thankly.
Get started

Privacy Policy

We built Thankly around a simple idea: a thank you should feel good for everyone involved. That includes how we treat your information. This policy explains what we collect, why, and the choices you have.

Effective September 30, 2026Applies to usethankly.com and app.usethankly.comRead the Terms of Service →

01Overview

Thankly (“Thankly”, “we”, “us”) operates a platform that connects businesses, brands, and their customers through moments of appreciation. A business shares a Thankly QR code or link (a “Placement”); customers who scan or tap it can view offers from participating brands; brands fund those offers through campaigns.

This Privacy Policy explains what information we collect, how we use and share it, and the choices available to you. It applies to our websites at usethankly.com and app.usethankly.com, the Thankly customer experience opened from a Placement, and any related communications (together, the “Services”).

02Who this policy covers

We handle information about four groups of people:

  • Business users — people who create a Thankly account to run Placements and receive earnings.
  • Brand users — people who create a Thankly account to run offer campaigns.
  • Customers — people who scan a QR code or open a link from a business and view offers. Customers do not need an account or an app.
  • Visitors — anyone browsing our marketing website.

03Information we collect

Information you provide

  • Account details: name, email address, password or sign-in provider details, and your role (business or brand).
  • Organization details: business or brand name, category, country, region, address, timezone, and how you plan to use Thankly.
  • Placement and campaign content: placement names, audience settings, offer titles and descriptions, landing page links, images, budgets, and campaign dates.
  • Payment and payout details: collected and processed by our payment provider, Stripe. We receive limited information such as payout status, balances, and the last four digits of a payment method, never full card numbers.
  • Communications: messages you send us, including support requests and feedback.

Information collected automatically

  • Interaction data from Placements: when a customer opens a Thankly Placement we record that an offer was displayed, and whether it was clicked, accepted, or declined. This is how verified displays and earnings are calculated.
  • Device and usage data: browser type, operating system, device category, language, referring page, pages viewed, time spent, and approximate location derived from IP address or from the Placement’s registered location. We use this to match relevant offers, prevent fraud, and understand how the Services perform.
  • Cookies and similar technologies: see the Cookies section below.

Information from other sources

If you sign in with a third-party provider (such as Google), we receive the profile information you authorize that provider to share, typically your name and email address.

04How we use information

We use the information described above to:

  • Provide, operate, and maintain the Services, including matching offers to Placements.
  • Verify offer displays, calculate business earnings, and deduct brand campaign credits.
  • Process payments and payouts, and prevent fraudulent or invalid activity.
  • Send transactional messages such as account confirmations, payout notices, and campaign updates.
  • Provide customer support and respond to your requests.
  • Understand how the Services are used so we can improve them.
  • Send product news and marketing where you have opted in, with an easy way to opt out.
  • Comply with legal obligations and enforce our Terms of Service.

Customers who scan a Placement are never asked to create an account, and we do not build individual marketing profiles of customers to sell to brands. Brands see aggregate campaign performance, not the identities of the people who viewed their offers.

05How we share information

We do not sell personal information. We share information only in these situations:

  • Service providers who help us run the Services, including cloud hosting and database providers, payment processing (Stripe), transactional email delivery, and product analytics. These providers may only use information to perform services for us.
  • Between businesses and brands, in aggregate. Businesses see how offers performed on their Placements. Brands see how their campaigns performed across Placements, including the business category and region. Neither party receives the personal information of individual customers.
  • Brands you choose to engage with. If a customer accepts an offer and continues to a brand’s landing page, the brand’s own privacy policy governs what happens from that point.
  • Legal and safety reasons, such as complying with applicable law, a court order, or a lawful request, or to protect the rights, property, or safety of Thankly, our users, or others.
  • Business transfers. If Thankly is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

06Cookies and analytics

We use cookies and similar technologies that are necessary to keep you signed in, protect your account, and remember your preferences. We also use privacy-respecting product analytics to understand how pages and features are used. Analytics data is used in aggregate to improve the Services.

You can control cookies through your browser settings. Blocking essential cookies may prevent parts of the Services from working. We honour Global Privacy Control signals where required by law.

07How long we keep information

We keep account and organization information for as long as your account is active and for a reasonable period afterwards to complete payouts, resolve disputes, and meet accounting and legal requirements. Interaction data from Placements is kept in identifiable form only as long as needed for verification and fraud prevention, and is then aggregated or deleted.

You can request deletion of your account at any time; see Your rights and choices.

08Security

We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit, access controls, and hosting with reputable providers. Payment details are handled by Stripe and never stored on Thankly servers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your account has been compromised, contact us right away.

09Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent where processing is based on consent.

Canada

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. You may request access to your personal information and challenge its accuracy and completeness. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

United States

If you are a resident of California or another state with a comprehensive privacy law, you may have the rights to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information or share it for cross-context behavioural advertising. We will not discriminate against you for exercising your rights.

How to exercise your rights

Email support@usethankly.com from the address associated with your account. We may need to verify your identity before acting on a request. You can also update most account details directly in your Thankly settings and unsubscribe from marketing emails using the link in any message.

10Children

The Services are intended for businesses and brands and are not directed to children. You must be at least 18 years old to create an account. We do not knowingly collect personal information from children under 13 (or the age required by local law). If you believe a child has provided us with personal information, please contact us and we will delete it.

11International transfers

Thankly operates in Canada and the United States, and our service providers may process information in either country. When information crosses borders we take steps to ensure it receives appropriate protection consistent with this policy and applicable law.

12Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and, for material changes, notify account holders by email or through the Services before the change takes effect.

13Contact us

Questions, requests, or concerns about privacy can be sent to support@usethankly.com. We aim to respond within 30 days.