Security

A redemption is a claim about money.

So it is treated like one. Every code is single-use, every redemption is confirmed by your own staff at the counter, and anything that looks unlike the rest goes to a person before it is ever billed.

Four commitments

What we hold ourselves to

Verification

The counter is the source of truth

A code is only worth something once your staff confirms the amount on the spot. Nothing bills off a screenshot, a link, or a claim made after the fact.

Payment

We never touch your card data

Customers pay you exactly as they do today, on your own terminal. Hibi bills the commission separately and never sits in the customer’s payment path.

Data

Nothing is sold

What leaves the system is anonymous and aggregated. You see your customers; the creator sees the customers they sent; nobody buys either list.

Money out

One weekly settlement

Commissions settle on a weekly cycle with a line for every redemption. Disputes pause a line rather than a whole invoice.

The check

What has to be true before a line is billable

The code is live and unused

One code per creator per campaign, one use per customer. Spent, expired and paused codes stop at the counter.

Your staff confirms the amount

The redemption records the bill your staff enters — both sides confirm the same number before anything is written.

The pattern holds up

Timing, amount, device and location are scored against the store’s own history. Outliers are held for manual review instead of being billed.

A held line does not delay the rest of your invoice. It either clears into the following week or is dropped.

The record

What we keep, and for whom

Per redemption

Store, creator code, time, bill amount, commission, first visit or return

The merchant sees

Their own redemptions, in full

The creator sees

The customers they sent, and what they earned

The consumer

Identified only as far as preventing a second use of the same reward

Sold to third parties

Never

On request

Export or deletion by email — see Privacy

This site itself sets no tracking cookies and runs no third-party advertising scripts.

Honest about the stage

What we have not done yet.

Hibi is pre-launch. We would rather say what is missing than imply a maturity we have not earned:

  • No SOC 2 or ISO audit yet — planned once the first cohort is live
  • No published uptime history, because there is no production traffic to report on
  • Pilot terms are contracts we can still change with the first cohort
Get early access

Get early access

The first cohort opens in New York. Tell us who you are and we will reach out when your neighborhood goes live.

This opens a prefilled email to hibi.nyc@gmail.com. Nothing is stored on this site.

Get early access