Privacy policy
Who we are
Krealo Wallet is a service of Krealo Média inc. (Montreal, Quebec). Privacy officer: Keneth Walters, info@krealomedia.com.
What we collect
For business customers: name, email and billing details. For their customers (card holders): the information the business enters or imports (name, email, phone, tags), the card balance and history, and the technical identifiers Apple Wallet and Google Wallet send to keep the card up to date.
Why
To provide the service: create and update cards, send the notifications the business asks for, and bill the subscription. We sell no information and do no targeted advertising.
Where the data lives
Database, files and functions: Google Cloud / Firebase, Montreal region (Canada). Firebase Authentication and site hosting are global Google services with no selectable region, so part of the data is processed outside Quebec and Canada and may be subject to the laws of another country, including access by its authorities. Krealo Wallet sends no data to any artificial intelligence provider. Processors: Google (hosting, Google Wallet), Apple (Apple Wallet), PayPal (payments), Resend (email), Twilio (SMS), Shopify (if the business connects its store).
Retention
As long as the business account is active, and at most 6 years without any activity: a customer with no visit or change in 6 years is deleted automatically. A business can delete a customer at any time. Technical logs: 30 days; audit log: 1 year; encrypted backups: 7 days.
Shopify stores
If the business connects its store, Krealo Wallet receives from Shopify, for each customer: their Shopify ID (to link their orders to their card), first and last name (the name shown on the card), email (to find the customer and send them their card when the business asks) and language (the card’s language). From orders, only the order number and subtotal (to compute points or stamps). We neither store nor use the phone number or address of Shopify customers. This data is used only for that business’s loyalty program. A customer deletion request sent by Shopify deletes the customer record and their orders; 48 hours after the app is uninstalled, Shopify tells us and every record that came from the store is deleted (cards stay valid, anonymous).
Your rights
Under Quebec’s Law 25 and applicable laws, you may request access to, correction or deletion of your information by writing to info@krealomedia.com. Card holders may also contact the business that gave them the card.