Privacy Policy

1. Introduction

SpontiCoupon, operated by Online Commerce Hub, LLC ("Company," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at sponticoupon.com and any related services (collectively, the "Service").

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account.
• Vendor Information: Business name, business address, phone number, category, and Stripe account details for payment processing.
• Transaction Data: Deal claims, redemption codes, deposit payments, and redemption history.
• Loyalty Program Data: SpontiPoints balance, point earning history (tied to deal redemptions), account credit balance, and redemption activity. This data is used solely to administer the SpontiPoints program and prevent fraud.
• Communication Data: Messages or feedback you send to us through contact forms or email.

2.2 Automatically Collected Information

• Device Information: Browser type, operating system, and device identifiers.
• Usage Data: Pages visited, deals viewed, time spent on pages, and click patterns.
• Location Data: Approximate location based on IP address to show relevant local deals. Precise location is only collected with your explicit consent.
• Cookies: We use essential cookies for authentication and session management. See Section 7 for details.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process deal claims, generate redemption codes, and facilitate transactions
• Display relevant deals based on your location and preferences
• Send transactional emails (deal confirmations, redemption receipts, expiration reminders)
• Detect and prevent fraud, abuse, and unauthorized access
• Analyze usage patterns to improve the user experience
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for targeted advertising from third-party ad networks.

4. Information Sharing

We may share your information only in the following circumstances:

• With Vendors: When you claim a deal, the Vendor receives your name and email to verify your redemption. Vendors do not receive your payment details.
• Payment Processors: We use Stripe for payment processing. Stripe handles your payment data under their own privacy policy. We do not store credit card numbers on our servers.
• Service Providers: We use Supabase for database hosting and Vercel for application hosting. These providers process data on our behalf under strict data processing agreements.
• Legal Requirements: We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of our users or the public. All government and law enforcement data requests are subject to our Law Enforcement Guidelines, which require legal review, data minimization, and documentation of every request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction.

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication using Supabase Auth with row-level security
• Regular security audits and vulnerability assessments
• Unique, single-use QR codes and 6-digit redemption codes for deal verification
• Limited employee access to personal data on a need-to-know basis

While we strive to protect your data, no method of electronic storage or internet transmission is 100% secure. We cannot guarantee absolute security of your information.

Data Breach Notification. In the event of a security incident involving unauthorized access to your personal information, SpontiCoupon will notify affected users without unreasonable delay and in accordance with applicable federal and state law. Notification will be provided by email to your address on file, by in-app notice, or as otherwise required by law. We will disclose the nature of the incident, categories of data affected, steps we are taking, and actions you can take to protect yourself. To report a suspected security vulnerability, email security@sponticoupon.com.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. Transaction records (deal claims, redemptions) are retained for a minimum of 3 years for accounting and legal purposes. You may request deletion of your account and associated data at any time by contacting us.

7. Cookies & Tracking

We use the following types of cookies:

• Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
• Preference Cookies: Store your deal preferences (categories, location) to personalize your experience.
• Analytics Cookies: Help us understand how users interact with the platform. We use privacy-focused analytics that do not track individual users across websites.

We do not use third-party advertising cookies. You can manage cookie preferences through your browser settings.

Do Not Track (DNT): Our website does not currently respond to browser DNT signals because no industry-wide standard has been established. However, if your browser transmits a Global Privacy Control (GPC) signal, we treat it as an opt-out of the sale or sharing of your personal information (though we do not currently sell or share personal information for commercial purposes).

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, machine-readable format.
• Opt-Out: Unsubscribe from marketing emails at any time using the link in each email.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at privacy@sponticoupon.com. We will respond within 30 days.

9. California Privacy Rights (CPRA / CCPA)

This section applies to California residents under the California Privacy Rights Act (CPRA) and the California Consumer Privacy Act (CCPA), as amended. Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Montana (MCDPA), Oregon (OCPA), and New Hampshire (SB 255) have equivalent or similar rights under their respective state privacy laws, and may exercise them using the same process described in Section 9.7. We apply these rights uniformly to all U.S. residents regardless of state.

9.1 Right to Know

You have the right to request that we disclose: (a) the categories and specific pieces of personal information we have collected about you; (b) the categories of sources from which we collected it; (c) our business or commercial purpose for collecting it; and (d) the categories of third parties with whom we share it.

