Privacy Policy

Definitions

First and foremost, any capitalized or defined terms in this Privacy Statement that are not explicitly defined here will have the same meanings as outlined in the InRewards Terms of Service. If you have an alternative agreement with us, such as the Creator Terms of Service, the definitions provided in that agreement will apply. For instance, when we mention InRewards, or use "we" or "us," we are referring to rewardStyle, operating as InRewards. Similarly, references to our Services pertain to the Services defined in that context. This Privacy Statement governs our handling of personal information within our Services.

When we refer to "personal information" in this Privacy Statement, we are talking about a broad spectrum of data. Although global data protection laws define this term in various ways, generally, it encompasses information that pertains to an identifiable, living person or their household. This does not include aggregated or deidentified data that cannot reasonably be linked back to you. If we utilize deidentified data, we will keep it in that deidentified state and will not attempt to reidentify it. For instance, your InRewards username is considered personal information, whereas a brand's company name or store details are not, as they do not pertain to an individual.

In this Privacy Statement, we distinguish between our Shoppers and our Creators. Creators are individuals or entities with websites, blogs, social media profiles, agents, digital publishers, and other content platforms that use our Services to share content or links. Shoppers are individuals who use our Services—such as our website, Apps, or InRewards links—to shop or browse content from our Creators. When we use "you" in this Statement, it applies to both Shoppers and Creators.

Brands are merchants that collaborate with Creators to sell products. Our dealings with Brands differ somewhat because Brands do not provide us with personal information.

Note that some posts on InRewards are advertisements, often sponsored by our Brands. When we offer personalized content, like recommendations based on your preferences, we are targeting ads to you. However, we do not sell Shoppers' personal information to Brands based on your browsing activity on InRewards.

InRewards is responsible for determining how the personal information we collect is processed, which positions us as a data controller (or equivalent) for this information.

The personal information we gather depends on how you interact with us and the services we offer. Since the type of information collected varies with your relationship to us, we will explain our data collection practices in relation to that relationship.

Shoppers' Interactions with InRewards

Shoppers engage with InRewards in various ways. You might have an account with us, access our website or app, or click on a InRewards-owned link on another online platform. Regardless of how you interact with us initially, we collect, process, and share personal information in similar ways. However, if you don't yet have an account, the extent of this information collection might be more limited.

How We Collect and Use Shoppers' Personal Information

We collect your personal information to deliver our Services and address your queries. This includes information you provide directly, data collected automatically during your interactions with our Services, and insights we derive from other data sources. Occasionally, we may also gather personal information from third parties. For details on these collection categories, please refer to the relevant sections. Generally, we use your personal information solely to provide the requested services and retain it only as long as necessary for legitimate business purposes. Additionally, we use this information for support, improvements, business management, system security, fraud detection, and legal compliance.

Information Directly Shared by Shoppers

Automatically Generated or Collected Information

Information Collected from Third Parties

Sharing Shoppers' Personal Information

Creators' Personal Information

Creators have a more intricate relationship with InRewards compared to Shoppers. As a Creator, you rely on us to offer services such as link tracking, commission payments when Shoppers purchase products you recommend, and an online shop where you can connect with Brands and showcase personal information. To deliver these services effectively, we need to process a significant amount of personal information from you. Additionally, the application process for Creators involves recruitment and vetting stages, requiring us to gather more detailed information.

How We Collect and Use Creators' Personal Information

We begin by collecting the same types of personal information from Creators as we do from Shoppers. For details on this, refer to the section on how we collect and use Shoppers' personal information. Given the specialized services we offer to Creators, we gather and utilize additional personal information.

Information Creators Share Directly

Information We Generate or Collect Automatically

The data we automatically generate or collect is consistent for both Creators and Shoppers. Please refer to the section on Information We Generate or Collect Automatically for details.

Information We Collect from Third Parties

How We Share Creators' Personal Information

We share personal information to provide the services you request. In the past twelve months, we have shared Creators' personal information in the following scenarios:

Creators' Own Disclosure and Privacy Obligations

As a Creator, you are responsible for ensuring your own website, blog, or social media site complies with applicable laws regarding the collection and use of personal information. This includes providing necessary disclosures about marketing practices as outlined in the Creator Terms of Service.

Data protection considerations for Brands

Brands do not share their users' personal information with InRewards.

