MyTapRewards Program

PRIVACY POLICY

Updated December 3, 2024

Your privacy and security are paramount to us at MyTapRewards (“TAP” or the “Company”) and our partners, software providers, affiliates, and subsidiaries (“we”, “us” or “our”). This Privacy Policy incorporates by reference the TAP Terms of Use (“Terms of Use”) available at mytaprewards.com, and any terms used but not defined herein shall have the meaning attributed to them in the Terms of Use. This Privacy Policy is meant to explain how we collect, use, and share information on users of our service as defined below (“Service”). Our Service is not intended for under-aged or minor individuals. We do not knowingly collect personal information from such individuals.

TAP Service

TAP has developed and continues to improve its rewards program (“TAP Rewards”), a rewards system that allows users to engage with unique and personalized content, opt-into offers and rewards that are relevant to them, earn rewards from brand and merchant partners for purchases or actions, and trade rewards on a peer-to-peer digital collectibles marketplace operated by Company (“Marketplace”). Our Service consists of access to the Software contained therein in which we make rewards and offers from a wide range of participating brand and merchant partners available to you. Our Service is delivered through the world wide web (including the Marketplace), stand-alone mobile applications, or add-on software licensed from 3rd party ESPs.

When you use our Service or Software, TAP and wireless local providers (“WLPs” may collect and receive certain information in order to maintain the Software and provide the Service.

Information we collect and/or receive:

We collect different kinds of information. Some of it is personally identifiable and some is non-identifying or aggregated. Here are the types of information we collect or receive:

• Account and profile information. The information we require to create your TAP Rewards account (“Account”) is your first name, last name, email address, phone number, mailing address, and a unique password created by you. Such Account information (“Profile Data”) is shared by you exclusively with WLPs. You hereby grant additional permission to TAP to manage your Profile Data on behalf of WLPs.
• Transactions Data. When using our Service, you may choose to opt-in credit or debit card based purchase transactions data (“Transactions Data”) via our 3rd party Secure Data Gateway Partner (“SDGP”). You always have the option to earn rewards without sharing any credit or debit card data via our SDGP, however, you may receive more opportunities to earn rewards if you do grant permission to TAP via API from our SDGP. By doing so, we will have access to limited transactional information on secure servers where we will match the data from our network merchants with any of your purchases. When our system finds a match, it will reward you in your rewards account. Transactions Data are shared by you exclusively with TAP. You hereby grant additional permission to our WLPs for accessing aggregated analytics on Transactions Data for purpose of improving services. Limited information used in this verification process may be displayed to merchant partners for verification purposes, including merchant name, date, amount of purchase and the last 4 or 5 digits of the card used. Any Personally Identifiable Information (“PII”) such as the first 11 digits of your credit or debit card(s) are masked by our SDGP and not sent to TAP. Neither TAP or WLPs store your full card account info in our databases. We use your transaction history to identify qualified purchases and confirm your rewards amount, and to maintain and improve the performance of the WLP programs.
• Billing information. Some of our WLPs may offer premium subscriptions via TAP. If you purchase a premium subscription, we may collect billing address and credit card information, separately from Transactions Data obtained via our 3rd party SDGP. Credit card payment information is securely collected by 3rd party Payment Processing Providers (“PPP”) such as STRIPE and is not stored in TAP database. This is a separate and unique process that does not interact with any other permissioned data from purchase transaction history.
• Log data. When you use our WLPs rewards programs powered by TAP, our servers automatically record information, including information that your mobile device sends whenever you’re using it. We may also use cookies to collect, access and/or store information to better personalize your experience when you interact with our software. This log data may include your IP address, your browser type and settings, URLs and the domain names of the web pages you visit, the date and time of your request, and your general location (city, state, country, or zip code), information about your browser configuration and plug-ins, language preferences, and statistics on how you interact with software provided by TAP and 3rd party ESPs, which may include data about the unique identifier associated with the ESP software you use, how you engage with Messages or content from WLPs, keywords searched in ESP software. Log data does not contain personally identifiable data and is not routinely deleted. The purpose of the information is for analyzing trends, administering the program, and gathering demographic information.
• Device information. In addition to log data, we may also collect information about the device you’re using, including what type of device it is, what operating system you’re using, device settings, unique device identifiers, your IP address, the Internet Service Provider used by your device and crash data. Whether we collect some or all of this information often depends on what type of device you’re using and its settings.
• Aggregated Data. We may use your device, usage, and other activity data in aggregated form. This means that such data is used for statistical and/or user activity trends analysis purposes. This data does not directly or indirectly reveal your identity and cannot be linked back to you as an individual.
• TAP usage information. This is information about which venue, features, redemptions you interact with within TAP and what related offers and services you use.
• Information from partners or other 3rd parties. We may receive information from WLPs or other 3rd parties that we could use to make our own information better or more useful. We protect such data according to the practices described in this Privacy Policy, plus any additional restrictions imposed by the third party.

We use your personal information for the purposes of:

•  Providing Services. We use information you provide to authenticate you and deliver content and services to you, including but not limited to:

•  Issuing the rewards promised based on your spending with brands and merchants;
•  Enabling WLPs to customize Messages and Services offered to you, including the ability to target and send you Messages relevant to you.

