Privacy Policy

ohmystamp ("we", "us", "our") provides a tap-to-stamp loyalty service for small shops and their customers. This policy explains what personal information we collect, why, how we use and store it, and the rights you have. We are committed to handling personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, the Act respecting the protection of personal information in the private sector (Quebec Law 25).

This policy covers two groups:

• Merchants — shop owners who sign up for ohmystamp and pay for the service.
• Loyalty customers — end users who tap a merchant's NFC stamp and provide their name and phone number to track loyalty stamps at that shop, and who may sign in to see their stamps.

From merchants

• Name, email address, phone number
• Business name, business category, store URL slug
• Shipping address for the physical NFC stamp
• Authentication credentials (password hash, or Google account identifier if using Google sign-in)
• Subscription plan and billing identifiers issued by Stripe

From loyalty customers

• Name and phone number, provided when first tapping a merchant's NFC stamp
• Email address, when a customer signs in with Google or an email sign-in code to see their stamps
• Stamp history at that specific merchant (date of each stamp, reward redemptions)

Consent is given at the shop, when the customer connects their phone number to their account on the stamping screen.

Technical information

• Session cookies used to keep you signed in
• Basic request logs (IP, user agent, timestamps) for security and abuse prevention

We do not collect payment card details. Payments are handled directly by Stripe.

• To provide the loyalty stamp service to merchants and their customers
• To process subscription payments through Stripe
• To ship the physical NFC stamp to merchants
• To prevent fraud and abuse, and to debug technical issues
• To show customers the stamps and rewards they have earned

We rely on your consent (given at sign-up or first NFC tap) and on the necessity of processing to deliver the service you requested. You may withdraw consent at any time (see Section 9).

• The merchant where you registered. Loyalty customer information (name, phone, stamp history) is shared with the merchant for the purpose of recognizing you and tracking your loyalty progress at their shop. It is not shared with other merchants on the platform.
• Stripe — payment processor for merchant subscriptions. Stripe receives merchant billing information per its own privacy policy. Loyalty customers are not shared with Stripe.
• Google Cloud / Firebase — hosting provider for our database and authentication. Data is stored encrypted at rest under our control. Subject to Google Cloud's Data Processing Addendum.
• Vercel — hosting provider for our website and application servers.

We do not sell personal information. We do not share information with advertisers. We do not use information for automated decision-making that has a legal or similarly significant effect.

Our primary database (Firestore) is hosted in the Google Cloud northamerica-northeast2 region (Toronto area). Sensitive personal information — including names, phone numbers, and email addresses — is encrypted at the field level (AES-256-GCM) before it is written to storage.

Some processing occurs outside Canada: Stripe operates from the United States, and certain Google Cloud and Vercel infrastructure may transmit data internationally for redundancy and operation. These transfers are subject to contractual protections.

• Merchant information: while the account is active. After the service end date we keep the shop account and settings for 3 months, then delete them, unless the merchant asks us to delete them at once. We keep billing records (shop name, address, payments, sign-up date) for as long as tax and accounting law requires.
• Loyalty customer information: while the shop's account is active and you keep taking part. We delete it on the shop's service end date, or earlier if you or the shop delete it (Section 9).
• Authentication logs and webhook event records: typically up to 24 months for security and audit purposes.

Local partners. Some shops sign up with help from an OhMyStamp local partner. Partners never see customer information. They see only the shop's name, status and payment amounts.

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your information (subject to legal retention requirements)
• Withdraw consent to further processing
• Receive a copy of your information in a portable format
• File a complaint with the Office of the Privacy Commissioner of Canada, or with the Commission d'accès à l'information du Québec if you are located in Quebec

Deleting loyalty customer information

• Customers delete their own account from the My Stamps screen (Account, then Delete my account). This deletes the account and every stamp, reward and history record at every shop, at once. Customers can also remove a single shop from the Account screen (Remove next to the shop); only the stamps, rewards and history at that shop are deleted.
• A shop can delete a customer's records at that shop only, from its dashboard. The customer's account and records at other shops are not affected.
• ohmystamp keeps only a count-based deletion record (when, who asked, and how many records of each kind) with no personal information.

Any dispute about stamps or rewards after a deletion is handled under the shop's own policy; ohmystamp does not reinstate records.

For any other request, contact us at support@ohmystamp.com. We will respond within 30 days.

We protect personal information through technical and organizational measures, including AES-256-GCM field-level encryption for sensitive identifiers, HMAC-keyed search indexes, transport-layer encryption (HTTPS), strict access controls, and security rules that prevent direct client access to our database. No system is perfectly secure; we will notify affected users without undue delay if a privacy incident occurs that creates a real risk of significant harm.

We use a small set of cookies and local-storage entries strictly necessary for the service (mainly to keep you signed in). We do not use third-party advertising or analytics cookies.

ohmystamp is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact support@ohmystamp.com and we will delete it.

We may update this policy from time to time. The effective date at the top will be updated. If changes are material, we will notify active users by email or in-app notice before the changes take effect.

Privacy questions or requests: support@ohmystamp.com.

ohmystamp is the operator of this service. Mailing address available on request.