Privacy Policy

1.Information We Collect

1.1 Information You Provide Directly

• —Account Registration. Name, email address, phone number, and password. For Merchant Partners, we also collect business name, business address, and federal tax identification number. Banking details for payouts are collected and stored directly by Stripe — Laziz does not collect or store your bank account information.
• —Orders and Transactions. Order details, items purchased, transaction amounts, and redemption codes. Payment card information is processed and stored by Stripe (our PCI-compliant payment processor) — we do not store raw card numbers.
• —Merchant Onboarding. Business license numbers, health permit information, operating hours, menu data, and uploaded images.
• —Communications. Messages you send us via support channels, feedback forms, or email, including any personal information contained therein.
• —User Content. Reviews, ratings, photos, and other content you submit to the Platform.

1.2 Information Collected Automatically

• —Device and Usage Data. IP address, browser type, operating system, device identifiers, referring URLs, pages visited, clicks, search queries, and session duration.
• —Location Data. With your permission, we collect precise geolocation data to show nearby deals. You may disable location access at any time through your device settings, though this may affect core Platform functionality.
• —Cookies and Tracking Technologies. We use cookies, web beacons, pixel tags, and similar technologies. See Section 5 for details.
• —Transaction Logs. Records of orders placed, offers redeemed, pickup confirmations, and other Platform activity associated with your account.

1.3 Information from Third Parties

• —Social Login. If you register or log in via a third-party service (e.g., Google, Apple), we receive basic profile information as authorized by that service.
• —Payment Processor. Stripe may share transaction status, fraud signals, and verification data with us to facilitate payouts and detect fraudulent activity.
• —Analytics Partners. We may receive aggregated or pseudonymized data about Platform usage from analytics providers.

2.How We Use Your Information

We use the information we collect to:

• —Create, maintain, and authenticate your account;
• —Process orders and facilitate transactions between Consumers and Merchant Partners;
• —Provide location-based deal discovery and personalized recommendations;
• —Send transactional messages, including order confirmations, pickup notifications, and receipts;
• —Send promotional communications about deals, new features, and partner offers — you may opt out at any time;
• —Respond to customer support inquiries and resolve disputes;
• —Detect, prevent, and investigate fraud, abuse, security incidents, and violations of our Terms of Service;
• —Comply with applicable legal obligations, including tax reporting and responding to lawful government requests;
• —Analyze usage patterns and conduct internal research to improve the Platform;
• —Enforce our Terms of Service and other agreements.

Legal Basis. We process your personal data on the bases of: (a) contractual necessity — to provide the Platform; (b) legitimate interests — fraud prevention and product improvement; (c) legal obligation — compliance with applicable law; and (d) consent — for marketing communications and precise location data.

3.How We Share Your Information

Laziz does not sell your personal information to third parties. We share information only in the following circumstances:

• —Merchant Partners. When you place an order, we share your name, order details, and pickup confirmation code with the relevant Merchant Partner to fulfill your order. We do not share your payment card information with Merchant Partners.
• —Consumers (for Merchant Partners). We share Consumer order details and relevant redemption information with Merchant Partners so they can fulfill orders. Consumer contact information is shared only as necessary for fulfillment.
• —Service Providers. We engage third-party vendors who process data on our behalf under written data processing agreements, including cloud hosting providers (e.g., Supabase/AWS), Stripe, email delivery providers, analytics tools, and customer support platforms.
• —Legal Compliance and Safety. We may disclose information when required by law, court order, or governmental authority; to protect the rights, property, or safety of Laziz, our users, or the public; or to detect and prevent fraud.
• —Business Transfers. In connection with a merger, acquisition, reorganization, bankruptcy, or sale of all or substantially all of Laziz's assets, your information may be transferred to the successor entity, subject to reasonable confidentiality obligations.
• —With Your Consent. We will share your information with third parties for purposes not listed above only with your express consent.

4.Data Retention

We retain your personal information for as long as your account is active or as necessary to provide the Platform, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• —Account Data. Retained for the duration of your account and for up to three (3) years after account closure, unless a longer period is required by law.
• —Transaction Records. Retained for a minimum of seven (7) years for tax, accounting, and fraud prevention purposes.
• —Usage and Log Data. Typically retained for up to twenty-four (24) months, after which it is aggregated or deleted.
• —Marketing Opt-Out Records. Maintained indefinitely to honor your opt-out preference.

When we no longer have a legitimate business or legal purpose to process your information, we will delete or anonymize it.

5.Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage, and serve relevant content. The categories we use include:

• —Strictly Necessary. Required for the Platform to function (e.g., authentication sessions). Cannot be disabled.
• —Functional. Remember your preferences such as location settings and past search history.
• —Analytics. Help us understand how users interact with the Platform so we can improve it. Data is aggregated and pseudonymized where possible.
• —Marketing. Used to deliver relevant promotional content on the Platform and on third-party channels. You may opt out via our cookie preferences banner or through the Digital Advertising Alliance opt-out at optout.aboutads.info.

Most browsers allow you to refuse or delete cookies. Disabling certain cookies may affect Platform functionality.

6.Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These include encryption of data in transit (TLS/HTTPS), encryption at rest for sensitive fields, role-based access controls, and regular security assessments.

No security system is impenetrable. In the event of a data breach that requires notification under applicable law, we will notify affected users and relevant authorities as required.

7.Minors

The Platform is intended for users who are 18 years of age or older, consistent with our Terms of Service. We do not knowingly collect personal information from anyone under 18. If we learn that we have inadvertently collected such information, we will promptly delete it. If you believe we have collected personal information from a minor, please contact us at privacy@laziz.co.

8.Your Rights and Choices

8.1 All Users

Regardless of your location, you may: (a) access and update the information in your account at any time through the Platform settings; (b) opt out of promotional emails by clicking “Unsubscribe” in any such email; (c) disable location access through your device settings; and (d) request deletion of your account by contacting privacy@laziz.co.

8.2 California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (as amended by the California Privacy Rights Act):

• —Right to Know. You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the business purposes, and the categories of third parties with whom we share it.
• —Right to Delete. You may request deletion of personal information we have collected from you, subject to certain exceptions (e.g., information we are legally required to retain).
• —Right to Correct. You may request correction of inaccurate personal information we hold about you.
• —Right to Opt Out of Sale/Sharing. We do not sell or share (for cross-context behavioral advertising) your personal information. If this changes, we will update this Policy and provide an opt-out mechanism.
• —Right to Limit Sensitive Data Use. You may limit our use of sensitive personal information (e.g., precise geolocation) to uses that are reasonably necessary to provide the Platform.
• —Non-Discrimination. We will not discriminate against you for exercising your CCPA/CPRA rights.

To submit a CCPA/CPRA request, contact us at privacy@laziz.co. We will verify your identity before processing your request. You may designate an authorized agent to submit requests on your behalf.

8.3 Other U.S. State Residents

Residents of other U.S. states (including but not limited to Virginia, Colorado, Connecticut, and Texas) may have similar privacy rights under their respective state laws. To the extent such laws apply to you, you may exercise equivalent rights by contacting us at privacy@laziz.co. We will respond in accordance with applicable requirements.

9.Third-Party Links and Services

The Platform may contain links to third-party websites, social media pages, or applications. This Privacy Policy does not apply to any third-party service, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party service you access through the Platform.

10.Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will update the “Last Updated” date above and, where required by law, notify you by email or prominent in-app notice. Your continued use of the Platform after such notice constitutes acceptance of the updated Policy.

11.Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Team: