Back to Home

    Privacy Policy

    Last updated: January 2026

    1. Introduction

    Guarapo Media LLC (“we,” “us,” or “our”) operates Wantap, a digital loyalty card platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services. We are committed to protecting your privacy and complying with applicable data protection laws including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), and other regional privacy regulations.

    2. Data Controller & Processor

    For End Customers: When you join a business’s loyalty program through Wantap, the business is the Data Controller and Guarapo Media LLC acts as a Data Processor on their behalf.

    For Business Users: Guarapo Media LLC is the Data Controller for your account information and platform usage data.

    Contact: Guarapo Media LLC, privacy@wantap.co

    3. Information We Collect

    We collect the following categories of personal information:

    A. Information You Provide

    • Identifiers: Name, email address, phone number (optional)
    • Account Information: Login credentials, profile settings
    • Commercial Information: Points earned, rewards redeemed, transaction history
    • Demographic Data: Date of birth (optional, for age verification)

    B. Information Collected Automatically

    • Device Information: Browser type, operating system, device identifiers
    • Usage Data: Pages visited, features used, timestamps
    • Log Data: IP address, access times, referring URLs

    4. Legal Basis for Processing (GDPR)

    We process your personal data under the following legal bases:

    • Contract Performance: To provide loyalty program services you’ve requested
    • Legitimate Interests: To improve our services, prevent fraud, and ensure security
    • Consent: For marketing communications and optional data collection
    • Legal Obligation: To comply with applicable laws and regulations

    5. How We Use Your Information

    • Manage your loyalty card and track points
    • Process reward redemptions
    • Send transactional notifications about your rewards
    • Send marketing communications (with your consent)
    • Improve and personalize our services
    • Prevent fraud and ensure platform security
    • Comply with legal obligations

    6. Data Sharing & Third Parties

    We may share your information with:

    • Business Partners: The businesses whose loyalty programs you join (as their customers)
    • Service Providers: Supabase (database hosting), Vercel (web hosting), and other infrastructure providers who process data on our behalf
    • Legal Requirements: When required by law, court order, or governmental authority

    We do not sell your personal information to third parties.

    7. International Data Transfers

    Your data may be transferred to and processed in the United States and other countries where our service providers operate. For transfers from the EEA, UK, or Switzerland, we rely on:

    • Standard Contractual Clauses approved by the European Commission
    • Data processing agreements with our service providers
    • Your explicit consent where applicable

    8. Data Retention

    We retain your personal data for:

    • Active Accounts: As long as your account is active and for 2 years after closure
    • Transaction Records: 7 years for tax and legal compliance purposes
    • Marketing Preferences: Until you withdraw consent

    9. Your Privacy Rights

    A. Rights for All Users

    • Access: Request a copy of your personal data
    • Correction: Request correction of inaccurate data
    • Deletion: Request deletion of your data
    • Opt-Out: Unsubscribe from marketing communications

    B. Additional Rights (GDPR - EU/EEA/UK)

    • Portability: Receive your data in a portable format
    • Restriction: Request restricted processing
    • Object: Object to processing based on legitimate interests
    • Withdraw Consent: Withdraw consent at any time
    • Lodge Complaint: File a complaint with your supervisory authority

    C. California Residents (CCPA/CPRA)

    California residents have additional rights:

    • Right to Know: Categories and specific pieces of personal information collected
    • Right to Delete: Request deletion of personal information
    • Right to Opt-Out: We do not sell personal information
    • Non-Discrimination: Exercise rights without discriminatory treatment

    D. Asia-Pacific Users

    Users in Singapore, Japan, South Korea, and other Asia-Pacific jurisdictions may have additional rights under local data protection laws. We comply with applicable regulations including PDPA (Singapore), APPI (Japan), and PIPA (South Korea).

    10. Cookies & Tracking

    We use essential cookies to maintain your session and preferences. We do not use third-party tracking cookies for advertising. You can manage cookie preferences through your browser settings.

    11. Data Security

    We implement industry-standard security measures including:

    • Encryption in transit (TLS/SSL) and at rest
    • Access controls and authentication
    • Regular security assessments
    • Incident response procedures

    12. Children’s Privacy

    Our services are not directed to children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

    13. Changes to This Policy

    We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. Continued use of our services after changes constitutes acceptance of the updated policy.

    14. Contact Us

    For privacy-related inquiries or to exercise your rights:

    • Email: privacy@wantap.co
    • Company: Guarapo Media LLC

    We will respond to requests within 30 days (or as required by applicable law).