Experify has shut down. Your advocacy program has a new home. →

Privacy Policy

Last Updated: June 21, 2026

Rakefire LLC DBA Stoked (“us”, “we”, or “our”) operates the “Stoked” product, including associated websites and web applications (collectively, the “Service”). This Privacy Policy outlines our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices available to you regarding that data.

By using the Service, you consent to the collection and use of information as described in this Privacy Policy. Unless otherwise defined, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

Information Collection and Use

We collect several types of information for various purposes to provide and improve our Service.

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide personally identifiable information, including but not limited to:

  • Email address

  • First and last name

  • Phone number

  • Address, State, ZIP/Postal code, City

  • Cookies and Usage Data

Usage Data

We may collect information about how the Service is accessed and used (“Usage Data”), such as:

  • IP address

  • Browser type and version

  • Pages visited, time and date of visit, time spent on pages

  • Unique device identifiers and diagnostic data

Tracking & Cookies Data

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can set your browser to refuse cookies, but some portions of our Service may not function properly.

Examples of Cookies:

  • Session Cookies: Used to operate our Service.
  • Preference Cookies: Remember user preferences and settings.
  • Security Cookies: Used for security purposes.

Use of Data

Rakefire LLC DBA Stoked uses collected data for various purposes, including:

  • Providing and maintaining the Service
  • Notifying users about changes to our Service
  • Allowing participation in interactive Service features
  • Providing customer care and support
  • Conducting analysis to improve the Service
  • Monitoring Service usage and detecting security threats

Transfer of Data

Your data, including Personal Data, may be transferred to and stored on computers outside your jurisdiction where data protection laws may differ from those in your area. By providing your information, you consent to this transfer.

Rakefire LLC DBA Stoked takes reasonable steps to ensure data security in accordance with this Privacy Policy and does not transfer data unless proper safeguards are in place.

Disclosure of Data

Rakefire LLC DBA Stoked may disclose your Personal Data:

  • To comply with legal obligations
  • To protect and defend the rights or property of Rakefire LLC DBA Stoked
  • To prevent or investigate wrongdoing in connection with the Service
  • To protect users or the public from harm or legal liability

Security of Data

While we take commercially acceptable security measures, no method of transmission over the Internet or electronic storage is 100% secure. We strive to protect your Personal Data but cannot guarantee absolute security.

Service Providers

We may employ third-party companies to facilitate our Service, perform Service-related tasks, or assist in analyzing Service usage. These third parties are bound by confidentiality agreements and may only use your data for these purposes.

Analytics

We may use third-party analytics services, such as Google Analytics, to monitor and analyze Service usage. You can opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on.

Third-Party Data Sharing

We do not sell your Personal Data. However, we may use certain non-identifiable data to solicit other brands to become customers of ours. We will never share names, email addresses, or other personally identifiable information with external providers without express consent.

Breach Notification

In the event of a data breach that compromises your Personal Data, we will take reasonable steps to investigate and mitigate the breach. If required by law, we will notify affected users via email or a prominent notice on our Service within a reasonable time frame after discovering the breach.

Our Service may contain links to external sites that we do not operate. We advise you to review their privacy policies, as we assume no responsibility for their content or practices.

Children’s Privacy

Our Service is not directed at individuals under the age of 18. We do not knowingly collect Personal Data from children. If we discover that a child has provided Personal Data, we will take steps to remove it.

Shopify Integration

When a merchant connects their Shopify store, Rakefire LLC DBA Stoked accesses the following through Shopify’s APIs, with the merchant’s authorization and solely to operate their brand-advocate program:

  • Orders — to attribute sales to the advocate or conversation that drove them and to calculate advocate rewards. We store the order’s email and phone number, the discount code used, the order amount and currency, and the order identifier.
  • Discounts — to create and manage the unique discount codes advocates share.
  • Store credit — to issue and display advocate rewards as Shopify store credit.

Our role. For this Shopify customer data, the merchant is the data controller and Rakefire LLC DBA Stoked acts as a data processor on the merchant’s behalf. For advocate and merchant-account data, we are the controller, as described elsewhere in this policy. If you are a shopper and wish to exercise your privacy rights, please contact the merchant whose store you purchased from; we will assist that merchant in fulfilling your request.

How the data is used and who sees it. A customer’s order email and phone number are used only to match a purchase to an advocate or conversation and to compute rewards. The resulting attribution — including the matched order — is visible to the merchant within their Stoked admin, where they can see which advocate drove a sale. It is not shown to advocates: advocates never see a customer’s identity or contact information. We do not use this data for advertising, and we do not sell it.

Retention and deletion. We retain Shopify order data only as long as needed to operate the merchant’s advocate program. We honor Shopify’s mandatory privacy webhooks, verified with HMAC-SHA256 over the raw request body:

  • customers/data_request — we surface the data we hold about the customer to the merchant.
  • customers/redact — we delete the customer’s personal data (order email and phone) within 30 days.
  • shop/redact — when a merchant uninstalls, we delete the store’s personal data within 30 days.

Non-personal reward history (amounts, dates, discount codes) may be retained in de-identified form. For Shopify-related privacy requests you can also reach us at privacy@stokedhq.com.

Sub-processors. Shopify data is handled by the service providers below, who are bound by confidentiality and process it only to provide their service to us:

  • Heroku — production compute and managed PostgreSQL, where order attributions are stored.
  • Hetzner — our staging environment, which is periodically refreshed from production data and may therefore contain copies.

Our other providers — Twilio for SMS, Postmark for email, Amazon S3 for file uploads, and OpenAI for content moderation — do not receive Shopify customer order data.

Changes to This Privacy Policy

We may update our Privacy Policy periodically. Changes become effective when posted on this page. We will notify users of significant changes via email or a prominent Service notice.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

Rakefire LLC DBA Stoked

29 East Carpenter
Athens, OH 45701
Phone: (740) 561-1361
Email: stoked-help@stokedhq.com