Close
Sign In as Business Sign In as Member

Clover Legal Policies

Effective Date: April 7, 2026

Clover Privacy Policy

Effective Date: 7 April, 2026

This “Privacy Policy” explains how Ostana, Inc. (“Company” or “we”) collects, uses, discloses, and otherwise processes personal data on behalf of our customers – typically, merchants (any, a “Merchant”) – in connection with our application, Ostana Loyalty, which runs on the Clover Point of Sale system (“Clover POS”). This Privacy Policy does not apply to Company’s privacy practices in any other context.

Company’s processing of personal data in connection with our application is governed by this Privacy Policy and our agreements with Merchants. In the event of any conflict between this Privacy Policy and a customer agreement, the customer agreement will control to the extent permitted by applicable law.

This Privacy Policy is not a substitute for any privacy policy that a Merchant may be required to provide to their customers, personnel, or other individuals.

TABLE OF CONTENTS

Information Clover collects

We may collect personal data from or on behalf of Merchants. Merchants determine the scope of the personal data transferred to us or that we collect, and the information we receive may vary by Merchant. Typically, the information we collect on behalf of Merchants includes:

Information that we collect when a customer for a Merchant makes a payment

When a customer makes a payment via a Clover POS, we collect information about the transaction, which may include personal data. Information about transactions includes the payment card used, name associated with the payment card, the location of the merchant’s store, date and time of the transaction, transaction amount, and information about the goods or services purchased in the transaction.

In addition, we can collect:

  • merchant business information,
  • customer loyalty program data,
  • transaction metadata from Clover or other POS systems.

Additional information that customers of the Merchant provide through the Clover POS ancillary to a payment

We may collect additional information ancillary to the payment. This information may include:

  • Customers’ email address or phone number, such as when the customer chooses to receive an electronic receipt
  • Customers’ marketing preferences, such as whether the customer wishes to receive marketing communications or newsletters
  • Information about participating customers’ activity in a merchant loyalty program
  • Customers’ physical address, where needed for delivery of goods or services
  • Other information the customer provides, such as first name, last name, birthdate, interests or preferences, reviews, and feedback

Information that we collect about personnel of a Merchant

We may collect information about Merchants’ personnel and interactions with the Clover POS, such as clock-in and clock-out time and tips earned.

Additional information that Merchants provide to us about their customers or personnel

Merchants may provide us with additional information directly, via access they grant to us, or otherwise. The types of information that merchants may provide to us about their customers include email addresses, phone numbers, and purchase history. The types of information that merchants may provide to us about their personnel include email addresses, phone numbers, shifts, and sales history.

How we use the information we collect

We use the personal data we collect for or on behalf of Merchants, to provide our services and the functionality of our application: this data is used solely to operate loyalty and engagement functionality.
Ostana does not store payment card numbers or sensitive payment credentials.

We may also use personal data for related internal purposes, including:

  • To provide information about the application, such as important updates or changes to the application and security alerts
  • To measure performance of and improve the application
  • To respond to inquiries, complaints, and requests for customer support

In addition, Company may use personal data as we believe necessary or appropriate to (a) comply with applicable laws and lawful requests and legal processes, such as to respond to subpoenas or requests from government authorities; (b) enforce the terms and conditions that govern our application; (c) protect our rights, privacy, safety or property, and/or that of you or others; and (d) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.

How we share information

We may share personal data that we collect with:

  • The Merchant from whom or on whose behalf we collected the personal data
  • The platform on which our application runs, the Clover POS. You may view Clover’s Privacy Notice here.
  • With third parties as a Merchant may direct
  • With third party service providers that help us manage and improve the application
  • With Company subsidiaries and corporate affiliates for the purposes described in this Privacy Policy or in our agreement with a Merchant

Company may disclose personal data to government or law enforcement officials or private parties as required by law, and disclose and use such information as we believe necessary or appropriate to (a) comply with applicable laws and lawful requests and legal processes, such as to respond to subpoenas or requests from government authorities; (b) enforce the terms and conditions that govern our application; (c) protect our rights, privacy, safety or property, and/or that of you or others; and (d) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.

Company may sell or transfer some or all of its business or assets, including your personal data, in connection with a business transaction (or potential business transaction) such as a merger, consolidation, acquisition, reorganization or sale of assets or in the event of bankruptcy, in which case we will make reasonable efforts to require the recipient to honor this Privacy Policy.

Your rights and choices

Data subject rights

To the extent that applicable law provides individuals with rights pertaining to their personal information, such as to review and request changes to their personal information, individuals should contact the Merchant with any requests pertaining to the Merchant’s use of our application. To the extent that Clover is responsible for responding to data subject rights requests under applicable law, individuals may contact Clover with applicable requests as explained in Clover’s Privacy Notice, https://www.clover.com/privacy-policy. Company will assist a Merchant, or Clover, as applicable, in responding to such requests subject to our contract with a Merchant or Clover.

Complaints

If you have a complaint about our handling of personal data, you may contact us via the contact information provided below.

Updates

We reserve the right to modify this Privacy Policy at any time. We will notify you of updates by updating the date of this Privacy Policy.

Contact us

You may contact us with any questions, comments, or complaints, about this Privacy Policy or our privacy practices via:

Clover EULA & Terms of Service

Last Updated: 7 April, 2026

This End-User License Agreement (Agreement) is between the business or individual accepting this Agreement (this business or individual being you/Merchant) and Ostana, Inc. (Developer/App Provider). This Agreement is solely between you and Developer/App Provider, and governs your use of Developer’s software application and the corresponding services it provides (together, along with the associated documentation, proprietary, or intellectual property: the App). Review this Agreement completely. You agree to be bound by the terms of this Agreement when you click “Accept” or otherwise download, install, copy, or use the App, and must accept this Agreement before doing so. If you do not agree to the terms of this Agreement, you must click “Decline” and must not download, install, copy or use the App.

1. The App

1.1 The App will provide you with the ability to:

  • create and manage loyalty programs,
  • issue rewards and promotions,
  • track customer visits and transactions,
  • manage customer engagement campaigns,
  • integrate with point-of-sale systems including Clover.

The services may include:

  • web applications,
  • APIs,
  • integrations with third-party systems.

Ostana may update, modify, or improve the platform from time to time.

1.2 Developer grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license during the Term (defined below) of this Agreement to use the App solely for your internal business purposes. You will not otherwise distribute, lease, rent, host, sublicense, transfer, sell, export, modify, reverse engineer, decompile, copy, benchmark, create derivative works from, or attempt to derive the source code for the App. This license does not grant you any rights to Developer’s (or any other third party’s) trademarks, service marks, logos, trade dress, proprietary, or other intellectual property unless provided with the App. Developer reserves to itself (or applicable third parties) all right, title, interest, and license (express or implied) to the App that are not specifically granted to you under this Agreement. You will preserve and display any proprietary notices, markings, or branding associated with use of the App.

1.3 The App may update automatically from time-to-time, and you may be required to accept these updates to continue using the App. Developer may perform maintenance on the App, which may result in service interruptions or delays from time to time. Developer may not support older versions of the App. You are solely responsible for obtaining all equipment and services (for example, Internet connectivity) necessary to access and use the App.

2. Fees

You will pay the Developer a monthly fee for your use of the App, which will be automatically collected through the payment method you select during set-up for the App. You are responsible for payment of all sales, use, excise, or similar taxes (excluding taxes based on the Developer’s income) imposed by federal, state, or local tax authority. You must notify the Developer of any billing errors within 120 days from when an error appears on your invoice, after which you release the Developer from all liability for Losses (defined below) resulting from these errors.

3. Term

This Agreement commences when you accept or otherwise download, install, copy, or use the App; and will continue month-to-month until terminated (this period of time is the Agreement’s Term).

4. Suspension and Termination

4.1 Developer may promptly suspend or terminate your use of the App if (1) you violate this Agreement’s terms; (2) Developer believes your use of the App may damage its reputation or intellectual property rights; (3) Developer suspends or terminates its agreement(s) with any third party involved in providing the App; (4) you exceed normal and reasonable usage for the App; (5) you experience a bankruptcy or insolvency event; or (6) you are using the App for any fraudulent, illegal, or unauthorized purpose, or engage in willful misconduct with respect to use of the App.

