How Monway Portal collects, uses, and protects your information
Effective Date: January 1, 2026
Last Updated: July 2, 2026
Version: v1.02
This Privacy Policy explains how Monway Portal, Inc. ("Monway," "we," "us," or "our") collects, uses, discloses, retains, and protects information when you access or use our websites, mobile applications, business tools, merchant dashboard, promotional features, support services, and related services (collectively, the "Service").
By using the Service, you understand that we collect, use, disclose, and retain information as described in this Privacy Policy.
Business / Controller: Monway Portal, Inc.
Address: 2933 Sunstone St, Las Vegas, NV 89128, USA
Privacy Contact: privacy@monwayportal.com
Support: support@monwayportal.com
Legal Notices: legal@monwayportal.com
This Privacy Policy applies to information collected through:
This Privacy Policy does not apply to third-party websites, apps, stores, payment processors, or services that we do not control. Those third parties are responsible for their own privacy practices.
"Personal Information" or "Personal Data" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a person, household, device, account, or business contact.
"Sensitive Personal Information" means categories of information that may receive special protection under applicable law, such as precise location, account login information, government identification, tax information, and certain data that may reveal protected or sensitive characteristics.
"Consumer Health Data" means personal information that may be treated as consumer health data under applicable consumer health privacy laws, including Washington and Nevada laws, to the extent those laws apply.
"Service Provider" or "Processor" means a vendor or contractor that processes information on our behalf under contractual restrictions.
"Participating Business" or "Merchant" means a business, store, merchant, owner, manager, or authorized business user that participates in Monway or uses Monway business tools.
The table below summarizes the main categories of information Monway may collect, why we collect it, whether we sell or share it for targeted advertising, and how long we generally retain it. We do not collect every category from every user. The information we collect depends on how you use the Service.
| Category | Main Purpose | Sold/Shared for Targeted Advertising | Retention |
|---|---|---|---|
| Account and contact information | Account creation, login, support, communications, security, and Service operation | No | While the account is active, then deleted or archived according to our retention practices |
| Eligibility and verification information | Age or residency checks, promotion eligibility, fraud prevention, prize or commission compliance where required | No | As needed for eligibility, legal compliance, fraud prevention, disputes, and tax records |
| Receipt and proof-of-activity information | Receipt validation, promotional entries, rewards, fraud prevention, audits, and dispute handling | No | Generally 12–36 months, unless a longer period is required for legal, tax, fraud, audit, or dispute reasons |
| Promotion, reward, and referral activity | Operating promotions, entries, rewards, referrals, winner verification, rule enforcement, and support | No | As needed to operate promotions, comply with rules, resolve disputes, and maintain legal records |
| Device, app, usage, and security information | App functionality, debugging, analytics, security, fraud prevention, and service improvement | No | Generally 3–24 months depending on the type of data and operational need |
| Location information | Approximate location for security and localization; precise location only with permission for location-based features | No | Only as long as needed for the feature, security, fraud prevention, or legal compliance |
| Communications and support information | Customer support, dispute resolution, quality control, legal compliance, and safety | No | Generally 2–3 years, unless longer retention is needed for legal or dispute reasons |
| Business and merchant account information | Merchant onboarding, business tools, billing, support, fraud prevention, and compliance | No | As needed for the business relationship, accounting, tax, legal, collections, and dispute purposes |
| Aggregated or de-identified information | Analytics, reporting, product improvement, business insights, and Service performance | No | May be retained as allowed by law because it does not reasonably identify a person |
We do not sell personal information and do not share personal information for cross-context behavioral advertising in the current version of the Service. If our practices change, we will update this Privacy Policy and provide any required choices or opt-out controls.
We may collect information you provide directly, including:
When you use the Service, we may automatically collect:
If you use features that require camera, photos, media, audio, microphone, or similar device access, such as receipt capture, media upload, voice-enabled support, voice notes, or future audio features:
Monway does not sell promotional entries to users. Users do not pay Monway for entries.
In the current version of the Service, Monway does not process end-user purchases inside the consumer app. Purchases from participating businesses occur directly between the user and the business.
Participating businesses may pay Monway for business services, merchant tools, campaign participation, advertising, analytics, push notifications, AI assistant tools, and related services. Merchant payments may be processed by third-party payment processors under their own terms and privacy practices.
If prizes, commissions, or other payments are issued through the Service, we may collect and disclose information necessary for payment processing, tax reporting, fraud prevention, accounting, and legal compliance.
We may receive information from:
We do not intentionally request or collect:
Receipt images may incidentally include sensitive information, such as health-related purchases or other personal details. We use receipt data only for the purposes described in this Privacy Policy.
We use information for the following purposes:
In the current version of the Monway app:
If our advertising or tracking practices change, we will update this Privacy Policy and provide required choices or opt-out controls.
We may disclose information as described below.
We disclose information to vendors and contractors that help us operate the Service, including hosting, storage, database infrastructure, analytics, crash reporting, messaging, email, SMS, fraud prevention, security, customer support, payment processing, tax reporting, identity verification, and business operations.
These providers are authorized to use information only to provide services to us, subject to contractual restrictions.
If you choose to participate in an offer, reward, promotional feature, receipt-based feature, or program connected to a participating business, we may disclose the minimum information reasonably necessary to:
Participating businesses may not use Monway-provided user information for independent marketing, resale, sharing, scraping, profiling, or unrelated purposes unless they have separate lawful permission.
We may disclose information to payment processors, banks, financial partners, tax providers, and accounting providers to process merchant payments, prizes, commissions, refunds, tax forms, reporting, and compliance obligations.
We may disclose information to comply with law or protect rights, including responding to subpoenas, court orders, lawful government requests, fraud investigations, security incidents, Terms enforcement, Official Rules enforcement, and protection of users, businesses, Monway, or the public.
If Monway is involved in a merger, acquisition, financing, reorganization, bankruptcy, asset sale, or similar transaction, information may be disclosed or transferred as part of that transaction, subject to appropriate safeguards.
We may create, use, disclose, or publish aggregated or de-identified information that cannot reasonably identify you, including analytics, trends, business insights, performance metrics, and general reports.
In the current version of the Service, we do not sell personal information and do not share personal information for cross-context behavioral advertising as those terms are used under applicable privacy laws.
We also do not sell consumer health data.
If this changes in the future, we will update this Privacy Policy and provide any required opt-out rights or consent mechanisms.
We honor Global Privacy Control (GPC) and similar browser-based opt-out preference signals where required by applicable law and technically feasible.
You can manage privacy preferences through our Privacy Choices page.
We do not use sensitive personal information to infer characteristics about you.
Depending on how you use the Service, we may collect or process sensitive personal information only as reasonably necessary to provide the Service, secure the Service, prevent fraud, fulfill prizes or commissions, comply with law, or with consent where required.
Examples may include:
We retain personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.
Typical retention examples include:
| Data Type | Typical Retention |
|---|---|
| Account and profile data | While your account is active, then deletion or archival within 30–180 days after a verified deletion request, subject to exceptions |
| Support communications | 2–3 years for dispute handling, quality control, and legal protection |
| Security and fraud logs | 6–24 months depending on risk and operational need |
| Receipt verification records | 12–36 months to prevent fraud, enforce rules, and resolve disputes |
| Promotion, prize, and tax records | As required by law, tax rules, audit requirements, and dispute needs |
| Merchant billing and business records | As required for accounting, tax, collections, contracts, and legal compliance |
| Analytics logs | 3–18 months depending on service-improvement and security needs |
We may retain information longer where necessary to comply with law, prevent fraud, enforce agreements, resolve disputes, protect rights, maintain security, complete tax/accounting requirements, or preserve evidence.
When information is no longer needed, we delete, de-identify, aggregate, or archive it according to our retention practices.
We use reasonable administrative, technical, and physical safeguards designed to protect information, including:
No system is completely secure. You are responsible for keeping your device, email, phone, and account access secure.
Depending on where you live and how you use the Service, you may have rights to:
To submit a request, use our Privacy Request Form or email privacy@monwayportal.com.
We may need to verify your identity before processing a request. You may designate an authorized agent where allowed by law. We may deny or limit requests where permitted by law, including where information must be retained for security, fraud prevention, legal compliance, tax records, dispute resolution, or transaction completion.
California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know, access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and non-discrimination for exercising privacy rights.
In the current version of the Service:
California residents may submit requests through our Privacy Request Form or by emailing privacy@monwayportal.com.
Nevada residents may have rights under Nevada privacy laws, including rights relating to the sale of certain covered information and rights relating to consumer health data where applicable.
In the current version of the Service, we do not sell personal information and do not sell consumer health data.
Nevada residents may submit privacy requests through our Privacy Request Form or by emailing privacy@monwayportal.com.
This Consumer Health Data Supplement applies only to the extent Monway collects information that is considered consumer health data under applicable state consumer health privacy laws, including Washington and Nevada laws.
Monway is not a healthcare provider, health plan, or healthcare clearinghouse. Monway does not intentionally collect medical records or provide medical services. However, certain receipt details, location details, or user-submitted information may incidentally reveal health-related context.
Depending on how you use the Service, consumer health data may include:
To the extent we collect consumer health data, we use it only to:
We may disclose consumer health data only as reasonably necessary to:
We do not sell consumer health data.
We do not knowingly create geofences around healthcare facilities to identify, track, collect consumer health data from, or send health-related advertising or messages to users based on visits to healthcare locations.
Where applicable, you may have rights to confirm, access, delete, withdraw consent, or request review of certain decisions involving consumer health data.
Submit requests through our Privacy Request Form or by emailing privacy@monwayportal.com.
We may send marketing communications where permitted by law or with consent where consent is required.
You may opt out of marketing emails by using the unsubscribe link in the email or by contacting us. We will honor valid marketing email opt-out requests within ten (10) business days.
You may opt out of eligible SMS marketing by replying STOP or following instructions in the message. Standard message and data rates may apply.
Even if you opt out of marketing, we may still send transactional, legal, security, receipt-status, account, prize, business, and service-related communications.
You can control certain privacy settings through your account, app settings, browser settings, and device settings.
Depending on your device and app version, you may be able to:
Some features may not work correctly if you disable certain permissions.
The Service is intended for individuals who are at least 18 years old, or the age of majority in their jurisdiction, whichever is higher.
We do not knowingly collect personal information from anyone under 18. If we learn that we collected information from a person under 18, we will take reasonable steps to delete it.
Monway is based in the United States. If you access the Service from outside the United States, your information may be processed in the United States and other countries where we or our providers operate.
Where required by applicable law, we use safeguards designed to protect international transfers, such as contractual protections.
If GDPR, UK GDPR, or similar laws apply, we process personal data under one or more of the following legal bases:
EEA/UK users may have rights to access, correct, delete, restrict or object to processing, data portability, withdraw consent where consent is the basis, and lodge a complaint with a supervisory authority.
The Service may link to third-party websites, apps, businesses, payment processors, stores, maps, services, or content.
We are not responsible for third-party privacy practices, terms, products, services, or security. Review third-party policies before using them.
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date above.
If we make material changes, we will provide additional notice where required by law, such as through the app, website, email, or other reasonable method.
Your continued use of the Service after an updated Privacy Policy becomes effective means you acknowledge the updated policy.
For privacy questions or requests:
Email: privacy@monwayportal.com
Privacy Request Form: /privacy/request
Privacy Choices: /privacy/choices
Mail:
Monway Portal, Inc.
2933 Sunstone St
Las Vegas, NV 89128
USA