Privacy Policy

Data we process

• Account data: email address, display name, authentication credentials (stored with Firebase Auth).
• Profile data: state, gender, preferences, referral codes (yours and codes used to refer you), subscription level.
• Device identifiers: device IDs, advertising IDs, app instance IDs for analytics and fraud prevention.
• Usage data: page views, clicks, timestamps, IP-derived region, device/browser info, network logs, session duration.
• Analytics and session replay: we use PostHog for analytics and session recording. Session replay captures screen interactions with input masking (passwords, emails, and sensitive fields are masked). By using the app, you consent to session replay. You can opt out by disabling analytics in your device settings or blocking cookies.
• Chat messages: support messages you send (including metadata like timestamps) are stored in Firebase and routed to Discord for support processing and replies.
• Claim decisions: your swipe decisions (like/pass), submission status, eligibility answers, and claim tracking data are stored to generate estimates and track your claims.
• Deep link storage: referral and settlement deep links may be temporarily stored in browser localStorage for app processing.
• Notifications: push notification tokens, device tokens, and notification preferences (if you opt in).
• Billing and subscription metadata: subscription history, payment records, billing metadata (from RevenueCat, Apple, Google; we do not receive full payment card details), subscription mirror data stored in Firestore for troubleshooting.

Legal basis and consent

We process your data based on: (a) your consent (for analytics, session replay, marketing communications); (b) contract performance (providing the service, processing subscriptions); (c) legitimate interests (fraud prevention, service improvement, security); and (d) legal compliance (tax records, dispute resolution). You may withdraw consent at any time, though this may limit service functionality.

How we use data

• Provide app features, measure performance, prevent abuse and fraud.
• Send settlement alerts and notifications (only if you opt in).
• Process support requests and route messages to support channels (Discord).
• Calculate payout estimates and track your claims.
• Process subscriptions and referral rewards.
• Improve the service through aggregated, anonymized analytics.
• Comply with legal obligations and enforce our terms.

Data storage and cross-border processing

Data is stored in Firebase/Firestore (Google Cloud, primarily US-based). Chat messages and metadata are routed to Discord (US-based) for support processing. Analytics data is processed by PostHog (US-based). Subscription and payment data is processed by RevenueCat, Apple, and Google (various jurisdictions). By using the service, you consent to cross-border data transfers to these processors. We use reasonable security measures, but no method is perfect—we cannot guarantee absolute security.

Data retention

We retain data for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Account data is retained while your account is active and for a reasonable period after deletion (for fraud prevention and legal compliance). Chat messages are retained for support purposes. Analytics data may be retained in aggregated form indefinitely. Billing records are retained as required by law (typically 7 years for tax purposes). You may request deletion, though some data may be retained for legal/compliance reasons.

Sharing and data processors

• We do not sell personal data. We do not share personal data with third parties for their marketing purposes.
• Data processors: PostHog (analytics/session replay, US), Firebase/Google Cloud (infrastructure/hosting, US), RevenueCat (subscription processing, US), Apple/Google (app stores, payment processing, various), Discord (support message routing and processing, US), email vendors (if you opt in for alerts).
• Financial processors: RevenueCat, Apple, and Google process subscription payments. We receive transaction metadata but not full payment card details.
• Their terms and policies apply to their services. We require processors to maintain appropriate security measures.
• We may share aggregated, anonymized data for analytics (with your data sharing opt-in preference respected).
• We may disclose data if required by law, to protect rights, or in connection with a business transfer.

Support messages and Discord routing

Support messages sent through the app (including message content, timestamps, and user metadata) are stored in Firebase and routed to Discord for processing and replies. Discord is a third-party service with its own privacy policy. Messages are not confidential or privileged. Do not send sensitive personal information, financial details, Social Security numbers, or legal documents through support channels. We use Discord for support efficiency, but you acknowledge that Discord's terms and privacy practices apply to messages routed through their service.

Your rights and choices

Access: Request a copy of your personal data by emailing privacy@payoutfinder.com.

Deletion: Request deletion of your data (some data may be retained for legal/compliance purposes, such as billing records).

Export: Request export of your data in a portable format.

Correction: Update your profile data through the app or request corrections.

Opt-out of sale/sharing (CCPA/CPRA): We do not sell personal data. For California residents, you may opt out of "sharing" for cross-context behavioral advertising by disabling analytics or emailing privacy@payoutfinder.com.

Analytics and session replay opt-out: Disable analytics in device settings, block cookies in your browser, or email privacy@payoutfinder.com. Session replay uses input masking (passwords, emails, and sensitive fields are automatically masked).

Data sharing opt-out: Control data sharing preferences in your profile settings.

Marketing opt-out: Unsubscribe from email alerts or disable push notifications in device settings.

Cookie consent: We use cookies and similar technologies. By using the service, you consent to their use. You can block cookies in your browser settings, though this may limit functionality.

Security and data minimization

We use reasonable technical and organizational security measures, including encryption in transit and at rest, access controls, and regular security assessments. We follow data minimization principles—we only collect data necessary for service provision. However, no method of transmission or storage is 100% secure. You are responsible for keeping your device secure and reporting unauthorized access.

Breach notification: In the event of a data breach that poses a risk to your rights, we will notify affected users and relevant authorities as required by law, typically within 72 hours of discovery.

Age requirement

Not intended for users under 18 years of age (or the age of consent in your jurisdiction). We do not knowingly collect data from minors.

Geography

This service is intended for users located in the United States to discover U.S. class action settlements. If you are outside the United States, do not use the service. We do not target or localize the service for other countries.

Changes to privacy policy

We may modify this privacy policy at any time. Material changes will be posted on this page with an updated "Last updated" date. For significant changes, we may also notify you via email or in-app notification. Your continued use of the service after changes constitutes acceptance. If you do not agree to changes, you must stop using the service and may request account deletion.

Contact for privacy rights

For privacy-related requests (access, deletion, export, opt-out), questions, or concerns, contact: privacy@payoutfinder.com

For legal inquiries, contact: legal@payoutfinder.com