Instead, when working with InRewards, Brands typically receive personal information about our Creators. This occurs in a few ways:

  1. Transaction-Based Sharing: If a Shopper clicks on a InRewards link and makes a purchase, the Brand may receive a unique identifier for the Creator who recommended the product. This helps the Brand track the sale and allows InRewards to pay the Creator their commission.

  2. Profile-Based Sharing: Brands also receive Creator information when reviewing Creator profiles for potential collaborations.

Brands are responsible for ensuring adequate privacy protections for the Creator information they receive. We provide a supplemental agreement outlining these responsibilities. Please refer to that agreement for details.

InRewards does not share Shopper personal information with Brands, except as described in our section on sharing Shoppers' personal information.

If you are a Brand representative, you will have an account that allows access to our Brand Portal. We collect the same personal information for Brand representatives as we do for Shoppers. For information on what we collect, how we use it, and your options regarding your personal information, please refer to our section on Shoppers' Personal Information.

Making choices about your personal information

Your Account Information:

You have rights regarding your personal information, including accessing, correcting, downloading, restricting, or deleting your data. You can manage these options within your InRewards account settings. If you're a Creator, you can modify or remove optional data settings where you added them. If you face any issues accessing or updating your account, contact us for help. Note that some data may be restricted from changes or deletion due to security or legal reasons.

If your account is linked to a third-party service like Facebook, Google, or Apple, you can manage these connections and unlink them in your account settings.

Keep your personal information up to date.

Communications:

We use your email, and if permitted, your phone number or third-party app ID, to communicate with you. You can opt out of marketing emails or texts by unsubscribing or contacting our Customer Support team.

Service emails, like password resets or updates to terms, cannot be opted out of unless you deactivate your account.

We may send push notifications to your device, which can be managed in your account settings or through your device.

Closing Your Account:

You can close your account anytime through the App or by contacting Customer Support. Deleting your account will remove access to it and all content. If you're a Creator, any unpaid commissions must be resolved before account closure.

Data Retention:

We retain personal information as long as needed to provide our services, fulfill transactions, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on data type and legal requirements. After closing your account and resolving any issues, your profile will be deleted within 30 days. Some data may be retained for legal or security purposes.

Cookies and Tracking Technologies:

InRewards uses tools like cookies, web beacons, and pixels to collect information as you navigate our app, website, or interact with emails. Cookies allow us to recognize your device, keep you logged in, remember preferences, enhance security, and generate reports.

Our website uses four types of cookies:

  1. Necessary Cookies: Required for basic website functionality.

  2. Functional Cookies: Enhance usability.

  3. Social Media Cookies: Connect with platforms like TikTok or Facebook.

  4. Advertising/Tracking Cookies: For advertising or analytics purposes.

You can manage your cookie preferences via our cookie consent tool or your browser settings. Some cookies, like necessary ones, cannot be opted out of, and disabling functional cookies may affect your site experience.

Security information

We take strong technical and organizational steps to safeguard your personal information from accidental or unlawful destruction, loss, alteration, or damage. The level of protection we apply depends on the sensitivity of the data and current technology standards. We also ensure that our service providers use proper security measures when handling your personal information.

To protect your account, we recommend using a strong password and not sharing it with others or reusing it on different sites. Keep your devices updated to the latest software version for added security. Remember, we will never ask for your account ID, password, credit card details, or national identification numbers through unexpected calls or emails.

Global privacy compliance and international transfers

InRewards is proud to be a global company with Creators, Shoppers, and Brands all over the world. As such, our approach to privacy compliance is global. We remain committed to complying with applicable data protection laws and protecting your data whether you're a Shopper or a Creator on InRewards.

Regions requiring a legal basis for processing personal information.

If you are from a region that requires a legal basis for processing personal information (such as the EEA or the UK), our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally collect personal information from you only where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms, or where we have your consent to do so. In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person, such as in the case where we request personal information from you in the context of a government audit or in response to a request from law enforcement.

Generally speaking, when we use personal information to further our legitimate interests, it is for these limited purposes:

Cross border data transfers and onward transfers

InRewards is based in the United States and we process personal information in the United States. We also use service providers around the world. Therefore, we may transfer, store, and process your personal information outside of the jurisdiction where you reside. When we do transfer your personal information, we maintain the same standard of data protection regardless of where the information originates and where it is processed.

When we transfer personal information from the EEA, from the UK, or from Switzerland, we rely on data transfer mechanisms such as Standard Contractual Clauses and the International Data Transfer Agreement. You may obtain a copy of the Standard Contractual Clauses or the International Data Transfer Agreement by contacting us.

