Privacy Policy
1. Introduction
Welcome to Payback (referred to as “we,” “us,” or “our”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or use our services. It also describes your privacy rights and how the law protects you.
If you do not agree with the data practices described in this policy, you should not use our website or services.
2. Information we collect
Account information includes your account identifier and contact details. When you separately connect Gmail, Payback uses authorized access to identify receipts and refund information for the receipt-monitoring service. Receipt-related information can include merchant, product, order date, amount and receipt text. Broad read permission may allow processing messages to identify receipts; it does not mean unrelated email content becomes a research product.
For a lawyer inquiry, we collect the fields you enter, the named firms you select, your requested email response, consent version and delivery time. For advertisers and research buyers, we record profiles, applicable terms, rate-card acceptances, payment references, purchases and service audit records. Payment card details are collected through Stripe.
3. How We Collect Information
- Gmail Integration: Once you consent through the Gmail API, our system retrieves information from your emails that contain online order details.
- For the initial setup, we may collect purchase information covering up to the past 30 days.
- After this initial collection, our system performs daily scans (every 24 hours) to detect new receipts or refunds.
- Direct Interactions: You may also provide personal data when you contact us or interact with our website (e.g., filling out forms, sending inquiries).
4. How we use information
We use account and receipt data to provide and maintain the services you requested, track relevant orders and refund activity, support your account and protect its security. We use separately submitted inquiry fields to deliver your request to the firms you chose. We use billing and consent records to operate your purchases, resolve errors and document permissions.
Ordinary directory order is randomized and saved for the case, independently of payment or merchant score. Sponsored placement is disclosed. This model does not authorize using Gmail-derived data for targeted advertising or selling it as merchant research. Payback’s use and transfer of information received from Google APIs must adhere to the Google Workspace API user data policy, including its Limited Use requirements.
5. Sharing and merchant research
We use Google Analytics 4, the Meta Pixel with Meta’s Conversions API, the X Pixel with X’s Conversions API, and Microsoft Clarity, to measure how people use our websites and whether our advertising works. These tools set cookies and receive your IP address, browser details, the pages you visit and the actions you take on our sites, such as creating an account, connecting Gmail or adding a card. Clarity also records how you move through, scroll and click on our pages so we can see where the site is confusing; text you type is masked before it is recorded. When you are signed in, Meta and X also receive hashed versions of your contact details (Meta: email address, name, phone number and an account identifier; X: email address and phone number), used for matching, never the values themselves. We never share information from your receipts or your inbox with Google, Meta or X. We honor the Global Privacy Control browser signal; with it on, none of this measurement runs. You can also ask us to stop by writing to help@getpayback.com.
We use service providers as needed to operate the requested services, including authentication, hosting, payment processing and account support, subject to their permitted functions and applicable restrictions. We do not authorize sharing Gmail-derived purchase data with marketing partners or selling it to general research buyers through this model.
A selected firm receives only the inquiry fields you affirmatively submit to it after seeing its identity. Opening a directory, signing up or purchasing research is not permission to send personal information to a lawyer. You may request withdrawal of further contact through your dashboard. A firm that already received information may have independent professional or legal recordkeeping obligations.
The standalone research catalog is limited to rights-reviewed public merchant observations. It is separate from personal customer records, Gmail receipts and private communications. An independent dataset purchase does not provide access to customers. We may disclose information where legally required or necessary to protect rights, subject to applicable law and source restrictions.
6. Data Security
We employ a variety of security measures to protect your personal data from unauthorized access, disclosure, or alteration, including but not limited to:
- Encryption of sensitive data
- Firewall Protection
- Access Controls (limiting who can view your data)
While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure, and therefore we cannot guarantee absolute security.
7. Your Privacy Rights
Depending on your jurisdiction, you may have certain rights regarding your personal data. These may include the right to:
- Access your personal data
- Request Correction or deletion of your personal data
- Object to or Request Restriction of processing
- Withdraw Consent at any time (where we rely on your consent to process data)
To exercise any of these rights, please contact us using the information in the “Contact Information” section below. We will respond to your request within a reasonable timeframe and in accordance with applicable laws.
8. Data Retention
We retain your personal data only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, and to comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention period may vary based on the nature of the data and the purpose for which it is collected.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and if the changes are significant, we will notify you by email or through our website. Please review this policy periodically to stay informed about how we are protecting your information.
10. Contact Information
If you have any questions or concerns about this Privacy Policy, or if you wish to exercise your privacy rights, please contact us at:
Email: help@getpayback.comAddress:Consumer Payback Solutions, LLC3000 Custer RoadSuite 270 #7004Plano, TX 75075