Privacy Policy

BTAQA - Digital Loyalty Card Platform

Last Updated: January 25, 2026

1. Introduction

This Privacy Policy explains how 808Studio, a sole proprietorship registered in the Netherlands (KVK: 72770724) ("we", "us", "our"), collects, uses, discloses, and protects personal data when providing the BTAQA digital loyalty card platform ("BTAQA", "Platform", or "Service").

BTAQA enables merchants to create and manage digital loyalty programs and allows end customers to collect stamps and rewards through Apple Wallet and Google Wallet.

The Service includes:

The BTAQA website and merchant dashboard (btaqa.io)

Digital wallet loyalty passes

The BTAQA mobile application (iOS, Android, and PWA)

By using the Service, you acknowledge that you have read and understood this Privacy Policy.

Contact:

808Studio

Email: help@btaqa.io

Country of registration: Netherlands

2. Roles and Responsibilities

2.1 Data Controller vs Data Processor

Merchants using BTAQA are the data controllers of end-customer personal data.

808Studio / BTAQA acts as a data processor, processing data only on behalf of merchants and solely to provide the Service.

We do not use end-customer data for our own marketing purposes.

3. Information We Collect

3.1 End-Customer Information (Processed on Behalf of Merchants)

Data	Required	Purpose
Full name	Yes	Loyalty card identification
Phone number	Optional	Loyalty communications
Email address	Optional	Loyalty communications
Date of birth	Optional	Birthday rewards
Loyalty activity	Yes	Stamps, visits, rewards
Card identifiers	Yes	Wallet pass functionality
Device tokens	Yes	Wallet updates

3.2 Merchant and Staff Information

Business name

Contact email

Authentication credentials

Account role (merchant or staff)

Branding assets (optional)

Payment information is processed by third-party payment providers and is not stored by BTAQA.

3.3 Automatically Collected Information

Device and browser type

Platform usage activity

IP address (security and fraud prevention)

Essential cookies

4. How We Use Information

4.1 End-Customer Data

Processed only to:

Generate and update loyalty cards

Track stamps and rewards

Display loyalty status to merchants

Send transactional wallet updates

Prevent fraud

Provide support

4.2 Merchant and Staff Data

Used to:

Authenticate access

Provide support

Deliver anonymized analytics

Process payments (if applicable)

Communicate service updates

5. Marketing and Notifications

5.1 Transactional Notifications

Transactional notifications related to loyalty actions (such as stamps added, rewards unlocked, or redemptions) are an essential part of the Service.

5.2 Promotional Notifications

Promotional notifications are sent only by merchants and only where consent has been obtained by the merchant.

BTAQA:

Does not determine the content, timing, or frequency of promotional messages

Does not send marketing messages independently to end customers

Acts solely as a technical data processor

Merchants are solely responsible for ensuring compliance with applicable marketing and data protection laws.

5.3 Platform Communications to Merchants

BTAQA may send communications to merchants and their authorized staff related to the operation and administration of the Service, including:

Service notifications: Subscription status, payment confirmations or failures, trial expiration

Security alerts: Unusual activity, login alerts, required security actions

System updates: Scheduled maintenance, platform changes, new features

Support communications: Responses to inquiries or requests

These communications are necessary for the proper operation of the Service and are not considered marketing.

Merchants may manage certain notification preferences through their account settings where applicable.

7. Data Retention

Customer data: retained for the duration of the merchant's subscription

Inactive data: anonymized or deleted after defined periods

Merchant data: retained as required by law

Aggregated analytics: may be retained indefinitely

8. Data Security

We use encryption, access controls, and monitoring to protect data. No system is completely secure.

9. International Data Transfers

Data may be processed outside your country of residence using appropriate legal safeguards.

10. Your Rights

Depending on your location, you may request:

Access

Correction

Deletion

Portability

Objection or restriction

Withdrawal of consent

Requests: help@btaqa.io

End customers should normally contact the relevant merchant.

11. Children's Privacy

BTAQA is a business-to-business service and is not intended for children.

12. Analytics and Website Measurement

Google Analytics

We may use Google Analytics on btaqa.io to collect aggregated website usage data. We configure Google Analytics to avoid collecting sensitive personal data and to use IP anonymization where available.

Vercel Analytics

We may use Vercel Analytics to collect privacy-focused, aggregated website statistics. Vercel Analytics does not track users across websites.

Analytics are not used inside wallet passes or the BTAQA mobile application.

13. BTAQA Mobile Application

The BTAQA mobile application is a staff-facing tool used by merchants and their authorized staff to scan customer loyalty cards.

The BTAQA app may request the following permissions:

Camera: Used exclusively to scan QR codes from digital wallet passes. No photos or videos are recorded or stored.

Push Notifications: Used to receive service-related or system alerts. Notifications are optional and not required for core functionality.

The BTAQA app:

Is intended for merchant staff only

Requires authenticated staff credentials provided by the merchant

Does not store customer personal data on the device

Displays customer data only temporarily during active use

14. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

15. Contact

808Studio