This Privacy Policy explains how Coam Tracker, LLC ("we," "us," or "our") collects, uses, and shares information in connection with the MyStoreGiftCard™ application and website (the "Service"). MyStoreGiftCard is a product of Coam Tracker, LLC. By using the Service, you agree to the collection and use of information as described here.
Account information: when you or your business creates an account, we collect your email address, a chosen username, your store name, and a password, and — depending on how you sign up — your name, your store's address, and a phone number where we can reach you. If you add staff members, we collect the names you enter for them. All PINs (yours and staff members') are stored only as one-way cryptographic hashes — we do not store or have access to any actual PIN.
Transaction and business data: information you enter while using the Service, including gift card codes, amounts, and balances, and the sale and redemption history of your store's gift cards. This data belongs to you; see Section 5.
Product inquiries and signups: if you fill out the sign-up form on our website or a contact form, we collect the name, phone number, email address, store name, and any message you provide. We use this information to respond to you, and we may keep simple internal notes about our conversations with you.
Customer gift card wallet: your store's customers may choose to keep gift cards on their phone using the Service's wallet page. A wallet is identified only by a random secret token stored on the customer's own device — we do not collect a wallet customer's name, phone number, email address, or any account information. The wallet shows only the gift cards a store has assigned to that token and their history. When a store redeems a wallet card, the customer receives an approval request on their device showing the amount before the redemption can complete.
Payment information: when you subscribe, payment is handled directly by our payment processor, Stripe. We do not receive or store your full card number. We retain a record that a payment was made, the plan selected, and billing history. Because MyStoreGiftCard is a Coam Tracker, LLC product, charges may appear on your card statement in the name of Coam Tracker, LLC.
Device and usage information: basic technical information such as browser type, device type, and general usage of the Service, collected automatically to operate and improve the Service. This includes simple account-activity records, such as the time an account was last signed in or active, the app version in use, and small account preferences, which we use to support you and troubleshoot problems. We may also count visits to our public website as daily totals of page views and visitors; these counts contain no names, no personal details, and no tracking across other websites. We do not collect precise location information.
Error reports: if the Service encounters a technical error on your device, we automatically collect a limited report (the error message, the app version, your store name, the screen involved, and browser type) so we can find and fix problems. These reports are retained for approximately 60 days and are not used for any other purpose.
We use the information we collect to provide, operate, and maintain the Service, including your account, reports, and gift card features; to process payments and manage your subscription; to respond to product inquiries; to send you service-related emails such as account confirmations, password reset links, and billing notices; to detect, prevent, and address technical issues, fraud, or misuse of the Service; and to communicate with you about the Service, including updates to these policies. We do not sell your personal information, and we do not use your business or transaction data to market to your customers.
Administrative access. To run, secure, bill, and support the Service, our administrative tools show us account-level information about each store: plan and renewal status, when the account was last used, how many gift cards it has recorded, and the total number and combined balance of gift cards still outstanding. Those tools do not list your customers, your individual gift cards, or your individual transactions. We access the underlying records only when needed to provide or support the Service at your request, to investigate misuse or a security incident, to meet a legal obligation, or to honor outstanding gift cards during a wind-down.
We rely on a small number of trusted third-party providers to operate the Service, including Stripe (payment processing — they receive your payment details directly; we never receive or store your full card number), Supabase (database hosting and backend infrastructure), Resend (email delivery for account and billing notifications), and Cloudflare (web hosting and content delivery). Each is contractually or by policy restricted from using your information for any purpose other than providing services to us.
Your gift card and transaction records are your records; we store them for you. We do not send them to any regulator or law enforcement on our own, and we do not share store-level data between stores. If we receive a subpoena, court order, or other lawful request for records relating to your store, we will comply only to the extent the law requires, will limit what we produce to what is requested, and will notify you before or promptly after producing records unless the law or the request prohibits notice. You may produce your own records at any time using the export and report features in the Service.
We use reasonable administrative and technical safeguards to protect your information, including encrypted connections (HTTPS), password hashing, PIN hashing, and database-level access controls that restrict each account to its own data. The Service uses a multi-tenant design: customer data is stored in a shared database, and row-level security rules enforced at the database layer ensure each store's account can see only its own data. Gift card codes are masked throughout the Service's lists and reports after issuance, and customer wallets use random, non-guessable tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident that compromises your personal information, we will investigate promptly and notify affected customers without unreasonable delay, as and to the extent required by applicable law.
You own the business and transaction data you enter into the Service, including data entered during a free trial. You may export your data at any time using the Service's built-in backup and export features. Voided transactions are retained, rather than permanently deleted, for audit-trail purposes; voided records are excluded from your reports and totals but remain visible to you in the Service. If you cancel your subscription, your account enters a limited free mode in which your records remain available to you read-only and previously sold or issued gift cards can still be redeemed. We retain your data so long as your account exists, subject to standard backup retention cycles and any legal obligation to retain records longer.
You may permanently delete your account yourself, at any time, from Settings inside the app. You do not need to contact us and no approval is required. Before anything is deleted, the app offers you a download of your records and directs you to cancel billing; deletion then requires your password and a typed confirmation. When a deletion completes, the account's login and all of its business data — transactions, gift cards and their history, staff records, and backups — are permanently erased from our active systems within 30 days, including from routine backups as those backups age out on their normal cycle, except records the law requires us to retain, which are kept for the period the law requires — detached from your closed account and used for no other purpose — and then deleted. Deletion cannot be undone by you or by us. We may decline or defer deletion of records we reasonably believe you or we are legally required to retain, and we will tell you if that is the case. If you cannot sign in — for example, you have lost your password — you can instead ask us to delete the account by emailing [email protected] or calling (404) 992-8675, and we will verify who you are before acting.
If gift cards are still outstanding when you delete. Gift cards your store has sold or issued are a promise to the person holding them, and deleting your account does not cancel that promise. If any card still carries an unredeemed balance when you delete, your account does not close right away: it enters a wind-down in which redeeming those existing cards is the only function that still works, and we keep the account's records for exactly that purpose and no other. Those cards do not expire, and we do not delete them on a timer. When the last balance reaches zero the account and its data are deleted automatically. We keep this data because it is the minimum needed to honor an obligation your store owes to its customers; we do not use it for anything else.
Selling your business. Accounts are not transferable, and you should never share your login with a buyer — doing so would give them your full transaction history, your gift card records, and the names of the staff members you entered. A buyer opens their own account. We treat whoever holds your account credentials as authorized on the account, which is why keeping them to yourself matters.
You can access, update, or export most of your account and business data directly within the Service, and you can permanently delete your account yourself from Settings inside the app, as described in Section 5 (or ask us to do it if you cannot sign in). You can also unsubscribe from non-essential emails; you will still receive essential account and billing emails while your subscription is active.
The Service uses browser local storage and similar technologies to keep you signed in, remember your preferences (such as theme), and support offline functionality. The customer wallet page stores its secret wallet token in the customer's own browser storage. We do not use third-party advertising cookies.
The Service is intended for business use by adults operating a retail store and is not directed to children under 18. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. Material changes will be communicated to you, such as by email or in-app notice. The "Effective Date" above reflects the latest revision.
Questions about this Privacy Policy may be directed to: [email protected] or (404) 992-8675.