Privacy policy

Bonuxo is the digital loyalty platform that runs this site and its apps. For privacy questions or to exercise your rights, write to contacto@bonuxo.com.

Data controller: Alan Meglio, owner of Bonuxo — Buenos Aires, Argentina — contacto@bonuxo.com.

The Spanish version (/privacidad) is the reference text; if the two differ, the Spanish version prevails.

Each business using Bonuxo is the controller of its own customers' data: it decides what to collect, why, and on what legal basis. Bonuxo acts as a processor and handles that data only on the business's instructions, to provide the service. Each business has its own customer base, isolated from the others.

For the business's own account data (name, email, billing), Bonuxo is the controller.

Businesses and their staff

• Account: name, email, phone, business details (name, address, logo, social links).
• Credentials: password (stored only as a bcrypt hash) and staff PIN (hashed, plus an encrypted copy so the admin can display it again).
• Billing: we store the subscription id and payer email; card data never reaches Bonuxo (hosted Mercado Pago checkout).

End customers (processed on behalf of the business)

• Contact: first and last name, phone and/or email, birthday (optional, for birthday rewards) and fields the business defines.
• Program activity: points or stamps balance and history, redemptions, coupons, prize-wheel results.
• Marketing preference: whether the customer agreed to receive communications.
• Device identifiers: Apple Wallet / Google Wallet tokens, to update the digital card.
• Internal staff notes: never shown to the customer.
• Location: we do not collect the customer's location. The Wallet card shows the store's coordinates (for proximity alerts, only if the business turns them on).

Technical records

• Sign-up audit (anti-fraud): IP, user agent, time, outcome and a salted SHA-256 hash of the identifier — never the plain phone or email. Deleted automatically after 180 days.
• Prize-wheel anti-fraud: device fingerprint hash, IP and user agent. Deleted after 90 days.

We do not ask for ID documents, biometric data or health data.

• Providing the service (issuing cards, adding points, redemptions, operational notices): performance of a contract.
• Email marketing (with open and click tracking): the end customer's consent.
• Security, fraud prevention and support: legitimate interest.
• Billing and accounting records: legal obligation.

We do not sell or rent personal data. We share it only with the providers the service needs:

WhatsApp is not integrated today: Bonuxo sends no WhatsApp messages and shares no data with Meta. We run no advertising scripts.

Site analytics. We measure visits to bonuxo.com and the sign-up screen with Umami, an analytics tool that runs on our own server (umami.bonuxo.com). It uses no cookies, stores no personal data and does not track across sites: it only counts page visits, country, device and browser in aggregate, and which sign-up buttons are clicked. Visitors with the browser's Do Not Track setting on are not counted.

Session recordings (Microsoft Clarity). On bonuxo.com and on the sign-up screen (app.bonuxo.com/signup), and nowhere else in the business dashboard or the end-customer apps, we use Microsoft Clarity to see how a page is used: session recordings (mouse movement, clicks and scrolling) and heatmaps. Clarity masks form field contents, numbers and email addresses, and we also mark the personal data on the sign-up screen as masked: it is not sent to Microsoft. It receives technical browser and device data, and Microsoft uses the IP address to estimate the country. Microsoft keeps recordings for 30 days and heatmaps and aggregate data for 13 months, in its cloud (Azure). It uses the _clck and _clsk cookies and Microsoft cookies such as MUID for analytics only: advertising storage is always denied. If you visit from the European Economic Area, the United Kingdom or Switzerland, it sets no cookies until you accept in the notice. Your choice is stored in the bonuxo_consent cookie; you can reject in the notice or from the Cookie policy, and with Do Not Track or Global Privacy Control on it is not loaded. We use no other analytics or tracking tools.

Bonuxo is operated from Argentina, and its providers (Resend, Sentry, Microsoft (Clarity), Cloudflare, Apple, Google, Mercado Pago) may process data in other countries. The safeguards we apply today are each provider's contractual commitments and data minimization: each one receives only what its function requires.

Use of Google APIs. Bonuxo uses Google APIs (Google Wallet for the cards, and Search Console and Google Ads to measure and plan the visibility of bonuxo.com) through its own Google Cloud project. Bonuxo does not offer "Sign in with Google" and does not request access to anyone's Google account: it does not read emails, contacts, files or any other Google account data. What we receive from Search Console and Google Ads is aggregated data about our own website, with no personal data. Bonuxo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Campaign emails include an open-tracking pixel, click tracking and a one-click unsubscribe link that works without signing in. Unsubscribing does not affect operational emails.

The public sign-up form and the prize wheel ask for marketing consent. Customers added manually by a business or from a point of sale are marked as opted in by default; the business is responsible for having a legal basis for that. Any customer can unsubscribe at any time.

We use one strictly necessary cookie for the customer's portal session (bonuxo_cliente). Only on bonuxo.com and the sign-up screen, we also use Microsoft Clarity analytics cookies (_clck, _clsk and Microsoft cookies such as MUID), which you can reject, and the bonuxo_consent cookie that stores your choice. No advertising cookies. Details in the Cookie policy.

We keep data while the business's account is active. After cancellation the account is deactivated, and permanent deletion happens at the account holder's request and in any case within 90 days (a manual process today). Profiles created from a point-of-sale or online-store purchase for people who never joined the program or redeemed anything are deleted automatically 90 days after their last purchase. Technical records are deleted automatically after 7 to 180 days, as listed in the full table. Accounting records follow the period required by tax law.

• All traffic over HTTPS/TLS.
• Passwords and session tokens stored hashed, never in plain text.
• Each business can access only its own data.
• Database backups.

If you find a vulnerability, please report it to contacto@bonuxo.com.

As a data subject you can, at a minimum, access your data, correct it, ask for it to be deleted, object to its use for advertising and withdraw consent. Some laws add others, such as portability. The details depend on the country (see below).

How to exercise them with Bonuxo

• Customer of a business — online: on the business's page (/mis-datos) you can request access, correction, deletion or removal from advertising. We send a code to your registered email or your Wallet card to confirm it is you, and the request goes to the business, which is the controller and the one that answers.
• Customer of a business — other channels: ask in store or through its channels, or write to contacto@bonuxo.com naming the business: we will pass it on and help resolve it.
• Business: your account data is in the dashboard; for anything else, write to contacto@bonuxo.com.
• Marketing: the unsubscribe link in every email.

Requests are free. We may ask you to confirm you are the data subject.

Applicable law by country

The applicable law mainly depends on the country where the business that signed you up is established. The deadlines below are those each law sets for the controller to answer.

Bonuxo is not directed at children under 13. Sign-up does not verify age: if a business includes a minor in its program, it must have a parent's or guardian's authorization. If we learn we hold a minor's data without it, we will delete it.

We may update this policy. For material changes we will notify businesses by email with reasonable notice. The date at the top shows the current version.

Privacy questions: contacto@bonuxo.com.