Privacy Policy

Last updated: March 1, 2026

Smitteck GmbH ("we", "our", or "us") operates Rewardata (rewardata.com). This page informs you of our policies regarding the collection, use, and disclosure of personal information when you use our Service.

1. Information Collection and Use

We collect several different types of information for various purposes to provide and improve our Service to you.

2. Types of Data Collected

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. This may include, but is not limited to:

  • Email address
  • Name (optional)
  • Company information (optional)
  • Cookies and Usage Data

Usage Data

We may also collect information on how the Service is accessed and used. This Usage Data may include information such as your computer's Internet Protocol address, browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, and other diagnostic data.

API Usage Data

When you use our API, we collect information about your API requests, including endpoints called, query parameters, response times, and error rates. This data is used to monitor service health, enforce rate limits, and improve the API.

3. Use of Data

Rewardata uses the collected data for various purposes:

  • To provide and maintain our Service
  • To notify you about changes to our Service
  • To authenticate users and prevent fraud
  • To monitor API usage and enforce rate limits
  • To provide customer support
  • To gather analysis or valuable information so that we can improve our Service
  • To monitor the usage of our Service

4. Data Sharing

We do not sell your personal information. We may share data with:

  • Service Providers: Cloud hosting (Google Cloud Platform) and analytics services that assist us in operating the Service
  • Legal Requirements: When required by law or to protect our rights

5. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encrypted data transmission (HTTPS/TLS)
  • Encrypted password storage (bcrypt)
  • API key authentication
  • Regular security reviews and updates

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. API usage logs are retained for up to 90 days. You can request account deletion at any time by contacting us.

7. Your Rights

Under applicable data protection laws, including the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR), you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Object to or restrict processing of your data
  • Opt-out of marketing communications

8. Cookies

We use essential cookies to maintain your session and authenticate API requests. We do not use tracking or advertising cookies. Analytics, if used, rely on aggregated and anonymized data.

9. International Data Transfers

Your data is processed and stored on servers located in the United States (Google Cloud Platform, us-west1 region). By using our Service, you acknowledge and consent to this transfer. We ensure appropriate safeguards are in place in accordance with Swiss and EU data protection standards.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes take effect immediately upon publication on the Site. We will notify users of significant changes via email or through our website.

11. Contact Us

If you have questions about this Privacy Policy, please contact us:

Smitteck GmbH
Please reach us via our contact form.

12. Governing Law

This Privacy Policy is governed by the laws of Switzerland, without regard to conflict of law principles. Any disputes shall be resolved in the competent courts of Zurich, Canton of Zurich.