Privacy Policy

1. Overview & Data Controller

Dollarback ("Company," "we," "us," or "our") is committed to protecting your personal information and respecting your privacy. This Privacy Policy details how we collect, use, disclose, and safeguard your personal data when you visit or interact with our website, browser extensions, mobile applications, and services (collectively, the "Services").

2. Information We Collect

We collect information necessary to provide seamless cashback tracking, processing, and payouts. This includes:

• Account Information: Full legal name, email address, profile identifier, and optional user preferences provided during registration or profile management.
• Financial & Payment Data: Information required to issue cashback earnings and payouts, specifically your designated Venmo handle, PayPal details, or related electronic payment identifier.
• Transaction & Shopping Data: Details related to merchant clicks, shopping sessions, total order values, qualifying transaction IDs, purchase dates, order status (pending, approved, cancelled), and earned cashback balances.
• Technical & Device Information: IP address, browser type, operating system, device hardware identifiers, standard web log records, referring/exit pages, and timestamps.
• User Submissions: Merchant requests, feedback, support inquiries, and customer service communications.

3. How We Collect Data (Cookies & Tracking Technologies)

To accurately record qualifying affiliate shopping sessions and attribute commissions from participating merchant networks (including Impact Tech, Inc. / impact.com, CJ Affiliate, Rakuten, and others), Dollarback and its participating affiliate networks utilize first-party and third-party cookies, web beacons, tracking pixels, local storage, and unique session sub-ID parameters.

When you click a merchant link on Dollarback, a unique non-PII session identifier (click_id) is attached to your outbound referral URL (`subId1` / `sid`). This tracking parameter and associated affiliate network cookies notify the merchant and affiliate network that the visit originated from Dollarback so qualifying orders can be credited to your account ledger. You can review and acknowledge our cookie practices via our on-site Cookie & Tracking Consent notice. Disabling cookies or utilizing aggressive ad-blocking tools during checkout may prevent commission tracking and negate cashback eligibility.

3A. Affiliate Network Tracking & Third-Party Service Providers (Commission Junction LLC / CJ Affiliate & Impact Tech, Inc. / impact.com)

In accordance with affiliate network data protection requirements—specifically the CJ Affiliate Publisher Service Agreement (Section 2(d)–(e) and Section 6) and the Impact.com Partner User Agreement (Sections 5.2(v) and 6.4)—Dollarback discloses the following details regarding third-party affiliate attribution, Device Tracking Technologies, and conversion processing:

• Independent Data Controllers & Network Service Providers: When you browse Dollarback or initiate a shopping session by clicking an outbound retailer link, your browser interacts with Device Tracking Technologies (cookies, pixels, APIs, scripts, and session sub-IDs) operated by our participating affiliate networks, including Commission Junction LLC ("CJ Affiliate", a Conversant / Epsilon company), Impact Tech, Inc. ("impact.com"), and Rakuten Advertising. Under CJ Publisher Service Agreement Section 6(d), Dollarback and Commission Junction LLC each act as independent Data Controllers in respect of Visitor Data and Metrics Data processed under Applicable Data Protection Law.
• Categories of Data Processed (Zero Directly Identifiable Information in Tracking Codes): In strict compliance with CJ Section 2(d) and Section 6(c), Dollarback never enables affiliate tracking codes (`sid`, `subId1`, `u1`, `clickref`) to collect Directly Identifiable Information (such as your name, email address, Venmo handle, or raw Firebase Auth UID) or Special Categories of Personal Data. Outbound affiliate links only append an opaque alphanumeric session token (`click_id` matching `^[a-zA-Z0-9_-]{8,64}$`). Affiliate networks process browser and device information (user-agent string, browser type/version, cookie IDs, click/impression timestamps, IP address, referring URL, and current URL) and transactional metadata (order ID, qualifying purchase amount, currency, and action status).
• The 4 Permitted Purposes (CJ Section 6(c) & Impact Section 6.4): Commission Junction LLC and Impact Tech, Inc. process Visitor Data and Metrics Data strictly for the following four Permitted Purposes:
  1. Cross-Device Attribution & Commission Accuracy: To identify leads, determine which devices are likely to belong to a Data Subject, distinguish their device from other devices, and attribute qualifying purchases to credit commissions accurately;
  2. Performance Measurement & Analytics: For performance measurement, reporting, and analytics related to affiliate network services;
  3. System & Product Improvement: To improve existing affiliate tracking systems and software and to develop new products; and
  4. Fraud Prevention & Security: To monitor for and prevent fraudulent activity and non-bona fide transactions, and to ensure systems and processes work properly and securely.
• Official Network Privacy Notices & Data Protection Addenda: You may review the privacy practices, US Statutory Required Provisions (US DPA), and international Standard Contractual Clauses of our primary affiliate networks directly at:
  • CJ Affiliate Privacy Policy: https://www.cj.com/legal/privacy-policy-services
  • CJ US Privacy Terms (US DPA): https://www.cj.com/legal/us-dpa & CJ Data Transfer Addendum (EU/UK SCCs)
  • Impact Tech, Inc. Data Protection Agreement: https://impact.com/legal/Data_Protection_Agreement.pdf

