Privacy Policy

We collect account profile information such as your name, email, role, and business details. When you link a financial account, we use Plaid to receive account metadata and transaction data needed for rewards.

Laso does not receive or store full card numbers, CVVs, card PINs, online banking passwords, or raw Plaid access tokens. Plaid access tokens are encrypted before storage.

Transaction data may include merchant name, amount, date, currency, category, linked account metadata, and sync status. We use this data to match purchases against participating business statement descriptors and reward rules.

Participating businesses can see reward activity related to their own business, such as matched purchases, reward progress, and redemptions. They cannot see full card numbers or unrelated transaction histories.

We use Plaid Technologies, Inc. to connect financial accounts. By using card linking, you authorize Laso and Plaid to process the data needed to provide card-linked rewards.

Plaid's end-user privacy policy is available at plaid.com/legal.

You can disconnect a linked account from App Settings at any time. Disconnecting stops future transaction syncs and removes the underlying Plaid Item. You can also delete a disconnected account from App Settings, which permanently removes the linked account record and its associated transaction history from Laso.

To request account deletion or broader data deletion, email support@lasoloyalty.com.

Support staff may review users, businesses, Plaid item health, transactions, rewards, and audit events when helping with account or reward issues. Admin support actions are audited.

Questions about this policy can be sent to support@lasoloyalty.com.