• Understanding and improving our products. To make the product better we have to understand how users are using it. Compiling statistics and conducting research and development for our internal business purposes on an aggregate, anonymous level. Analyzing and reporting performance on behalf of WLPs (such as number of Messages viewed and click rates on Messages).
• Improving redemption services and selections. We work with our network brands and merchants to improve our rewards selections to better fit your preference, using information from your usage and aggregate usage from all users and deliver more customized services to you.
• Security, Safety, and Dispute Resolution. We use data to protect the security and safety of our Services, to detect and prevent fraud, to protect against misuse or unauthorized use of the software from TAP and/or ESPs, to resolve disputes, to enforce agreements, to limit our legal liability and protect our rights or to protect the rights, property or safety of other users or the public.
• Communicating with you.

• Solving your problems and responding to your requests. If you contact us with a problem or question, we will use your information to respond to that request and address your problems or concerns.
• In-product communications. We may use the information you provide to contact you through in-app or desktop push notification or other in-product Messages and tools.
• Email messages. We may send you service and administrative emails. We may also contact you to inform you about changes in our services, or our service offerings. These messages are considered part of the service and you may not opt-out of them. In addition, we sometimes send emails to users about new product features or other news. You can opt-out of these at any time.

• Mergers and Acquisitions. If TAP, our WLPs, or ESPs go through a business transition, such as a merger, acquisition by another company, or sale of all or a portion of assets, your information could be among the assets transferred. You will be notified by a prominent notice on this Privacy Policy of any such change in ownership or control of your data.
• To Comply with Legal Obligations. We may provide access to your Information, including personally identifiable Information, when legally required to do so, to comply with a court order, to enforce our rights, or to cooperate with police investigations or other legal proceedings.
• With Your Consent. There may be times that we rely on your consent to use certain types of Information for specific purposes (e.g., by asking you to check a box). You can withdraw such consent at any time by contacting our privacy team at the contact information contained in this Privacy Policy.

Protection of Personal Information

We take the security of your personal information very seriously. We protect your personal information during transit using encryption such as Transport Layer Security (“TLS”). When your personal data is stored by TAP, we use leading industry secure storage solutions including but not limited to Amazon Web Services (“AWS”) with limited access housed in facilities using security measures.

How We Share and Store Your Information

We make every attempt and stay current with our technology to protect end user information in our possession. We use data protection controls such as data encryption, firewalls, access controls, and monitoring. Our controls are consistently reviewed against industry-standards.

We may collect, use, and share information we collect in an aggregated or de-identified manner (that does not identify you personally) for any purpose permitted under applicable law. This includes creating or using aggregated or de-identified data based on the collected information to develop new services and to facilitate research.

We do not sell or rent your information to marketers or other third parties unless otherwise described in this Policy. We may share your information:

• With your permission for rewards purposes to our WLPs, or brand and merchant partners;
• If we believe in good faith that disclosure is appropriate to comply with applicable law, regulation, or legal process (such as a court order or subpoena);
• In connection with a change in ownership or control of all or a part of our business (such as a merger, acquisition, reorganization, or bankruptcy).
• With our service providers, partners, or contractors in connection with the services they perform for us or our developers, including but not limited to:
• Extended Software Providers ("ESPs") and ESP vendors. We may share de-identified data with outside companies and consultants to help conduct the following aspects of our business so that they can maintain and run certain portions of the software and services:

• Technical and development support for purposes of maintenance and improvement of the ESP software and services;
• Functionality and performance support for purposes of providing WLPs with access to communication targeting and controls, and providing you with access to features like Messages and search;
• External and internal communications support for purposes of providing you with responses to your inquiries and discussing any technical, security, or other issues internally; and
• Third-party services that provide ESPs with infrastructure, software, networking, storage, and other related technology required to run ESP software and services.
• Affiliates, subsidiaries, and parent companies of ESPs to use such data for the purposes described in this Privacy Policy.

• WLPs. We may share your data with WLPs with whom you have signed up and opt-in to their rewards program.

We retain information we collect about you for as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted under applicable law, regulation, or contract. As permitted under applicable law, even after you stop using an application or terminate your account with our developers we may still retain your information (e.g., if you still have an account with another developer or if there is residual information within our databases or systems); however, your information will only be used and shared as required by law or in accordance with this Policy. You can request a full removal of your data collected from any WLP program by contacting our privacy team at the contact information contained in this Privacy Policy

Age Restriction - Children Under 18

Our Service is not intended for use by individuals under the age of 18 (or 16 in the European Economic Area (the “EEA”)). Children under the age of 18 (or 16 in the EEA), or equivalent minimum age in the relevant jurisdiction, are NOT permitted to create their own accounts, or install any of our software. By accessing or using our Service, you represent and warrant that you are at least 18 years old.

You agree to indemnify, defend, and hold harmless TAP, its parent company, subsidiaries, affiliates, and their respective officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, costs, or expenses (including reasonable attorneys’ fees) arising out of or in connection with your breach of this Age Restriction clause, including any claims brought by or on behalf of a minor who accesses or uses the Service through your account.

