Privacy Policy
The short version
- We collect what we need to run drops: your email, the deals you pull and use, your XP, and your location only at the moment you redeem or check in at a shop.
- We don't track your location in the background unless you turn on optional arrival alerts.
- Shops see your first name and last initial, your level at their shop, and when you redeemed or visited. They don't get your email or your location history.
- We don't sell your personal information or use it for third-party advertising.
- You can ask us to show you, fix or delete your data at any time.
1. Who we are
DealXP is operated by Tribbles Entertainment LLC ("DealXP," "we," "us"). This policy explains how we handle personal information when you visit thedealxp.com, join our waitlist, use the DealXP app, or use our merchant tools (together, the "Service"). It's part of our Terms of Service.
2. What we collect
Information you give us
- Waitlist: your email address and, if you choose, your ZIP code.
- Business interest form: business name, your name, email, and optionally phone number, business type, city and any message you write.
- Your account: your email address (used to sign in) and the display name you choose. Leaderboards show only your first name and last initial.
- Merchant accounts: business details such as name, address, hours, category, the shop's location, the levels and perks you set, and billing details. Store PINs are stored in scrambled (hashed) form so we can check them without keeping the PIN itself.
- Messages you send us, such as support emails.
Information created when you use DealXP
- Shops you follow, deals you pull (including tier and time), deals you redeem or let expire, check-ins, XP and levels, and leaderboard standing.
- Basic technical information such as IP address, browser and device type, and pages or features used, which our hosting and security providers log to keep the Service running and protect it from abuse.
- A small setting saved in your browser to remember choices like whether demo sounds are muted. We don't use advertising cookies.
3. Location
- Pulling deals: no location needed. You can pull from anywhere.
- Redeeming and checking in: when you slide to redeem or tap check in, your device shares its precise location at that moment so we can confirm you're at the shop. We store that point along with the redemption to prevent fraud and to resolve billing questions with the shop. We keep the exact coordinates for up to 90 days, then delete them and keep only the fact that the redemption was confirmed.
- Arrival alerts (optional): if we offer arrival alerts and you turn them on, your device will notice when you're near a shop you have a deal for, so it can open the deal for you. You can turn this off at any time in your device settings or in the app.
- If you don't allow location, staff can confirm your redemption with the shop's PIN instead.
4. How we use information
- To run the Service: create your account, run drops, assign deals, confirm redemptions, track XP, levels and leaderboards.
- To send you what you asked for: sign-in emails, drop alerts from shops you follow, and launch updates if you joined the waitlist.
- To keep things fair and safe: limit claims, detect fake locations, bots and multiple accounts, and protect shops from abuse.
- To bill merchants accurately for walk-ins.
- To understand what's working and improve the Service, using aggregate or de-identified information where we can.
- To follow the law and enforce our Terms.
5. Who sees your information
Shops
When you pull, redeem or check in at a shop, that shop can see: your display name (first name and last initial), which deal and tier you pulled, when you redeemed or visited, whether it was confirmed by location or PIN, and your XP and level at their shop. Shops don't receive your email address, your location coordinates, or your activity at other shops.
Other players
If you appear on a shop's leaderboard, other people (in the app and in the shop) can see your first name, last initial, level and XP at that shop. You can hide yourself from leaderboards in your settings.
Service providers
We use trusted companies to run the Service, and they handle information only on our behalf:
- Supabase, for our database and sign-in;
- Cloudflare, for hosting, security and site delivery;
- Google Fonts, which provides the typefaces on our site (your browser requests them from Google, which receives your IP address);
- an email delivery provider, to send sign-in emails and alerts; and
- Stripe, to process merchant payments (we don't store full card numbers).
Other situations
We may share information if required by law or legal process, to protect the rights, safety or property of DealXP, our users, shops or the public, or as part of a merger, acquisition or sale of the business (in which case this policy would continue to apply to your information).
We don't sell your personal information, and we don't share it for cross-context behavioral (targeted) advertising.
6. How long we keep it
- Account and activity information: while your account is open. If you delete your account, we delete or de-identify your personal information within 30 days, except where we need to keep records (for example, merchant billing records) for legal or accounting reasons.
- Exact redemption and check-in coordinates: up to 90 days.
- Waitlist and business-interest submissions: until you ask us to remove them, or once they're no longer needed for launch and merchant outreach.
- Technical logs: kept for limited periods set by our providers for security and troubleshooting.
7. Your choices and rights
- Access, correction, deletion and a copy of your data: email hello@thedealxp.com from the address on your account. We'll verify the request and respond within 45 days.
- Emails: every marketing or drop-alert email includes an unsubscribe link. You'll still get essential account emails, like sign-in codes.
- Notifications and location: you can turn these off in your device settings at any time.
- Leaderboards: hide yourself in your settings.
Depending on where you live, state privacy laws may give you additional rights, including the right to opt out of certain processing and to appeal a decision about your request. We extend the rights above to everyone, wherever you live. If we deny a request, you can appeal by replying to our response, and we'll explain the outcome.
8. Security
We use encryption in transit, access controls and database security rules that limit who can see what, and we store store PINs only in hashed form. No system is perfectly secure, so please keep your email account secure, since it's how you sign in.
9. Children
DealXP isn't intended for children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us information, contact us and we'll delete it.
10. Changes to this policy
If we change this policy, we'll post the new version here with a new date. If the change is significant, we'll also let you know by email or in the app before it takes effect.
11. Contact
Email hello@thedealxp.com with any privacy question or request.
Tribbles Entertainment LLC, Cincinnati, Ohio.