Privacy Policy

This Privacy Policy explains what information DVO Cards collects, how we use it, and who we share it with. We don't sell your information, and we only collect what we actually need to run the Service.

1. Information We Collect

From merchants: business name, email, phone number, and logo when you create an account; your Square account connection (used only to create and activate gift cards on your behalf); and billing information, which is collected and stored directly by Stripe. We never see or store your full card number.

From gift card players: essentially none. Playing a game and redeeming a prize doesn't require a name, email, or any account. Everything is tied to the physical card's own code, not to a person. We do log gameplay data (score, timestamps, and technical replay data used to prevent cheating) associated with the card, not with an individual.

2. How We Use It

We use this information to operate your account, process subscription and card-order billing, create and activate gift cards through Square, send account-related emails (like confirming your email or resetting your password), fulfill physical card orders, and provide the sales/analytics dashboard for your own business.

3. Third-Party Service Providers

We rely on a small number of trusted providers to run the Service:

• Stripe: processes subscription and card-order payments.
• Square: issues, activates, and redeems gift card balances through your own connected merchant account.
• Supabase: hosts our database and handles account authentication.
• Resend: delivers account-related emails (confirmation, password reset).

Each of these providers only receives the information needed to perform their specific function, and each has its own privacy policy governing how they handle data.

4. Cookies

We use a single essential cookie to keep you logged into your merchant account. We don't use advertising or third-party tracking cookies, and we don't run analytics scripts that track you across other sites.

5. Data Security

We use industry-standard measures to protect your information, including encrypted connections and access controls on our database. No system is 100% secure, but we take reasonable steps to protect what we store.

6. Data Retention

We keep merchant account information for as long as your account is active, and for a reasonable period after cancellation in case you return or as needed for legal and accounting purposes. You can request deletion of your account data at any time (see Section 8).

7. Children's Privacy

The Service is intended for use by businesses and their adult customers, and isn't directed at children under 13. We don't knowingly collect personal information from children.

8. Your Choices

You can access, correct, or request deletion of your account information at any time by contacting us. If you're a merchant, you can also update most of this directly from your dashboard.

9. Changes to This Policy

We may update this policy from time to time. If we make material changes, we'll post the updated policy here with a new "Last updated" date.

10. Contact

Questions about this policy, or want to access/delete your data? Reach us at support@dvocards.com.