Privacy Notice

Who operates Retrakor

BlueprintMedia LLC, a Nevada limited-liability company doing business as Retrakor, operates the service from 304 S. Jones Blvd., #1297, Las Vegas, Nevada 89107, United States. Privacy and rights requests may be sent to support@notify.retrakor.com.

Information handled

• Business, owner, staff, location, service, and workspace configuration details.
• Customer name, phone number, email address, consent evidence, check-ins, confirmed activity, reward progress, and message preferences.
• Account, authentication, device, security, audit, and support records.
• Billing identifiers, subscription state, invoice status, refund or dispute evidence, and payment-provider references. Retrakor does not store full card numbers.
• Email submission, delivery, bounce, complaint, click, and unsubscribe evidence.

Purposes and limits

Data is used to provide and secure the service, authenticate users, operate check-in and loyalty features, send requested transactional messages, deliver approved marketing to opted-in recipients, manage billing and support, prevent abuse, comply with law, and maintain operational records. Retrakor does not sell personal information, share it for cross-context behavioral advertising, or use it to train artificial-intelligence models. Retrakor may use aggregated or de-identified information for analytics, service reliability, and product improvement.

Service providers

The current service uses Supabase for database and authentication services, Stripe for payment and subscription processing, Resend for email delivery, and Vercel for hosting and application execution. Each provider processes information for its service under its applicable contract and security terms. The pilot is limited to U.S. businesses, although provider infrastructure may process information in locations described in provider terms.

Business and Retrakor roles

A subscribing business decides which customer information, offers, rewards, audiences, and lawful instructions to use and is responsible for its notices and consents. Retrakor acts as a processor or service provider when handling customer information for those instructions and as an independent business for its own account security, billing, fraud prevention, support, and legal records.

Marketing choices and rights

Marketing is optional and can be withdrawn without disabling necessary account or transaction messages. A valid unsubscribe, complaint, bounce, or consent revocation suppresses future promotional email. After identity and authority verification, Retrakor targets a response to access, correction, export, or deletion requests within 30 days, or the period required by applicable law. Customer requests may be routed through the subscribing business that controls the data. See the draft Marketing Consent Notice and Data Retention and Deletion Policy.

Children and sensitive data

Retrakor is not directed to children and the pilot is limited to authorized adults and general adult audiences. Businesses must not submit information about minors, health or medical information, financial-account or payment-card data, government identifiers, or other sensitive information not expressly approved in writing. Regulated industries and age-restricted promotions are excluded from the pilot.

Retention and security

Active data is kept while needed to provide the service. After deactivation, an authorized business may request export for 120 days, after which eligible operational data is deleted or de-identified; longer periods apply to billing, consent, suppression, support, security, audit, dispute, legal-hold, and backup records as described in the Data Retention and Deletion Policy. Retrakor uses access controls, tenant isolation, signed webhooks, audit records, and protected provider credentials. No system is guaranteed secure. Retrakor will investigate confirmed incidents and provide legally required notice without unreasonable delay.