Privacy Notice

1. Who we are

The IncentivPay website (www.incentivpay.com) and platform are operated by PMPS INC. (United States) and PMPS Canada Inc. (Canada), trading as “IncentivPay.” The PMPS entity for your region is the data controller responsible for the personal information described in this Notice. You can reach us at support@incentivpay.com.

2. Information we collect

• Account & contact information you provide — name, email, phone, company, role, login credentials, and any details you submit through forms or support requests.
• Transaction & entitlement information — IP Points balance, incentive entries, redemptions, receipts you scan, and the subscription or top-up plan associated with your account.
• Merchant data — if you integrate IncentivPay as a merchant, we process the checkout, order, and customer data needed to deliver the Service.
• Usage & device data — pages visited, referring URLs, device type, browser, IP address, and approximate location, collected via cookies and analytics.
• Communications — messages you send to support and our responses.

Card numbers and full payment-card details are collected and processed directly by our reseller, Paddle, and are never stored on our systems.

3. Why we use it (purposes & legal bases)

• Provide the Service — create accounts, run incentives, settle outcomes, award IP Points, and process redemptions. Legal basis: contract.
• Customer support — respond to inquiries, troubleshoot issues, and handle disputes. Legal basis: contract / legitimate interests.
• Security, fraud prevention, and abuse detection — including receipt-scan verification and integrity of incentive entries. Legal basis: legitimate interests / legal obligation.
• Product improvement & analytics — measure performance, debug, and improve features. Legal basis: legitimate interests.
• Marketing — send service updates and, where permitted, promotional emails you can unsubscribe from at any time. Legal basis: legitimate interests or consent, where required.
• Legal compliance — tax, accounting, and lawful requests. Legal basis: legal obligation.

4. Who we share it with

• Merchant of Record & payments — Paddle.com Market Limited, our reseller of record, processes payments, subscription management, billing, tax compliance, invoicing, and refunds for purchases made through our checkout.
• Service providers (sub-processors) — hosting, database, email, analytics, fraud-detection, and customer-support tooling, all under contractual confidentiality and data-protection terms.
• Participating businesses — when you redeem an incentive at a participating local business, we share the minimum information needed to validate and apply your win (for example, the incentive code and redemption amount).
• Professional advisers — legal, accounting, and audit professionals under duties of confidentiality.
• Authorities — where required by law, court order, or to protect our rights, users, or the public.
• Corporate transactions — in connection with a merger, acquisition, financing, or sale of assets.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under US state privacy laws.

5. International transfers

We are headquartered in North America and operate globally. When we transfer personal data out of the UK, EEA, or Canada, we rely on appropriate safeguards such as the UK/EU Standard Contractual Clauses, adequacy decisions, or equivalent mechanisms.

6. Data retention

We keep personal information only as long as needed for the purposes above, to comply with legal, tax, and accounting obligations, and to resolve disputes or enforce agreements. When data is no longer needed, we delete or anonymize it.

7. Cookies & analytics

We use essential cookies to operate the Service and analytics cookies (including Google Tag and Leadsy) to measure traffic and improve user experience. You can control non-essential cookies through your browser settings or in-product controls where available.

8. Security

We use appropriate technical and organizational measures — including encryption in transit, access controls, and audit logging — to protect personal information. No method of transmission over the internet is 100% secure, but we work hard to keep your data safe.

9. Your rights

Depending on where you live (for example, EEA/UK GDPR, California CCPA/CPRA, Canadian PIPEDA, or other applicable laws), you may have the right to access, correct, delete, restrict, or port your personal information, to object to certain processing, to withdraw consent, and to lodge a complaint with your local data-protection authority. To exercise any of these rights, email support@incentivpay.com. We will respond within the timeframes required by applicable law (typically within 30 days).

10. Children

The Service is intended for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

11. Third-party links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites — please review their notices.

12. Changes to this Notice

We may update this Privacy Notice from time to time. Updates will be posted on this page with a revised “Last updated” date.

13. Contact

Questions or requests about your personal information? Email support@incentivpay.com. You can also write to PMPS INC. (United States) or PMPS Canada Inc. (Canada) at that address and we will route your request to the right entity.