Privacy notice

Version: 2026-10-10 · Operator: Temp and Major Inc. · Privacy requests: hello@tempandmajor.com

Shoploop is a Wandamark product from the same operator. Your Shoploop account (email, password and sign-in sessions) is held in Wandamark’s account system, and account emails are sent from no-reply@wandamark.com. Shoploop referral and reward data is kept separately from Wandamark’s own product data.

Data we use

We process account email and profile information, referral links and relationships, campaign claims, approximate IP-derived location when an app restricts an offer geographically, purchases confirmed by app servers, reward transactions and payment references. Email hashes used for matching are pseudonymous personal data, not anonymous data.

Purpose and visibility

We use this information to attribute referrals, issue and redeem rewards, settle with participating apps, prevent abuse and operate the service. App owners see referral-chain names and campaign activity for their own app. Chain participants can see the display names associated with their own reward activity. Reminder actions do not give app owners your email address. Optional marketing reminders are disabled by default and can be disabled in preferences or through the unsubscribe link.

Service providers

Shoploop uses Supabase for accounts and database storage, Stripe for payments and settlement onboarding, Resend for email and Vercel for hosting. Stripe collects payment and settlement verification details through its hosted interfaces. Shoploop and Wandamark share authentication infrastructure; financial app records remain separately permissioned. An app’s optional Wandamark integration receives the documented signup telemetry.

Retention and requests

Referral and financial history is retained while needed to fulfil rewards, reconcile payments, investigate disputes and meet applicable recordkeeping obligations. Account deletion does not automatically erase unsettled financial records. Contact the operator to request access, correction or deletion and to obtain details of the applicable retention schedule. The launch review must configure operator identity, jurisdiction-specific notices and the retention schedule before accepting public users.