Privacy Policy
Privacy Policy
Last Updated: October 2026
1. Introduction
Discountable® LLC ("we", "us", "our") operates the Discountable® platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including reimbursement flows, in-app checkout flows, reservation records, payment processing, and payout-related activity. By using Discountable, you consent to the practices described in this policy.
2. Information We Collect
2.1 Information You Provide
We collect information you voluntarily provide when using our Service:
- Account Information: Name, email address, password
- Profile Information: Display name, profile photo (optional)
- Contribution Details: Pledge amounts, percentages, messages to recipients
- Support Plan Information: Recipient details, plan descriptions, purchase information
- Payment Information: Processed and stored securely by Stripe (see Section 2.4)
- Communications: Support requests, feedback, correspondence
2.2 Automatically Collected Information
- Usage Data: Pages viewed, features used, time spent on platform
- Device Information: Browser type, device type, operating system
- Log Data: IP address, access times, referring URLs
- Cookies: Session cookies for authentication and preferences
2.3 Transaction Information
- Purchase amounts and dates
- Contributor charges and payment status
- Merchant transaction details
- Redemption and settlement history
- Checkout reservation records, including reserved amounts, status, and expiration timing
2.4 Receipt & Transaction Data
We collect and store uploaded receipts and associated transaction data, which may include:
- Merchant name
- Purchase date
- Transaction amount
This data is used for verification, fraud prevention, and service improvement.
2.5 Automated Processing
We may use automated systems, including AI-based tools, to analyze receipts for validation and fraud detection. These systems assist but do not solely determine final outcomes.
2.6 Payment Information Security
PCI DSS Level 1 ComplianceWe use Stripe for payment processing. Your payment card information never touches our servers. Stripe is certified to PCI Service Provider Level 1, the most stringent level of certification.
When you save a payment method, Stripe tokenizes your card data and provides us with a secure token. We store only this token - never your actual card number.
3. How We Use Your Information
We use collected information for the following purposes:
- Service Delivery: Process contributions, manage support plans, facilitate transactions
- Payment Processing: Charge users, place temporary reservation locks, settle transactions, and distribute funds to merchants when applicable
- Account Management: Authenticate users, maintain accounts, manage preferences
- Communication: Send transaction confirmations, contribution receipts, service updates
- Customer Support: Respond to inquiries, resolve issues, provide assistance
- Security: Prevent fraud, detect abuse, protect user accounts
- Analytics: Understand usage patterns, improve features, optimize performance
- Legal Compliance: Comply with legal obligations, respond to legal requests
4. How We Share Your Information
4.1 With Other Users
- Contributors see: Recipient name/email, support plan details, total coverage
- Recipients see: Contributor names (optional), total coverage percentage, contribution messages
- Merchants see: Transaction amounts, customer information necessary for fulfillment
4.2 With Service Providers
- Stripe: Payment processing, settlement support, compliance, and fraud prevention
- Airtable: Data analytics and reporting (business intelligence)
- Base44: Application hosting, backend functions, and database management
- Email Services: Transactional emails and notifications
4.3 For Legal Reasons
We may disclose information if required by law, legal process, or to:
- Comply with legal obligations or court orders
- Protect our rights, property, or safety
- Investigate fraud or security issues
- Prevent harm to users or the public
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change via email.
5. Data Security
Security Measures
- SSL/TLS Encryption: All data transmitted is encrypted using TLS 1.3
- Data Encryption: Sensitive data encrypted at rest
- Stripe Integration: PCI DSS Level 1 compliant payment processing
- Access Controls: Role-based permissions, authentication required
- Regular Audits: Security reviews and vulnerability assessments
- Secure Infrastructure: Hosted on secure, monitored servers
While we implement industry-standard security measures, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.
6. Your Rights and Choices
6.1 Account Information
- Access: View your account information and transaction history
- Update: Correct or update your personal information
- Delete: Request account deletion (subject to legal retention requirements)
6.2 Contribution Management
- Pause or cancel contributions at any time
- Update payment methods
- Modify coverage percentages for future transactions
6.3 Communication Preferences
- Opt out of marketing emails (transactional emails still required)
- Manage notification settings
- Unsubscribe links in all marketing emails
6.4 Data Portability
Request a copy of your data in a machine-readable format by contacting support@discountablellc.com.
7. Data Retention
- Account Data: Retained while account is active, plus 90 days after closure
- Transaction Records: Retained for 7 years for tax and compliance purposes
- Payment Data: Tokenized data retained as long as contributions are active
- Support Communications: Retained for 2 years
8. Cookies and Tracking Technologies
8.1 Types of Cookies
- Essential Cookies: Required for authentication and security
- Functional Cookies: Remember preferences and settings
- Analytics Cookies: Help us understand usage patterns (anonymized)
8.2 Cookie Management
You can control cookies through your browser settings. Disabling essential cookies may affect functionality.
9. Third-Party Services
Our Service integrates with third-party services:
- Stripe: Privacy Policy
- Airtable: Privacy Policy
- Base44: Privacy Policy
10. Children's Privacy
Our Service is not intended for children under 13. We do not knowingly collect information from children. While students may be recipients of support plans, accounts must be created by adults (18+). If we discover we've collected information from a child under 13, we will delete it immediately.
11. International Data Transfers
Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using our Service, you consent to such transfers.
12. California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of sale (we do not sell personal information)
- Right to deletion
- Right to non-discrimination
13. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have rights under the General Data Protection Regulation:
- Right to access your personal data
- Right to rectification (correction)
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
14. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice on our platform. The "Last Updated" date at the top indicates when changes were made.
15. Contact Us
Discountable® LLC
Privacy Inquiries:support@discountablellc.com(subject: Privacy Request)
General Support:support@discountablellc.com
Merchant Inquiries:merchants@discountablellc.com
Financial Questions:financial@discountablellc.com
For data access requests, deletions, or privacy concerns, please include "Privacy Request" in your subject line.
By using Discountable®, you acknowledge that you have read and understood this Privacy Policy.