Effective date: 1 January 2026 · Last updated: 1 June 2026
This Privacy Policy explains how rewradgeteway collects, uses, and protects personal information when you use our employee rewards and engagement platform. Please read it carefully.
1. Data We Collect
We collect information you provide directly: name, work email, company name, billing details, and account credentials when you register or use rewradgeteway.
We automatically collect usage data such as IP address, browser type, pages visited, API call logs, and feature interactions to operate and improve the platform.
We may receive limited profile data from third-party identity providers (e.g., Google, Microsoft SSO) if you choose to sign in via those services.
2. How We Use Your Data
To provision, maintain, and secure your rewradgeteway account and all connected reward API keys.
To send transactional emails (invoices, security alerts, onboarding) and, with your consent, product updates and marketing communications.
To analyse aggregated platform usage, prevent fraud, comply with legal obligations, and improve our services.
3. Cookies & Tracking
We use strictly necessary cookies to keep you authenticated and remember your preferences.
With your consent, we deploy analytics cookies (e.g., Segment, Google Analytics) to understand feature adoption and platform performance.
You can manage or withdraw cookie consent at any time via our Cookie Preferences panel or your browser settings.
4. Third-Party Sharing
We share data only with sub-processors necessary to deliver the service — cloud hosting (AWS), payment processing (Stripe), transactional email (SendGrid), and analytics tools.
We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.
All sub-processors are bound by data processing agreements and required to maintain appropriate security standards.
5. Your Rights (GDPR & CCPA)
If you are in the EEA, UK, or California, you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing.
California residents may opt out of the sale of personal information (we do not sell data) and request disclosure of data collected in the past 12 months.
To exercise any right, email [email protected]. We will respond within 30 days.
6. Data Retention
Account data is retained for the duration of your subscription and deleted within 90 days of account closure, unless a longer period is required by law.
Anonymised, aggregated analytics data may be retained indefinitely to improve the platform.
7. Security
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to production systems is limited to authorised personnel with MFA enforced.
We conduct regular security audits and maintain an incident response plan. In the event of a breach, we will notify affected users and relevant authorities as required by law.
8. Children's Privacy
rewradgeteway is a B2B platform intended solely for users aged 18 and over. We do not knowingly collect personal data from children.
If we learn that data from a minor has been collected, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or an in-app notice at least 14 days before they take effect.
Continued use of rewradgeteway after the effective date constitutes acceptance of the revised policy.
10. Contact & Data Controller
rewradgeteway, Inc. is the data controller for personal data processed under this policy.
For privacy enquiries, contact our Data Protection Officer at [email protected] or write to: rewradgeteway, Inc., 340 S Lemon Ave #1435, Walnut, CA 91789, USA.
Questions about your privacy?
Contact our Data Protection Officer at [email protected] — we respond within 30 days.
rewradgeteway
One Dashboard. Every Reward API Key, Under Control. Simplify employee recognition and drive engagement at scale.