4.2 You may terminate this Agreement at any time and for any reason (without cause) by providing notice to Developer. Your termination will be effective at the end of the then current month or billing period in which you give notice. You will not receive a refund for the billing period in which you terminate this Agreement.

5. Confidentiality, Data, and Ideas

5.1 Neither of us will disclose non-public information about the other’s business; including, without limitation, the terms of this Agreement, technical specifications (whether related to the App or otherwise), customer lists, or information relating to a party’s operational, strategic, or financial matters (together, Confidential Information). Confidential Information does not include information that (1) is or subsequently becomes publicly available (through no fault of the recipient); (2) the recipient lawfully possesses before its disclosure; (3) is independently developed without reliance on the discloser’s Confidential Information; or (4) is received from a third party that is not obligated to keep it confidential. Each of us will implement and maintain reasonable safeguards to protect the other’s Confidential Information.

5.2 Neither of us may disclose the other’s Confidential Information except (1) to our respective directors, officers, employees, or representatives that need to know it in order to perform our obligations under this Agreement; (2) in response to a subpoena or court order; or (3) as required by applicable law, rule, or regulation.

5.3 Developer may use data or information obtained through the App to provide its services, for research and development, or in aggregated and anonymized form to provide services generally; all subject to applicable Laws (defined below). Information Developer collects about you or your consumers is subject to Developer’s privacy policy, which is accessible at https://ostana.io/privacy-policy/.

5.4 You may provide, or Developer may invite you to provide, comments or ideas about the App (including, without limitation, improvements to it) (together, Ideas). By submitting any Ideas, you agree that (1) they are not Confidential Information; (2) they are not subject to any use or disclosure restrictions (express or implied); (3) you claim no rights in them; and (4) Developer has no obligation to notify or compensate you in connection with their disclosure or use. You release Developer from all liability or obligations that may arise from the receipt, review, disclosure, or use of any Idea that you submit.

6. Account

You will be required to register for an account with Developer to use the App. You will provide us with accurate information when setting-up your account, and will maintain your account with current information. You will be responsible for establishing safeguards designed to prevent unauthorized access to, disclosure, use, or alteration of your account (safeguards may include, without limitation, user names, passwords, security questions and answers, or other credentials). You must notify Developer if you discover a security breach involving your account or the App. You are responsible for any unauthorized access to, disclosure, use, or alteration of your account, the App, or other transaction information that arises through your systems or account. It is your responsibility to back-up and maintain the accuracy and completeness of any content created, derived from, stored, or accessed through your account or your use of the App (content may include, without limitation, transaction information, text, images, graphics, or photos).

7. Risk Allocation

7.1 The App is provided to you “as-is” and “as-available.” You are solely responsible for determining if the App meets your needs. Developer disclaims all warranties (express or implied) related to your account or the App; including, without limitation, warranties of security, merchantability, fitness for a particular purpose, non-infringement, accuracy, and uninterrupted or error-free operation. Developer is not responsible for any disclosures, modifications, deletions, or other errors that arise in connection with your use of the App due to its interaction with other applications or their content.

7.2 You will indemnify Developer, its directors, officers, employees, agents, subsidiaries, and affiliates against any third-party claims for losses, damages, costs, or expenses (including reasonable attorneys’ fees) (together, Losses) that result from your use or misuse of the App, or your breach of this Agreement. The developer may assume the defense of any third-party claims that you must indemnify it for (at your expense), and you will cooperate with the defense of these claims. You will not settle any third-party claims involving more than the payment of money without Developer’s written consent.

7.3 To the extent permitted by applicable law, Developer will not be liable to you for any lost profits, revenues, or business opportunities, nor any exemplary, punitive, special, indirect, incidental, or consequential damages; regardless of whether these damages were foreseeable or either of us was advised they were possible.

7.4 Developer’s total, aggregate liability to you for all Losses arising from any cause (regardless of the form of action or legal theory) in connection with this Agreement will not exceed the amount of fees you’ve paid to Developer during the 3 months prior to a Loss.