Location-Based Services

To provide location-based services on TAP and TAP Services network, with your explicit consent, partners such as maps data providers, may collect, use, and share precise location data, including the real-time geographic location of your phone device. Where available, location-based services may use GPS, Bluetooth, and your IP Address, along with crowd-sourced Wi-Fi hotspot and cell tower locations, and other technologies to determine your devices’ approximate location. This location data is collected anonymously in a form that does not personally identify you and is used by TAP and our partners to provide and improve location-based products and services. For example, your device may share its geographic location with applications which may alert you to local rewards offers.

Third party offers, advertisements, and data collection

We may offer a number of separate products and services offered by third parties advertised to you on our TAP and website. These third party offers may be complementary to your use of the TAP services and may be personalized based on information you provide to us, or other information. If you choose to use these separate products and services, provide information to the third party, or allow the third party to otherwise collect information about you, then their use of your information is subject to the applicable third party’s privacy policy and terms of service. You should review the practices of the third party before deciding to use their service or provide them with any information.

As users of our Service, you grant our WLPs, Secure Data Gateway Partner, Payment Processors, and other partners the right, power, and authority to access and transmit your data as reasonably necessary for such partners to provide respective services. In addition, you acknowledge and agree that your personal information will be treated by each partner in accordance with their respective private policy. You furthermore expressly grant all partners the right, power and authority to access and transmit your data to TAP and its partners as reasonably necessary to provide the services to you.

Our Cookie Policy

This Privacy Policy incorporates by reference the Rewards by Warner Music powered by TAP Cookie Policy (“Cookie Policy”) available at mytaprewards.com/cookies.

Security

We take reasonable steps to protect information you provide to us as part of your use of the TAP and TAP Services from loss, misuse, and unauthorized access or disclosure. When you enter sensitive information (such as sign-in credentials) we encrypt the transmission of that information using secure socket layer technology (“SSL”). We follow generally accepted standards to protect the personal data submitted to us, both during transmission and once we receive it. From time to time, we review our security procedures to consider appropriate new technology and methods. However, please be aware that, despite our reasonable efforts, no electronic transmission or digital storage mechanism is ever fully secure or error free, no security measures are impenetrable, and we cannot guarantee that your Information will not be accessed, viewed, disclosed, altered, or destroyed as a result of a breach of any of our safeguards to protect against security incidents.

Our Company-Wide Commitment to Your Privacy

To make sure your personal information is secure, we communicate our privacy and security guidelines to TAP employees and strictly enforce privacy safeguards within the company.

Changes to this Privacy Policy

TAP will update this policy from time to time in order to upgrade its policy to match any new features we may add to the platforms, and if we do we’ll post any changes on this page. If you continue to use any TAP product and/or website after those changes are in effect, you agree to the revised policy. If the changes are material, we may provide more prominent notice or seek your consent to the new policy.

General Data Protection Regulation (GDPR)

We are a Data Controller of your information.

TAP’s legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Information we collect and the specific context in which we collect the information:

• TAP needs to perform a contract with you
• You have given TAP permission to do so
• Processing your personal information is in TAP’s legitimate interests
• TAP needs to comply with the law

TAP will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

If you are a resident of the EEA, you have certain data protection rights. If you wish to be informed what Personal Information we hold about you and if you want it to be removed from our systems, please contact us. You should be aware that the Information we collect and receive or permit third parties such as ESPs and ESP vendors to process may be transferred to, stored and/or processed outside of your country of residence and in any country or territory where one or more of ESP affiliates, subsidiaries, parent companies, or vendors (“ESP Related Parties”) are located, including in the United States. Such Information will also be processed by personnel operating outside the EEA who work for our ESPs or for one of the ESP Related Parties. We rely on multiple legal bases to lawfully transfer personal data around the world. These include your consent and model contractual clauses created by the European Commission which require certain privacy and security protections. A sample copy of such agreements is available upon request by contacting us.

In certain circumstances, you have the following data protection rights:

• The right to access, update or delete the information we have on you.
• The right of rectification.
• The right to object.
• The right of restriction.
• The right to data portability
• The right to withdraw consent

To ask questions about or exercise these rights, please contact us using the contact details below. We will consider these requests from you and provide our response within a commercially reasonable period (and in any event within any time-period required by applicable law).

Our ESPs are data processor for the purposes of the General Data Protection Regulation. This means that ESPs are processing your data on behalf of WLPs so that you can access certain Services of your choice. When ESPs are using your data to provide you with their software, they are using such data as provided by us and WLPs so we can provide you with, fulfill, and improve Services through ESP software.

California Consumer Privacy Act (CCPA)

For Privacy Notice supplementing the information contained here for California Residents only, please visit here.

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

Contacting Us

Please feel free to contact us if you have any questions about our Privacy Policy or practices at mytaprewards.com or at our mailing address below.

MyTapRewards

2045 BISCAYNE BLVD, #333

MIAMI, FL 33137