When we transfer personal information from countries other than the EEA, the UK, or Switzerland, we strive to comply with those countries' data protection and data transfer laws, such as by cooperating with that country's data protection authority or providing a written agreement.

Privacy compliance for specific individuals

Job applicant and candidate personal information. If you are applying for a position at InRewards or are a candidate for a job here, our Candidate Privacy Notice provides up to date information about the personal information we collect about you and how we protect it.

Information from children. We do not knowingly permit children under the age of 16 to sign up for an account on InRewards, and we don't direct our Services to children. If we discover that someone under 16 has signed up for an InRewards account, we will take reasonable steps to promptly remove that person's personal information from our records. If you are a parent or guardian and you believe that a child has signed up for an InRewards account, please contact us to request that we remove that personal information. If we obtain actual knowledge that we have received personal information from a child, we will promptly delete that information from our records.

State-specific privacy information

If you are a U.S. resident, we process your personal information in accordance with applicable U.S. state data privacy laws, including the California Consumer Privacy Act (CCPA), the Colorado Privacy Act (CPA), the Utah Consumer Privacy Act (UCPA), and the Virginia Consumer Data Protection Act (VCDPA). We don't discriminate or change our practices based on where you live; all our Shoppers and Consumers have the same rights, and we won't change how we offer our Services if you exercise your rights. However, if you ask us to delete or restrict your personal information, it will impact your ability to use InRewards, particularly if you are a Creator. You have the right to request that we (i) provide details about the categories of personal information we collect, use, disclose, share, and sell; (ii) provide access to, and a copy of, the personal information we collect about you; (iii) correct any inaccurate personal information we have about you; (iv) restrict the use and disclosure of your sensitive information; (v) delete your personal information; and (vi) opt you out of future “sharing” of personal information for targeted advertising purposes.

We provide this information here in this Privacy Statement, and our section on Making choices about your personal information offers steps on exercising these rights. You may make these requests yourself or through an authorized agent. If you use an authorized agent, we provide your agent with detailed guidance on how to exercise your privacy rights. However, we will need to take steps to verify that you or your agent are authorized to make the request.

For California residents, we share your personal information as we describe above, for our business purposes. Please contact us if you would like more specific information.

Resolving disputes

We hope that we can resolve any disputes relating to our data protection practices by working with you to understand your concerns and correct any issues. If something isn't right or if you have questions about our data protection practices, please contact us. We want to help.

You may also send us a physical letter addressed to InRewards, attn: Office of the Data Protection Officer, at the address in our section on Contacting InRewards.

In the event that you have a dispute relating to your agreement with us, please see that agreement regarding how those disputes will be resolved. For our Shoppers and Creators, most disputes will be resolved according to the provisions of our Terms of Service.

In the event that you have a dispute relating to our data protection practices, we offer a few different options, all offered without charge to you. InRewards commits to cooperate with the panel established by the EU data protection authorities (DPAs), as well as the Swiss Federal Data Protection and Information Commissioner and the Information Commissioner's Office of the United Kingdom, as applicable, and comply with the advice given by them with regard to personal information transferred from the European Union, Switzerland, and United Kingdom. Additionally, you may have the right to lodge a complaint with your local data protection or privacy agency or supervisory authority. We ask that you please contact us before filing your complaint and allow us to attempt to resolve your issue. For your local data protection authority's contact information, please see the EDPB's website.

InRewards is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.

Other information you may find useful

Contacting InRewards

If you have any questions or requests in connection with this Privacy Policy or other privacy-related matters, please send an email to privacy@inrewards.com. We will respond promptly to your questions.

Changes to Privacy Statement

Because we are a global company, we may provide translations of this Privacy Statement in languages other than English. If we do, those translations are provided for your convenience. In the event of any ambiguity or conflict between translations, the English version controls, to the extent permitted by local laws.

InRewards may update this Privacy Statement periodically for various reasons, such as complying with new laws and regulations, incorporating new features, or enhancing transparency. The latest version will always be available at https://www.inrewards.com/legal/privacy-policy. Changes might be minor, like correcting a typo, or significant, impacting your rights. If we make a material change that affects your rights, we will give you 30 days' notice via email or by posting a notice in the App.

As a global company, we may offer translations of this Privacy Statement in multiple languages for your convenience. In case of any inconsistency or ambiguity between translations, the English version will prevail, as allowed by local laws.