4. How We Use Your Information

We use your personal data strictly for legitimate operational and business purposes, including:

• Creating, maintaining, and securing your Dollarback account.
• Tracking referral clicks, verifying qualifying orders with participating affiliate networks, and calculating cashback rewards.
• Processing digital payout disbursements (via Venmo or electronic transfer).
• Detecting, preventing, and mitigating fraudulent transactions, bot activity, abuse, or security incidents.
• Communicating account updates, payout confirmations, customer support responses, and service announcements.
• Complying with applicable accounting, tax, legal, and regulatory obligations.

5. Information Sharing and Disclosure

Dollarback does not sell, rent, or trade your personal information to third parties for marketing purposes. We share data only under the following strictly defined conditions:

• Affiliate Networks & Merchants: We share necessary non-sensitive shopping session parameters and anonymized transaction IDs with merchant affiliate networks to verify qualifying purchases.
• Service Providers & Processors: We engage trusted third-party service providers (such as Google Cloud / Firebase for hosting and authentication, and electronic payment services like Venmo/PayPal for disbursements) to perform infrastructure and operational tasks on our behalf.
• Legal & Regulatory Compliance: We disclose personal data if required to do so by law, court order, subpoena, or government order, or when necessary to enforce our legal rights and prevent physical or financial harm.
• Business Transfers: In the event of a merger, acquisition, reorganization, asset sale, or bankruptcy, user data may be transferred as an asset of the business.

6. Data Security & Storage

We implement industry-standard physical, administrative, and technical security measures (including TLS encryption in transit and secure database storage via Firebase) to prevent unauthorized access, alteration, disclosure, or destruction of your personal data. However, no electronic transmission over the internet or database storage method is 100% secure.

7. Data Retention & Privacy Rights

We retain your personal information for as long as your account remains active or as needed to provide you Services, resolve disputes, maintain tax records, and comply with legal commitments.

Depending on your jurisdiction (such as statutory rights under CCPA/CPRA, GDPR, or applicable US state privacy laws), you may have the following rights:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete personal data.
• Right to Deletion: Request the deletion of your account and personal records (subject to mandatory legal retention requirements).
• Opt-Out: Unsubscribe from non-essential promotional communications at any time via the link provided in our emails.

To exercise any of these rights, please contact our privacy compliance team at david@dollarback.com.

8. Children's Privacy & Age Eligibility (18+ Requirement)

Dollarback Services are intended strictly for adults who are at least 18 years of age (or the legal age of majority in their jurisdiction), in compliance with CJ Publisher Service Agreement Section 8(b) and Impact.com Partner User Agreement Section 9.10(n) & Section 10. Furthermore, in accordance with CJ Section 6(c), Dollarback never knowingly collects, discloses, or makes available to CJ Affiliate or any affiliate network any Special Categories of Personal Data or any Personal Data relating to Data Subjects under the age of 16 (or under 18).

9. Updates to This Policy

We reserve the right to modify this Privacy Policy at any time. Changes will take effect immediately upon posting to this page with an updated "Effective Date." Continued use of our Services constitutes acceptance of the revised policy.

10. Contact Us

If you have any questions or concerns regarding this Privacy Policy, please email us at david@dollarback.com.