Privacy Policy

We collect the following categories of information:


Information you provide directly: Name, email address, password, phone number (optional), neighborhood or city, and business information if you are a Founding Pillar.


Activity data: QR code check-in records, receipt uploads, Movement Points balance, passport stamps collected, deals claimed, and vouchers redeemed.


Receipt data: When you upload a receipt, we collect the receipt image and the data extracted from it by our automated verification system (purchase total, merchant name, and date). Receipt images are stored securely and used solely to verify and award Movement Points.


Usage data: Pages visited, features used, device type, browser, and approximate location (country/region only, not precise GPS). We do not collect precise location data.


Payment data: If you purchase a Founding Pillar membership, payment is processed by Stripe. We do not store your card number or full payment details, only transaction records.

We use your information to:

• Operate the OC Social Synergy platform and all its features
• Award and track Movement Points, passport stamps, and rewards
• Process and verify receipt uploads
• Generate voucher codes for point redemptions
• Send transactional emails (account verification, receipt approval/rejection, points earned)
• Send marketing notifications only if you have opted in
• Provide Founding Pillars with visit and spend analytics about their own customers
• Improve platform performance, features, and user experience
• Comply with legal obligations

When you check in at a Founding Pillar by scanning their QR code, we share your first name and the points/stamp awarded with that Founding Pillar. This information appears in their Pillar Dashboard.

When a Founding Pillar verifies a voucher code you present at checkout, we share your display name and the voucher value with that Founding Pillar.

We do not share your email address, phone number, or full profile with Founding Pillars without your explicit consent.

We use the following third-party services to operate the platform:

• Stripe, Payment processing for Founding Pillar subscriptions
• OneSignal, Push notification delivery
• OpenAI (via n8n automation), AI-powered receipt image verification. Receipt images are processed by OpenAI's API to extract purchase data. Images are not used to train OpenAI models under our agreement.
• SendGrid / FluentSMTP, Transactional email delivery
• QR Server API, QR code image generation (no personal data transmitted)

Each third party has its own privacy policy. We only share the minimum data necessary for each service to function.

We protect your data using industry-standard security practices:

• HTTPS encryption on all data in transit
• HMAC-signed QR codes with 60-second expiry windows to prevent forgery
• Bcrypt password hashing
• Database access restricted to authenticated application processes
• Regular backups with encrypted storage

No method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately at info@ocsocialsynergy.com.

We use:

• Session cookies, To keep you logged in during your visit
• Persistent cookies, To remember your login across sessions if you choose 'Remember me'
• Local Storage / IndexedDB, Used by the PWA to store offline data (e.g. cached pages) and queue offline actions (e.g. QR scan attempts while offline)

We do not use advertising cookies, cross-site tracking cookies, or sell cookie data to third parties.

• Account data: Retained while your account is active and for up to 90 days after deletion
• Transaction records: Retained for 7 years for financial compliance purposes
• Receipt images: Retained for 12 months after upload, then deleted
• Push notification tokens: Deleted when you revoke notification permission or delete your account
• Founding Pillar data: Retained for 7 years after subscription end for accounting purposes

Regardless of your location, you have the right to:

• Access, Request a copy of the personal data we hold about you
• Correction, Update inaccurate information via Account Settings or by contacting us
• Deletion, Request deletion of your account and associated personal data (except where retention is legally required)
• Opt out of marketing, Unsubscribe from marketing emails at any time via the link in any email, or toggle notifications in Account Settings

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect and how it is used
• The right to delete personal information (subject to legal retention requirements)
• The right to opt out of the sale of personal information, We do not sell personal information.
• The right to non-discrimination for exercising your privacy rights

To exercise any of these rights, email info@ocsocialsynergy.com with subject 'Privacy Request'. We will respond within 30 days.

The OCSS Platform is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us their data, contact info@ocsocialsynergy.com.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by posting a notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

For privacy questions, data requests, or to report a concern:

Email: info@ocsocialsynergy.com
Mail: OC Social Synergy, Orange County, California
Contact form: ocsocialsynergy.cloud/contact

We respond to all privacy inquiries within 30 days.