Skip to main content
Xoxoday’s rewards and voucher issuance platform is designed to minimize the collection of personally identifiable information (PII).
Xoxoday’s rewards and voucher issuance platform is designed to minimize the collection of personally identifiable information (PII). The platform processes identity data (name, email, employee ID), contact information (email address, phone number for delivery notifications), and transactional data (reward redemptions, order IDs, reward amounts). No sensitive personal data, such as biometric information, health records, caste, religion, sexual orientation, or financial account details, is collected or stored by the platform. Data handling practices are governed by Xoxoday’s ISMS policy and comply with ISO 27001:2022 and SOC 2 Type II standards. Learn more: Xoxoday Plum Help Centre

Where is employee data stored and processed?

For customers of the rewards marketplace platform, employee data is stored and processed within India…

How are gift card codes securely generated and stored?

Codes are generated by the platform and never handled manually. Sensitive reward data is encrypted at rest and, for gift voucher links…