1. Introduction

CashyLoot LLC ("CashyLoot", "we", "us", "our") operates cashyloot.com (the "Website"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website and use our services (collectively, the "Services"). By using the Website, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Website.

This Privacy Policy does not apply to third-party websites, services, or applications that may be linked from our Website. We encourage you to review the privacy policies of any third-party sites you visit.

2. Children Under 18

CashyLoot is not intended for anyone under the age of 18. We do not knowingly collect personal information from children under 18. In compliance with the Children's Online Privacy Protection Act (COPPA), if we discover that we have collected information from a child under 18, we will delete that information promptly. If you believe a child under 18 has provided us with personal information, please contact us immediately at privacy@cashyloot.com.

3. Information We Collect

(a) Information You Provide

We collect information that you voluntarily provide when you register for an account, use our Services, or communicate with us. This includes:

• Name
• Email address
• Date of birth
• Password (stored in hashed form; we never store plaintext passwords)
• PayPal email address for withdrawal processing
• Government-issued identification documents (for identity verification)
• W-9/tax information, including Social Security Number (SSN) or Taxpayer Identification Number (TIN), when required by law
• Referral program data (referral links generated, referred users)
• Support communications (messages, attachments, and metadata from customer support interactions)

(b) Automatic Data Collection

When you access or use the Website, we automatically collect certain information, including:

• IP address
• Browser type and version
• Operating system
• Device type
• Unique device identifiers
• Pages visited and time spent on each page
• Referring and exit pages
• Clickstream data
• Cookies and similar technologies (see Section 5: Cookies and Tracking Technologies)

(c) Third-Party Data

We receive information from third-party services integrated with our platform, including:

• Offer completion and conversion data from our offerwall providers (AdGem, Lootably, BitLabs)
• Payment processing data from Tremendous and PayPal

(d) Mystery Vault Data

When you use our Mystery Vault feature, we collect:

• Vault tier selected
• Points spent
• Prize awarded
• Timestamp of each vault opening

(e) Referral Program Data

When you participate in our Referral Program, we collect:

• Referral link clicks
• Referred user signup status
• Commission calculations
• Referral tier progression

4. How We Use Your Information

We use the information we collect for the following purposes:

• Provide, operate, and maintain our rewards platform
• Process your points earnings and withdrawal requests
• Verify your identity and prevent fraud
• Administer the referral program and calculate commissions
• Track and attribute offer completions from offerwall providers
• Send transactional emails (account verification, payout confirmations, security alerts)
• Comply with legal obligations (tax reporting, law enforcement requests)
• Analyze vault opening patterns for platform analytics and fraud detection
• Improve website functionality and user experience
• Display relevant offers and content
• Enforce our Terms of Service
• Respond to customer support inquiries

We may use your information to contact you about our Services. You can opt out of non-transactional communications at any time by following the unsubscribe instructions included in those communications or by contacting us directly.

5. Cookies and Tracking Technologies

Cookies are small text files that are stored on your device when you visit a website. They are widely used to make websites work more efficiently and to provide information to site operators. We use cookies and similar tracking technologies to operate and improve our Website.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the Website to function properly. They include authentication session tokens (better-auth.session_token), CSRF protection tokens, and your cookie consent preference (cookie-consent). These cookies cannot be disabled.
• Functionality Cookies: These cookies allow us to remember your preferences, such as locale settings and UI preferences, to provide a more personalized experience.
• Analytics Cookies: We may add analytics cookies in the future to understand usage patterns and improve the Website. If implemented, these cookies will be subject to your consent preferences.

Other Tracking Technologies

In addition to cookies, we may use web beacons (clear GIFs/pixel tags), local storage, and similar technologies to collect and store information about your interactions with the Website.

Offerwall provider iframes embedded on our Website may set their own cookies, which are subject to their respective privacy policies. CashyLoot does not control these third-party cookies.

For more details about the specific cookies we use, please see our Cookie Policy.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies may affect the functionality of the Website.

6. Third-Party Services

Our platform integrates with the following third-party services. Each provider receives only the information necessary to perform its function:

Offerwall Providers

• AdGem: Receives offer completion data, click/conversion tracking for reward attribution, and device/browser information for fraud prevention.
• Lootably: Receives offer completion data, click/conversion tracking for reward attribution, and device/browser information for fraud prevention.
• BitLabs: Receives offer completion data, click/conversion tracking for reward attribution, and device/browser information for fraud prevention.

Payment Processors

• Tremendous: Processes gift card payouts. Receives your name, email address, reward amount, and gift card selection.
• PayPal: Processes cash payouts. Receives your PayPal email address and payout amount.

We share limited technical information (IP address, device fingerprint, click timestamps) with offerwall providers solely for the purposes of offer attribution and fraud prevention.

Each third-party provider has their own privacy policy governing their use of your data. We encourage you to review those policies before interacting with their services through our platform.

7. Disclosure of Your Information

We may disclose your personal information in the following circumstances:

• (a) Service Providers: To service providers and contractors who perform services on our behalf, bound by contractual obligations to keep your information confidential and use it only for the purposes for which we disclose it to them.
• (b) Legal Obligations: To comply with applicable laws, regulations, legal processes, court orders, or enforceable government requests.
• (c) Enforcement: To enforce our Terms of Service and other agreements, including investigation of potential violations.
• (d) Protection: To protect the rights, property, or safety of CashyLoot, our users, or the public as required or permitted by law.
• (e) Business Transfers: In connection with a merger, acquisition, reorganization, or sale of all or a portion of our assets. In such an event, we will provide notice before your personal information is transferred and becomes subject to a different privacy policy.
• (f) Offerwall Attribution: Limited click/transaction data shared with offerwall providers solely for reward validation and fraud prevention purposes.

We do not sell your personal information for monetary consideration.

8. Your Rights

All users of CashyLoot have the following rights regarding their personal information:

• Access the personal information we hold about you
• Correct or update inaccurate or incomplete personal information
• Request deletion of your personal information
• Request a copy of the data we hold about you in a portable format
• Opt out of marketing and non-transactional communications
• Close your account

To exercise any of these rights, please email us at privacy@cashyloot.com with "Privacy Rights Request" in the subject line. We will verify your identity before processing any request. We will respond to verified requests within 45 calendar days.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions (legal obligations, tax record retention, fraud prevention, and completing pending transactions).
• Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Opt-Out of Sale: We do not sell personal information, so no opt-out is necessary. However, you may still submit a request if you have concerns.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit how we use sensitive personal information (such as SSN/TIN) to only those uses necessary to provide the Services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you services, charge different prices, or provide a different level of service because you exercised your privacy rights.

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers: Name, email address, IP address, unique device identifiers
• Personal Information (Cal. Civ. Code 1798.80): Date of birth, payment information (PayPal email)
• Internet or Network Activity: Browsing history, pages visited, clickstream data, usage data
• Geolocation Data: Approximate location derived from IP address

Business Purpose for Collection

We collect this information for the following business purposes: providing and maintaining our Services, processing rewards and payouts, identity verification and fraud prevention, and tax compliance.

Response Timing

We will acknowledge your request within 10 business days of receipt. We will provide a substantive response within 45 calendar days. If we need additional time, we may extend this period by up to 45 additional calendar days, and we will notify you of the extension and the reason for it.

Authorized agents may submit requests on your behalf with your written permission. We may require you to verify your identity directly with us even when an authorized agent submits a request.

10. Other State Privacy Rights

Residents of certain other US states have additional privacy rights under their respective state laws, including:

• Colorado Privacy Act (CPA)
• Connecticut Data Privacy Act (CTDPA)
• Virginia Consumer Data Protection Act (VCDPA)
• Utah Consumer Privacy Act (UCPA)

If you are a resident of one of these states, you may have the right to:

• Confirm whether we are processing your personal data
• Access your personal data
• Delete your personal data
• Obtain a copy of your personal data in a portable format (data portability)
• Opt out of targeted advertising

To exercise any of these rights, please email us at privacy@cashyloot.com. We will respond within the timeframes required by applicable law.

11. Do Not Sell or Share My Personal Information

We do not sell your personal information for monetary consideration. We do not share your personal information for cross-context behavioral advertising.

If you wish to exercise your right to opt out, you may contact us at privacy@cashyloot.com or use the "Do Not Sell My Info" link in our website footer.

Once you opt out, we will not ask you to re-authorize the sale or sharing of your personal information for at least 12 months.

12. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption in transit using Transport Layer Security (TLS)
• Encrypted storage for sensitive data (passwords, SSN/TIN)
• Access controls and authentication mechanisms
• Regular security assessments and vulnerability testing
• Employee training on data protection best practices

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

You are responsible for maintaining the confidentiality of your account credentials, including your password. Please notify us immediately if you believe your account has been compromised.

13. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods are as follows:

• Account data: Retained while your account is active, plus 3 years after account closure for legal and tax compliance purposes.
• Transaction and payout logs: 7 years, in accordance with tax compliance requirements.
• Postback/offer completion logs: 2 years.
• Vault opening data: Retained with transaction data for 7 years.
• Referral data: Retained while the referral program is active, plus 3 years after the program ends or your participation ceases.
• Identity verification documents: Deleted within 90 days of successful verification.
• Cookie consent preferences: 1 year.

After the applicable retention periods expire, your data is securely deleted or anonymized so that it can no longer be associated with you.

14. International Transfers

Your information is processed and stored in the United States via Amazon Web Services (AWS). If you access our Website from outside the United States, please be aware that your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country of residence.

By using the Website, you consent to the transfer of your information to the United States and the processing of your information in accordance with this Privacy Policy.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will post the updated Privacy Policy on this page and update the "Last updated" date at the top of this policy.

For material changes that significantly affect how we handle your personal information, we will notify you by email at the address associated with your account prior to the changes taking effect.

Your continued use of the Website after the posting of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the changes, you should discontinue use of the Website.

16. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• Privacy inquiries: privacy@cashyloot.com
• General support: support@cashyloot.com

Please include "Privacy" in the subject line for fastest routing to our privacy team.