Syracuse Antiques Exchange Rewards

Privacy Policy

Last updated: May 7, 2026

This policy describes what information Syracuse Antiques Exchange ("we," "us") collects through the SAE Rewards program, why we collect it, what we do with it, and how you can change or delete your information. If anything here is unclear, email rewards@syracuseantiques.com.

What we collect

• Email address -- required to identify your account and to send you reward notifications.
• First and last name, zip code -- required at signup. Helps us greet you at the counter and analyze our customer base in aggregate (where customers come from).
• Phone number -- optional. When you provide a phone number, we text you the 8-digit code for any reward you've earned (welcome sticker on signup, plus tier-spend rewards as you reach them). The text is transactional -- it confirms a reward is ready and gives you the code to type at the in-store iPad. Marketing texts (sales, events) are a separate opt-in deferred to a future version.
• Marketing opt-in flag -- whether you've agreed to receive non-rewards emails (sales, events, store news). Off by default.
• Purchase history at SAE -- the dollar amount and date of each purchase you check in for, plus the receipt's invoice number. Used to credit your spend toward reward tiers.
• A small device token stored on the in-store iPad's browser, used to confirm reward claims happen physically in the store. This isn't tied to you personally.

What we don't collect

• Credit card or payment information. The rewards system never sees your payment details. Those go through our point-of-sale system separately.
• Browsing or location tracking. No analytics tracking on the kiosk page. No cookies for advertising. No third-party trackers.
• Information from other sources. We don't buy customer data, don't link your SAE Rewards account to social media, and don't enrich your profile with data from data brokers.

Why we collect it

To run the rewards program. We use your email and purchase history to track your spend tier, issue rewards, and send you a daily digest if you've made a purchase. If you've opted in to marketing, we send you occasional sale and event announcements. That's it.

Who we share it with

We don't sell, rent, or share your information with third parties for advertising. We use a small set of service providers to actually operate the system:

• Resend -- delivers our emails to you. They see your email address and the email content; they're contractually limited to using it only to deliver our emails.
• VoIP.ms -- delivers our SMS messages. Two destinations: (a) our staff phone, when a customer claims a reward at the iPad so we know to hand it over; (b) your phone, when you've provided one, to send you your 8-digit reward code so you can type it at the iPad later.
• Supabase -- our database host. They store the data described above; access is limited by per-record security rules.
• Cloudflare -- hosts the kiosk page you're using. They see basic traffic data (IP address, page requests) but not the form data you submit (which goes directly to Supabase).

We don't share data with the dealers who rent booths at SAE. Your purchases are tracked in aggregate per dealer for our internal reporting (so dealers can see "your top customers" reports if we add that feature later), but never with personally-identifying information attached.

How long we keep it

Your account stays active as long as you continue to shop with us. After 2 years of no activity (no purchases, no check-ins), we flag your account inactive and stop sending you any emails. After that, we keep the record on file until you request deletion (see below) or until we decide to purge old inactive records (which we'll communicate in advance via this policy).

Your choices and rights

To update your information

Tell our staff at the counter, or email rewards@syracuseantiques.com with the change.

To stop marketing emails

Click the unsubscribe link at the bottom of any marketing email. This stops marketing only -- you'll still get rewards-related emails (digests of your activity, reward-ready notifications). Or uncheck the marketing box in your account by emailing us.

To delete your account and data entirely

Email rewards@syracuseantiques.com from the email address on your account, with subject line "Delete my SAE Rewards account." We process deletion requests within 30 days. Once deleted, your name, email, phone, and zip are removed; aggregate purchase history (without your name attached) may be kept for our internal accounting. Any unclaimed rewards on your account are forfeited at deletion -- if you have rewards waiting, claim them first or let us know in your deletion email and we'll send them to you before deleting.

To get a copy of what we have on you

Email us with subject "Data export request" from your account email. We'll reply within 30 days with a CSV / PDF of everything we have linked to your email.

Children

SAE Rewards is intended for adults. We don't knowingly enroll customers under 13. If you believe a child has signed up, contact us and we'll delete the record.

Changes to this policy

If we change this policy in a meaningful way, we'll update the "Last updated" date at the top and, for significant changes, send a notice to enrolled customers. Continued use of the rewards program after changes means you accept the updated terms.

Contact

← Back to the kiosk