9.2 Right to Delete

You have the right to request deletion of personal information we have collected from you, subject to certain exceptions — for example, we may retain information needed to complete a transaction you requested, detect security incidents, or comply with a legal obligation.

9.3 Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you, taking into account the nature of the information and the purposes for processing it.

9.4 Right to Opt-Out of Sale or Sharing

We do not sell your personal information to third parties, and we do not share your personal information for cross-context behavioral advertising. If this practice ever changes, we will provide advance notice and a clear mechanism to opt-out before any such sharing begins. To submit a “Do Not Sell or Share My Personal Information” request, email us at privacy@sponticoupon.com.

9.5 Right to Limit Use of Sensitive Personal Information

To the extent we collect sensitive personal information (such as precise geolocation, if you grant permission), you have the right to direct us to limit its use and disclosure to what is strictly necessary to perform the services you requested.

9.6 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CPRA rights. We will not deny you our services, charge you a different price, or provide a different level of quality based solely on your exercise of privacy rights.

9.7 How to Submit a Request

To exercise any of the rights above, you may: (a) email us at privacy@sponticoupon.com with “California Privacy Request” in the subject line; or (b) use the contact form at sponticoupon.com/contact. We will verify your identity before processing your request. We will respond within 45 days; if we need additional time (up to 45 more days), we will notify you in writing. Requests may be submitted by you or by an authorized agent holding written permission.

9.7.1 Appeals Process

If we deny your privacy request in whole or in part, you may appeal our decision within 30 days of receiving our response. To appeal, email privacy@sponticoupon.com with “Privacy Appeal” in the subject line and explain the basis for your appeal. We will respond to your appeal within 60 days. This appeals process applies to residents of California, Virginia, Colorado, Connecticut, Texas, Montana, Oregon, and New Hampshire as required by their respective state privacy laws.

9.8 Data Retention — California

We retain account information for the duration of your account, plus up to 3 years after account closure for legal and accounting purposes. Transaction records (deal claims, redemptions, payment history) are retained for 7 years. Usage analytics are retained for 2 years. You may request earlier deletion subject to the exceptions in Section 9.2.

9.9 CalOPPA Disclosure

Pursuant to the California Online Privacy Protection Act (CalOPPA), we post this Privacy Policy conspicuously and update it when our information practices change. The “Last updated” date at the top of this page reflects when it was most recently revised. This policy link appears at all pages where we collect personal information. Third parties that may collect personally identifiable information from our users through cookies or other tracking technologies include our hosting provider (Vercel) and authentication provider (Supabase). You can disable cookies in your browser settings; however, disabling essential cookies will prevent you from logging in to the Service.

10. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us immediately.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

13. SMS/Text Messaging

Online Commerce Hub, LLC DBA SpontiCoupon offers an SMS/text messaging program to provide promotional messages, deal alerts, account notifications, and customer support communications.

13.1 SMS Opt-In & Consent

By providing your mobile phone number and checking the SMS consent checkbox on our website (via our chat widget, contact form, or signup flow), you expressly consent to receive recurring automated promotional and informational text messages from Online Commerce Hub, LLC DBA SpontiCoupon. Consent is not a condition of any purchase. You may opt in by interacting with our website chat widget or submitting a form that includes SMS consent.

13.2 Message Frequency & Rates

Message frequency varies based on your interactions and account activity. Standard message and data rates may apply as determined by your mobile carrier. SpontiCoupon does not charge any additional fees for SMS messages.

13.3 Opt-Out Instructions

You may opt out of receiving text messages at any time by replying STOP to any message you receive from us. After opting out, you will receive one final confirmation message. You may also contact us at support@sponticoupon.com to be removed from our SMS list. Reply HELP for assistance.

13.4 No Sharing of SMS Data

We do not sell, rent, share, or disclose your phone number or SMS opt-in consent data with any third parties or affiliates for their own marketing purposes. Your SMS consent information is used solely by Online Commerce Hub, LLC DBA SpontiCoupon to send you the messages you have consented to receive. This includes sharing with third-party service providers that assist us in delivering text messages — these providers are contractually prohibited from using your data for any purpose other than message delivery on our behalf.

13.5 Types of Messages

Messages may include: promotional offers and deals, new deal alerts, account notifications, appointment and redemption reminders, customer support responses, and other informational messages related to SpontiCoupon services.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at: