Version 1.1 · Effective August 23, 2026 · Last Updated August 23, 2026
This Consumer Privacy Policy (the “Policy”) is provided by MSYM Investments, LLC d/b/a SuperSonic POS and its affiliated entities, including the Petro Outlet platform (collectively, “SuperSonic,” “we,” “us,” or “our”).
This Policy applies to you as a consumer when you:
This Policy explains what personal information we collect, how we use it, who we share it with, and the choices and rights available to you.
If you are a website visitor, a business contact, or a member of a merchant’s staff using our products, our Website, Business Contact & Product User Privacy Notice at supersonicpos.com/legal/policies/privacy/business applies to you instead. Our SuperSonic Rewards Terms at supersonicpos.com/legal/policies/rewards-terms govern the rewards program itself, and our Privacy Requests page at supersonicpos.com/legal/privacy-requests is how you exercise any right described here.
When you make a purchase from a store, that store is the merchant with which you are doing business. In that context, we generally process your personal information as a service provider acting on the merchant’s behalf. When you enrol in SuperSonic Rewards or another program we operate, we are acting for ourselves and not for any store. For those programs we decide what information is collected and how it is used, we are the party responsible for it, and we may send you communications about the program in our own name. That remains true if a store stops using SuperSonic, for as long as you stay enrolled and have not withdrawn your consent. You can leave the program or opt out of our messages at any time as described in Section 7. Separately, a store may operate security cameras supplied by us to help reduce theft and loss. Where it does, the standard configuration records video only and does not capture or store audio, and the store decides where its cameras point and is responsible for posting the notice that applicable law requires. Footage is held for the store, normally for thirty days and for up to six months where the store has purchased extended retention, and we do not view it unless the store asks us to, we are required to by law or valid legal process, or it is needed to keep the service running. We do not apply facial recognition or other biometric analysis to footage.
For questions about how a particular merchant uses your personal information, you may contact that merchant directly. You may also submit a privacy request to us as described below, and we will coordinate with the merchant where appropriate.
SuperSonic Rewards involves more than one relationship, and our role differs in each.
Store programs. Each participating merchant sets and sponsors its own rewards program, including how points are earned, what they are worth, and when they expire. For those programs we act as a service provider to that merchant, processing information on its behalf.
Your SuperSonic account and app. We operate the SuperSonic Rewards platform and your consumer account, and we are responsible for the personal information we collect to provide them.
Offers we develop. We also develop promotions and offers ourselves, sometimes funded by brand partners, and make them available through participating merchants. Those offers may be presented to you under a store’s name, but we select and deliver them, and we are responsible for that activity. If you no longer want to receive offers from us, you can opt out at any time, and we will honor that choice regardless of which store you shop at.
Analytics. We also use transaction information in aggregated and de-identified form for market analytics, as described in Section 6.
We may collect the following categories of personal information:
Transaction Information
This may include the products you purchase, purchase amounts, tender type, transaction date and time, and the merchant location where the purchase occurred.
Contact Information
This may include your telephone number, email address, mailing address, or other information you provide at the point of sale or through our services.
Loyalty and Rewards Information
This may include your loyalty account number, telephone-based identifier, rewards points, offers received or redeemed, enrollment information, and program activity.
Limited Payment Information
We do not store complete payment card numbers. Payment transactions are handled through PCI-compliant payment processors and other payment service providers.
Benefit Program Information
Where you pay using a healthcare, over-the-counter, or other benefit card, we transmit the transaction to the benefit program administrator for approval and receive the approval or decline result. Eligibility rules for those programs are set and applied by the card issuer and its processor, not by us.
Device and Technical Information
When you use our consumer-facing websites or applications, we may collect information such as your browser type, device type, device identifiers, IP address, operating system, application activity, and usage information.
Support Communications
If you contact us through in-app chat, email, or phone, we collect the content of that communication and retain it so we can answer you and improve our support.
We collect personal information directly from you; from participating merchants’ point-of-sale systems when you shop or use a rewards program; from our service providers, including messaging, payment, analytics, and support providers; from benefits and program administrators where you use a benefit card; and automatically from your device when you use our websites or applications.
Our consumer application is built with the Expo framework and uses the following third-party services. This list describes the application as it is built today, and we update this Section when it changes.
Advertising technologies and the application. We do not operate advertising or advertising-measurement technologies inside the SuperSonic Rewards application, and we do not share your activity in the application with advertising platforms. We do use advertising technologies on our marketing website, and those are described in our Cookie & Tracking Notice.
Automated support. Our support experience uses automated and AI-assisted features to suggest answers and route requests. Those features work from your question, your account record, and our help content. You can ask to speak to a person at any time.
Our own systems. Information collected through the application is also stored in our own databases and analytics environment, which are operated for us by hosting and data-warehouse providers under contract. Those providers act as service providers and may not use the information for their own purposes.
We may use personal information to:
We send marketing text messages only where we have obtained the consent required by applicable law.
Message frequency varies. Message and data rates may apply.
You may reply STOP at any time to opt out of a text-message program or reply HELP for assistance.
Opting out of one program, such as promotional messages from a particular merchant, may not opt you out of other programs you have separately joined. You should reply STOP to each program from which you no longer wish to receive messages. If replying STOP does not work, or you want to stop every program at once, contact us using any method in Section 7.
You may opt out of marketing emails by using the unsubscribe link included in the email.
For additional information, review our SMS & Messaging Terms at supersonicpos.com/legal/policies/messaging-terms.
We may share personal information with:
Merchants Where You Shop
We may provide merchants with information relating to your transactions, receipts, loyalty activity, rewards, and interactions with that merchant.
Service Providers
We may share information with companies that help us operate our services, including messaging providers, payment processors, hosting and data-warehouse providers, analytics providers, customer-support providers, security and error-reporting providers, and benefits-program providers. The services used in our consumer application are named in Section 3.2.
Advertising Platforms
We may share limited information with advertising platforms to measure our own marketing on our websites. We do not share your activity in the SuperSonic Rewards application with advertising platforms. Our Cookie & Tracking Notice describes the advertising technologies we use and the choices available to you.
Benefit Program Administrators
Where you use a benefit card, we transmit the transaction to the program administrator and its processor for approval.
Corporate Transaction Participants
We may disclose information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction.
Legal and Safety Recipients
We may disclose information where required by law, legal process, court order, or governmental request, or where reasonably necessary to protect rights, safety, security, and property.
SMS Consent Information
Text-message opt-in information, consent records, and mobile telephone numbers collected for SMS purposes will not be shared with or sold to third parties or affiliates for their own marketing or promotional purposes.
We do not sell your personal information for money. On our marketing websites — not inside the SuperSonic Rewards application — we use advertising and analytics technologies that may involve the sharing of personal information for cross-context behavioral advertising, and you may opt out of that at any time as described in Section 7.
Separately, we may create, use, disclose, sell, or license product, category, pricing, inventory, promotional, and transaction information generated at participating stores, including in aggregated or de-identified form such as market-level purchasing trends. That reporting may identify the store, its location, and its sales and promotional performance, and may be provided to brands, suppliers, and other data customers. Brands, manufacturers, distributors, and other companies may also fund or sponsor offers available at participating stores or in SuperSonic Rewards, and where they do, we may share participating-store lists and store-level sales, redemption, and performance information with the sponsor to enroll stores, create and administer the offer, determine eligibility, calculate payments and rebates, verify performance, prevent fraud, audit the program, and measure results. This reporting identifies stores and offers, not you. It is not designed to identify you, and it does not include your contact details, your loyalty identifier, or your payment card information. Where we use information in de-identified form we maintain measures designed to prevent it being re-associated with any individual, we do not attempt to re-identify it except to test our de-identification processes, and we contractually require recipients not to attempt re-identification.
Depending on where you live, you may have the right to:
We will not discriminate against you for exercising an applicable privacy right.
Submit a request through our Privacy Requests page at supersonicpos.com/legal/privacy-requests, or contact us:
Email: privacy@supersonicpos.com Phone: 800-791-8324 Mail: Privacy Requests, MSYM Investments, LLC d/b/a SuperSonic POS, 5850 W Cypress St, Suite A, Tampa, FL 33607
This includes requests relating to purchases made at a participating merchant. We will process the request and coordinate with the applicable merchant where necessary so that you have a single point of contact.
We will confirm receipt within ten (10) business days. We act on a request to opt out of the sale or sharing of personal information, or of targeted advertising, within fifteen (15) business days. We respond to all other requests within forty-five (45) calendar days, and where reasonably necessary we may extend that period once by a further forty-five (45) calendar days and will notify you before the first period ends.
We may need to verify your identity before completing a request. The information required for verification may depend on the nature of your request and the personal information involved. You do not need to verify your identity to opt out of the sale or sharing of personal information.
You may also use an authorized agent to submit a request on your behalf. We may require evidence that the agent is authorized to act for you and may ask you to verify your identity directly.
If we deny your request, you may appeal. Email privacy-appeals@supersonicpos.com with “Appeal” in the subject line, describing the decision you are appealing. We will respond in writing within forty-five (45) calendar days with our decision and the reasons for it. If we deny your appeal, we will tell you how to submit a complaint to the Attorney General in your state.
Some browsers and extensions send an automated opt-out preference signal, such as Global Privacy Control. Our websites and applications do not currently detect or respond to those signals. To opt out, use the methods in Section 7.1.
Our Cookie & Tracking Notice at supersonicpos.com/legal/policies/cookies describes the technologies we use on our websites, the browser and device controls available to you, and the industry opt-out programs you can use.
We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, comply with legal and contractual obligations, resolve disputes, protect our rights, and maintain appropriate business and transaction records.
For example, we may retain loyalty information for the duration of your enrollment and for a reasonable period afterward.
When information is no longer reasonably necessary, we may delete or de-identify it in accordance with our retention practices and applicable law.
We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no transmission or storage system can be guaranteed to be completely secure, and we cannot guarantee absolute security.
When you close your SuperSonic Rewards account, we remove your account access and direct contact identifiers, terminate your membership, forfeit unredeemed points and rewards, and dissociate retained rewards and transaction activity from your former account. Retained transaction records are assigned to a non-identifying internal record and are no longer maintained as part of an identifiable Rewards membership. You can close your membership from within the application or by using any method in Section 7.1. Unredeemed points are forfeited — see the SuperSonic Rewards Terms.
Points and rewards issued under a participating merchant’s store program are administered by that merchant under its own program rules, and that merchant may retain its own records.
We keep records we are required to keep, including transaction and settlement records required by card network rules and benefit program rules, records needed to detect and prevent fraud, and records required by tax, accounting, and other legal obligations. Retained records are limited to those purposes. Backups are overwritten on our normal cycle, so a copy may persist briefly in backup systems before it is removed.
Our services are not directed to children under thirteen (13), and we do not knowingly collect personal information from children under thirteen.
If you believe that a child under thirteen has provided us with personal information, please contact us at privacy@supersonicpos.com so that we can review and, where appropriate, delete the information.
We may update this Policy periodically to reflect changes to our services, practices, technologies, or legal obligations.
When we update this Policy, we will post the revised version at supersonicpos.com/legal/policies/privacy/consumer.
We will also update the version and the “Last Updated” date shown at the top of the Policy. Where required by law, we will provide additional notice of material changes. Superseded versions are available on request.
For questions about this Policy, our privacy practices, or a privacy-rights request, contact us at:
Email: privacy@supersonicpos.com Phone: 800-791-8324 Appeals: privacy-appeals@supersonicpos.com
Mail: MSYM Investments, LLC d/b/a SuperSonic POS, 5850 W Cypress St, Suite A, Tampa, FL 33607
Related documents: SuperSonic Rewards Terms · SMS & Messaging Terms · Cookie & Tracking Notice · Privacy Requests · Website, Business Contact & Product User Privacy Notice
Change: Updated to clarify scope, applicable services, data practices, user choices, and related terms.
Effective: 21 Jul 2026
Change: First publication of this document. Supersedes the Privacy Policy previously published on our former website.