8. Communications

You authorized Developer to communicate with you electronically or otherwise using the contact information you provide to it (e.g., without limitation, via your account, the Internet, email, text, or live agent or automated calls to your mobile or other phone, even if these numbers appear on a Do Not Call or other non-solicitation registry). You are responsible for any fees charged by you communications provider for phone, text, or email communications that Developer sends to you.

9. Compliance with privacy laws

The App Provider makes the following additional commitments, representations, and warranties to you, Merchant:

9.1 The App Provider will only process Merchant Data and Personal Information on behalf of, and as Service Provider of, the Merchant, and not collect, retain, use, or disclose that data for any purpose other than to perform the App Provider’s obligations under this Agreement, as permitted under CCPA and other applicable privacy and data protection laws (collectively, “Privacy Laws”). In no event will the App Provider “sell” (as defined by Privacy Laws) any such personal information.

9.2 The App Provider will not collect, use, retain, disclose, sell, or otherwise make Merchant Data or Personal Information available for App Provider’s own commercial purposes or in a way that does not comply with the CCPA or other Privacy Laws.

9.3 App Provider will limit personal information collection, use, retention, and disclosure to activities reasonably necessary and proportionate to provide the Services set forth in the Agreement or another compatible operational purpose.

10. Data subject rights – assistance with requests

10.1 App Provider will reasonably cooperate and assist Merchant with meeting Merchant’s CCPA and Privacy Law compliance obligations and respond to CCPA-related inquiries, including responding to verifiable consumer requests, taking into account, the nature of App Provider’s processing, and the information available to App Provider. App Provider will make available to Merchant, in a manner consistent with the functionality of the Service and App Provider’s role as a Service Provider of Personal Information of data subjects, the ability to fulfill data subject requests to exercise their rights under Privacy Laws.

10.2 If App Provider receives a request from Merchant’s data subject to exercise one or more of its rights under Privacy Laws in connection with the Services, App Provider will redirect the data subject to make its request directly to Merchant. Merchant will be responsible for responding to any such request including, where possible, by using the functionality of the Services. App Provider shall comply with reasonable requests by Merchant to assist with Merchant’s response to such a data subject request.

10.3 App Provider must notify the Merchant immediately if it receives any complaint, notice, or communication that directly or indirectly relates either party’s compliance with Privacy Laws relating to provisioning of the Services.

11. General

11.1 You represent and warrant that you have authority to enter into this Agreement, creating performance obligations that are legally enforceable against you.

11.2 Developer may modify this Agreement from time-to-time and will provide you with notice when these modifications occur (notification may be through the App, email, a website, changes to the date shown at the top of this Agreement, or other electronic means). Your continued use of the App indicates your acceptance of any modifications to this Agreement. You must stop using and uninstall the App if you do not agree to any modifications that are made to this Agreement.

11.3 Each of us will comply with the laws, rules, and regulations (together, Laws) that apply to our respective performance under this Agreement; including, without limitation, laws related to the collection and use of consumer information obtained via the App. You will follow the requirements of all user documentation provided for the App. You will not use your App to access, store, or transmit materials that are tortious, libelous, or offensive; contain malicious code, viruses, time bombs, Trojan horses, bots, scrips or other programs; or infringe third parties’ intellectual property rights.

11.4 This Agreement is governed by New York law, without regard to its conflicts or choice of law statutes. The courts in or for Suffolk County, New York are proper venue for any proceedings in connection with this Agreement. Both of us waive our rights to a trial by jury in connection with this Agreement.

11.5 This is the entire agreement between us, and supersedes any prior agreements related to its subject matter. Any sections or terms of this Agreement that are, or become, invalid or unenforceable will be severed; and the remaining terms will continue in effect. Developer is not waiving any of its rights under this Agreement if it delays their exercise or fails to exercise them. We are independent contractors. This Agreement does not create an agency, partnership, or joint venture of any kind.

11.6 You may not assign this Agreement without Developer’s written consent, which assignment is voidable by the Developer; however, Developer may assign this Agreement without notice to you or your consent.

11.7 You may contact Developer at: