Privacy Policy

Section 01

Overview

Stavo App, Inc. ("Stavo," "we," "us," "our") operates a platform that connects businesses with their customers through user-generated photo submissions and loyalty rewards. This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with our platform, website, and related services.

By using Stavo, you consent to the data practices described in this Policy. If you do not agree with this Policy, please do not use our services.

Section 02

Information We Collect

• •Account registration: Name, email address, username/creator handle, and password when you create an account.
• •Photo submissions: Photos and any accompanying metadata (e.g., captions, tags, venue name) you submit through the platform.
• •Rewards redemption: Payment or payout information required to process rewards (e.g., email for gift card delivery, account information for cash payouts - collected and handled by our third-party rewards partner).
• •Communications: Messages you send us via email or support channels.

• •Usage data: Pages visited, features used, submission timestamps, and interactions with the platform.
• •Device & browser information: IP address, browser type, operating system, and device identifiers.
• •Cookies and similar technologies: As described in Section 7.

When you interact with a Stavo-powered widget at a Business Partner's venue, that Business Partner may share information with us such as your loyalty membership status, submission context, or venue location - solely to facilitate the submission and rewards flow.

As a condition of submission, Stavo collects GPS location data and a photo timestamp to verify that content was captured at the claimed venue. This data is required - submissions without valid location and timestamp information will be denied. Location data is used solely for submission verification and fraud prevention and is not shared with Business Partners or used for advertising.

Photos may also contain additional embedded metadata (EXIF data) such as device model. We strip non-essential EXIF data from photos before they are shared with Business Partners, retaining only what is necessary for verification purposes.

Section 03

How We Use Your Information

We use the information we collect to:

• •Operate the platform and provide the services described in our Terms;
• •Process photo submissions through our AI review system;
• •Credit and facilitate redemption of loyalty points;
• •Communicate with you about your account, submissions, and rewards;
• •Send product updates, platform announcements, and marketing communications (you may opt out at any time);
• •Detect and prevent fraud, abuse, and violations of our Terms;
• •Improve our platform, AI models, and user experience using aggregated and anonymized data;
• •Comply with legal obligations.

Section 04

How We Share Your Information

We share information only as described below:

When you submit a photo, your creator handle (username) and your submitted photo are shared with the relevant Business Partner for their review and potential use under the license described in our Terms. Business Partners do not receive your email address, payment information, or other personal account details.

We share data with third-party vendors who help us operate the platform, including cloud infrastructure providers, AI processing partners, and our rewards disbursement partner (currently Tremendous). These vendors process data on our behalf under confidentiality obligations and are not permitted to use your data for their own purposes.

We may disclose information if required by law, regulation, court order, or government request, or if we believe disclosure is necessary to protect the rights or safety of Stavo, our users, or the public.

If Stavo is acquired, merged, or undergoes a change of ownership, user data may be transferred as part of that transaction. We will notify users via email or prominent platform notice prior to any such transfer and before data becomes subject to materially different privacy practices.

Section 05

Photo & Content Data

Photos submitted through Stavo are stored on secure cloud servers. Accepted photos are made available to the relevant Business Partner under the license described in our Terms. Rejected photos are held briefly for quality improvement purposes and then deleted within 30 days.

Accepted photos may also be used by Stavo App, Inc. for our own marketing and promotional purposes - including our social media accounts, app store listings, and press materials - under the license granted in our Terms of Service. Your creator handle will be credited in any such use. You may request that Stavo remove your photo from its active marketing materials at any time by contacting support@stavo.app.

Our AI review system processes your photo to evaluate quality, location validity, and compliance with platform guidelines. This processing is automated. Photos used to improve our AI models are anonymized and aggregated - we do not use identifiable photos to train our models without additional consent.

You may request deletion of your photos from Stavo's servers at any time (see Section 9). However, deletion from our servers does not revoke any license already exercised by a Business Partner or Stavo prior to deletion.

Section 06

Rewards & Payment Information

Stavo facilitates rewards disbursement through a third-party partner (currently Tremendous). When you redeem points, you will be directed to or interact with Tremendous's platform to provide the information necessary to process your payout (e.g., email for gift cards, or bank/Venmo information for cash payouts).

Stavo does not store your bank account numbers, payment card numbers, or other sensitive financial identifiers. Payment data is handled entirely by our third-party processor under their applicable privacy policy and security standards.

We retain records of points issued, submission dates, and redemption history for operational and dispute-resolution purposes.

Section 07

Cookies & Tracking

Stavo uses cookies and similar technologies to maintain your session, remember preferences, analyze platform usage, and prevent fraud. Specifically:

• •Essential cookies: Required for login sessions and basic platform functionality. These cannot be disabled.
• •Analytics cookies: Help us understand how users interact with the platform (e.g., which features are most used). We use anonymized or aggregated analytics only.
• •Security cookies: Detect fraudulent activity and protect your account.

We do not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings, though disabling essential cookies will impair platform functionality.

Section 08

Data Retention

We retain personal data for as long as your account is active and for a reasonable period thereafter to fulfill the purposes described in this Policy. Specifically:

• •Account data is retained while your account is open and for up to 2 years after closure for legal and dispute-resolution purposes;
• •Accepted photos remain accessible to Business Partners under the granted license until you request deletion from our servers;
• •Rejected photos are deleted within 30 days of rejection;
• •Rewards and transaction records are retained for up to 7 years for financial and compliance purposes.

Section 09

Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

• •Access: Request a copy of the personal data we hold about you;
• •Correction: Request that we correct inaccurate or incomplete data;
• •Deletion: Request that we delete your personal data from our systems, subject to legal retention obligations;
• •Portability: Request your data in a structured, machine-readable format;
• •Opt-out of marketing: Unsubscribe from marketing emails at any time via the unsubscribe link or by contacting us.

To exercise any of these rights, email us at support@stavo.app with the subject line "Privacy Request." We will respond within 30 days. Note that deletion requests do not revoke licenses already exercised by Business Partners, as described in our Terms.

Section 10

Children's Privacy

Stavo is not directed to children under the age of 18, and we do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a user under 18 without parental consent, we will delete that information promptly. If you believe we have inadvertently collected data from a minor, please contact us at support@stavo.app.

Section 11

Security

We implement commercially reasonable technical and organizational safeguards to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These include encrypted data transmission (HTTPS), access controls, and regular security reviews.

However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password and to contact us immediately if you suspect unauthorized access to your account.

Section 12

Third-Party Links

The Stavo platform may contain links to third-party websites or services (including Business Partner websites). This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through Stavo. We are not responsible for the data practices of third parties.

Section 13

Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will revise the Effective Date at the top of this page. For material changes - particularly those affecting how we handle your photos or personal information - we will notify you by email or in-app notice at least 14 days before the changes take effect.

Your continued use of Stavo after the effective date of an updated Policy constitutes your acceptance of the changes.

Section 14

Contact

For privacy questions, data requests, or concerns, please contact:

Stavo App, Inc.Email: support@stavo.appWebsite: stavo.app

We aim to respond to all privacy inquiries within 30 days.