwise. Some Pintuna services for Merchants are also offered through the Merchant’s own website, social media pages, or through their POS or e-commerce platform — in those cases, that platform’s or Merchant’s privacy policy will also govern their own use of your data.

Our Apps and Platform Integrations

Pintuna is available through the following POS and e-commerce platforms. When a Merchant connects Pintuna to one of these platforms, we receive certain information from that platform in order to operate the Services on the Merchant’s behalf:

Square — available via the Square App Marketplace. We receive Merchant business and account information and transaction/order data necessary to provide our Services on the Merchant’s behalf.
Clover — available via the Clover App Market. We receive Merchant business and account information and transaction/order data necessary to provide our Services on the Merchant’s behalf.
Shopify — available via the Shopify App Store. We receive Merchant store, order, and customer information necessary to provide our Services on the Merchant’s behalf.

We access only the information each platform’s permissions (API scopes) make available and that is necessary to provide the Services. We do not use data received through these integrations for purposes unrelated to providing and improving the Services, except as otherwise described in this Policy.

Our Waivers App

Our Waivers app lets Merchants collect signed liability waivers and related consents from End Users. The Waivers app is integrated with our Membership app and our Events & Tickets app, so a Merchant can require a waiver to be signed as part of purchasing a membership or an event ticket. When you sign a waiver through the Services, we collect your name, signature, the date and time of signing, and the content of the waiver you agreed to, and we store this on the Merchant’s behalf as a record of consent.

Types of Information We Collect

Personally Identifiable Information (“PII”)

PII means information, or a combination of information, that can be used to identify, contact, or locate a specific person. We may collect:

Contact information, such as name, email address, mailing address, or phone number;
Account information, such as gift card, loyalty, membership, store credit, ticket, coupon, or waiver account details, account number, or billing address;
Waiver and consent records, such as a signed liability waiver, your electronic signature, and the date and time of signing;
Device geolocation (geographical location);
Unique identifiers, such as username, account number, or password; and
Preference information, such as product wish lists, order history, or marketing preferences.

We may combine PII you provide with information about you from third-party sources — for example, confirming your address with the postal service. Combined information is treated in accordance with this Policy.

Other Information (“OI”)

OI is information other than PII that does not reveal your identity or directly relate to a person. We may collect:

Information about you or your business, such as company name, company size, or business type;
Demographic information, such as age, gender, interests, or ZIP code; and
Device and other technical information, such as browser type, device identifiers, operating system, or information from cookies, pixels, or similar technologies.

OI also includes PII we have de-identified or aggregated so it no longer identifies a particular individual. If we combine OI with PII, we treat the combined data as PII. Where local law treats certain OI as PII, we treat it as PII under this Policy.

How We Collect Personally Identifiable Information

We collect PII when you provide it directly — for example, when you create an account, complete a transaction using a Merchant-issued account, take a survey, fill in an online form, or contact us for support. We also receive PII from the platforms described above (Square, Clover, and Shopify) when a Merchant connects Pintuna to their store.

We may collect the PII of third parties when you provide it to us — for example, if you send a digital gift card to a friend. We store this information only to complete the transaction you authorized and to provide the Services. If a third party whose information you provided wants it deleted, they (or you, on their behalf) should contact us at support@pintuna.com. We may not always be able to remove it; if so, we will explain why.

We do not allow other parties to collect PII about your online activity over time and across different, unaffiliated websites through our Site or Services.

How We Use Personally Identifiable Information

We may use PII for the following purposes:

to provide the Services, including managing your Merchant accounts (gift cards, loyalty, memberships, store credit, tickets, coupons, and waivers);
to verify your identity and/or location to allow account access, process transactions, and secure your PII;
to send you important information, such as changes to terms, conditions, and policies, or other administrative notices;
to respond to your inquiries and fulfill your requests;
to track referrals from partner and affiliate websites;
to send you marketing communications you have signed up to receive;
to enable Site features you choose to use;
to verify your identity and account status when you interact with us through our social media pages, combining this with information we already have where necessary;
for business purposes related to the Services, including data analysis, audits, developing and improving our products, and measuring the effectiveness of our own communications; and
for risk control, fraud detection and prevention, and compliance with laws and regulations.

Some features of the Pintuna Platform require PII to function; others do not. Where the Platform allows it, you may choose whether information you enter is saved for future use.

Blogs, Newsletters, and Testimonials

Blogs: If the Site offers a publicly accessible blog or community area, information you post there may be read, collected, and used by others who access it. To request removal of your information from a blog or forum, contact support@pintuna.com. We may not always be able to remove it; if so, we will explain why.

Newsletters: If you subscribe to a newsletter, we use your name and email address to send it. You can unsubscribe at any time using the link in the email or your account preferences.

Testimonials: We may display customer testimonials on the Site. With your consent, we may use your testimonial and name. To update or remove a testimonial, contact support@pintuna.com.

Geolocation

We may collect location-based information to help you find a Merchant location offering our Services, sharing this only with our mapping provider for that purpose. We may also use location information for fraud prevention. You can opt out of location-based services in your device settings; doing so may limit certain features, including fraud-prevention protections.

How We Share Personally Identifiable Information

We share PII with third parties only as described in this Policy. We do not sell PII to third parties.

Affiliates: To the extent permitted by law, we may share information about your transactions and experience with affiliated Pintuna entities.

Merchants: We provide your PII to the Merchant(s) with whom you hold an account (gift card, loyalty, membership, store credit, ticket, coupon, or waiver), including any waiver you have signed with that Merchant.

Platform providers: Where relevant to delivering the Services through an integration, we share necessary transaction or account information with the applicable platform (Square, Clover, or Shopify).

Service providers: We share PII with companies that support our business operations, such as hosting, infrastructure, or customer service providers. These companies may use your PII only as necessary to provide those services to us.

Referral partners: We may offer referral-based commission programs through third-party partners who refer users to the Site. The partner will be identified when you sign up. Resulting data (which may include PII and OI) is owned and controlled jointly by Pintuna and the partner; this Policy governs Pintuna’s use, and the partner’s own policy — which we will link to and ask you to agree to — governs theirs.

We may also disclose PII:

as permitted or required by law, such as in response to a subpoena or similar legal process;
when we believe in good faith it is necessary to protect our rights or those of our Merchants, protect anyone’s safety, investigate fraud, or respond to a government request;
if Pintuna is involved in a merger, acquisition, or sale of assets — we will notify you by email and/or a notice on the Site of any change in ownership or use of your PII, and any choices available to you; and
to any other third party with your prior consent.

How We Collect and Use Other Information

Log files: Most browsers automatically send information such as IP address, device type, screen resolution, operating system, and browser type/version, which we store in log files. We may link this to PII we hold about you.

Tracking technologies: We and our service providers use cookies, beacons, tags, scripts, and HTML5 local storage to understand browser type, time on Site, pages visited, language preference, and your relationship with us. We use this to analyze trends, administer the Site, and measure the effectiveness of our own communications. We do not use these technologies to tailor third-party advertising to you.

You can refuse cookies through your device or browser settings; you’ll need to do this separately for each device and browser. Declining cookies may limit or impair some Site features.

Security and Retention

We follow generally accepted standards to protect PII, both in transit and at rest. Questions about our security practices can be sent to support@pintuna.com.

We scan the Site regularly for vulnerabilities and use regular malware scanning. Personal information sits behind secured networks accessible only to personnel who need it and who are required to keep it confidential. Sensitive and financial information is encrypted in transit.

We retain your information for as long as your account is active or as needed to provide the Services, and as necessary to meet our legal obligations, resolve disputes, and enforce our agreements and policies.

User Access and Choice

On request, we will tell you whether we hold any of your personal information. You may access, correct, update, remove, or deactivate it through your account page, by emailing support@pintuna.com, or by contacting us by mail at the address below. We will respond within a reasonable time.

Pintuna may have no direct relationship with some individuals whose data it processes on a Merchant’s behalf. If that’s your situation, please direct access, correction, or deletion requests to the Merchant you have the direct relationship with (the data controller). We will respond to any request we do receive within a reasonable timeframe.

“Do Not Track” Preferences

Many browsers let you request that a site disable tracking or cross-site tracking. We do not track your activity across unaffiliated sites, and we do not use tracking technologies to serve you interest-based advertising. Because our practices don’t change based on this signal, our practices remain the same whether or not “Do Not Track” is enabled.

Protecting Children’s Privacy Online

Our Site is not directed to individuals under the age of thirteen (13), and we ask that such individuals not provide PII through the Site. We do not knowingly collect information from children under 13. Where local law sets a different minimum age for consent, we apply that age instead.

Changes to This Policy

This Policy may change from time to time; please check back periodically. If we make changes, we will update the “Last Revised” date above, and changes take effect once posted. For material changes, we will notify you by email and/or a notice on the Site before the change takes effect.

Contact Information

Pintuna Inc

1560 Grackle Way, Sunnyvale, CA 94087

support@pintuna.com

For California Residents

California residents have certain rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, “CCPA”). Pintuna does not sell or “share” (as defined under the CCPA) California residents’ personal information for money or other valuable consideration, and does not use or disclose sensitive personal information beyond what’s necessary to provide the Services.

Subject to certain exceptions, California residents may request to:

know the categories and specific pieces of personal information we collect, use, and disclose about them;
delete their personal information, subject to legal retention requirements described in this Policy;
correct inaccurate personal information;
opt out of the sale or sharing of personal information (we do not currently sell or share personal information as those terms are defined under the CCPA); and
know the categories of third parties with whom we share personal information, and the purposes for sharing.

To exercise these rights, contact us at support@pintuna.com. We will verify your identity before responding — typically using a 2-step verification process — and may use other verification methods as needed. We generally respond to one such request per customer per 12-month period, as permitted by law. If you use an authorized agent, they will need to provide proof of your authorization.

Notice to Vermont Residents

In accordance with Vermont law, we will not disclose information we collect about Vermont residents to unaffiliated companies, and will not disclose application or third-party credit-related information about Vermont residents to our affiliates, except:

with the Vermont resident’s authorization or consent;
to companies that perform marketing or other services on our behalf;
as name, contact, transaction, and experience information (such as account balance and payment history) shared with companies with which we have joint marketing or servicing agreements; or
as otherwise permitted by law.

Notice to Nevada Residents

Nevada law requires that we provide the following contact information: Bureau of Consumer Protection, Office of the Nevada Attorney General, 555 E. Washington St., Suite 3900, Las Vegas, NV 89101; Phone: 702-486-3132; Email: BCPINFO@ag.state.nv.us.

Notice to Users Outside of the United States

Pintuna is based in the United States, and information we collect may be transferred to, stored, and processed in the United States, where our servers and central database are located. Data protection laws in the United States may differ from those in your country. By using the Services, you understand your information may be transferred to our facilities and to the third parties described in this Policy.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with its own data protection law, you may have additional rights under that law, including rights of access, correction, deletion, restriction, portability, and objection, and the right to lodge a complaint with your local data protection authority. Contact us at support@pintuna.com to exercise these rights.

SMS Messaging and Mobile Communications

Information We Collect for SMS

When End Users opt in to receive SMS messages from Merchants through the Pintuna Platform, we collect and store:

Mobile phone number;
Opt-in date, timestamp, and source (e.g., checkout form, web form, or keyword);
The Merchant the consent was given to;
Type of messages consented to (transactional, promotional, or both);
Opt-out date and timestamp (if applicable); and
Message delivery status and logs.

How We Use SMS Data

We use SMS data to:

deliver text messages on behalf of Merchants to consenting End Users;
maintain accurate opt-in and opt-out records for legal compliance;
provide Merchants with message delivery reporting; and
comply with applicable laws, including the Telephone Consumer Protection Act (TCPA) and equivalent international regulations.

SMS Data Sharing

SMS consent data is shared only with the Merchant to whom consent was given. We use Twilio, Inc. as our SMS and WhatsApp delivery provider; Twilio receives phone numbers and message content solely as necessary to deliver messages on Merchants’ behalf. Twilio’s privacy policy is available at

twilio.com/legal/privacy

We do not sell SMS opt-in data or phone numbers to third parties. SMS consent data is never shared across different Merchants on our Platform, and phone numbers collected for SMS are not used by Pintuna for its own marketing without your separate, explicit consent.

Data Retention for SMS

SMS opt-in and opt-out records are retained for a minimum of 4 years to comply with TCPA record-keeping requirements. Message delivery logs are retained for 90 days.

Your Rights Regarding SMS Data

End Users have the right to:

opt out of SMS messages at any time by replying STOP to any message;
request access to their SMS consent and opt-out records; and
request deletion of their data, subject to applicable legal retention requirements.

To exercise these rights, contact support@pintuna.com or the relevant Merchant directly.

Notice to International Users Regarding SMS

For End Users in the United Kingdom, Ireland, Spain, France, and other jurisdictions with similar laws, SMS messaging is conducted in compliance with the GDPR and the Privacy and Electronic Communications Regulations (PECR). The legal basis for processing SMS data is the explicit consent provided at opt-in. End Users in these regions have the right to erasure, data portability, and the right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.