1. The short version
We collect the information needed to run your account and keep the Service working and safe. We don't sell your personal information. We share it only with the companies that help us operate, with Partners when you choose to open their offers, and where the law requires it. You can ask to see, correct or delete your data at any time.
2. Who is responsible for your data
This policy applies to Dollaflow ("we," "us," or "our"), operated from 4034 Duffy Street, Merrillville, IN 46410, and covers dollaflow.com, members.dollaflow.com and related services (the "Service"). We are the controller of the personal information described here. Questions can go to [email protected].
3. Information we collect
Information you give us
- Account details: your email address and, if you set one, a password (stored in hashed form) and a display name.
- Profile choices: settings and preferences you pick in the members area, such as an avatar.
- Messages: anything you send to our support address or through forms on the Service.
- Request details: if you make a request through the members area, the details you enter to complete it.
Information collected automatically
- Device and connection data: IP address, browser type and version, operating system, device type, language and approximate location derived from your IP address.
- Usage data: pages you visit, offers you open, the time and date of visits, and how you arrived at the Service.
- Cookies and similar technologies: see our Cookies Policy for details.
Information from Partners and networks
When you open an offer, the Partner or the network that runs it may tell us whether the offer was completed, along with a reference identifier. We use this to keep your account up to date. We do not receive the content of what you do inside a Partner's app or site.
4. How we use your information
- to create and manage your account and keep you signed in;
- to show you the feed and keep track of what you've opened;
- to process requests you make through the members area;
- to send service messages, such as a welcome note, password resets and account updates;
- to measure how people find and use the Service, including through advertising partners, so we can improve it;
- to detect and prevent fraud, abuse, duplicate accounts and security incidents;
- to comply with legal obligations and enforce our Terms and Conditions.
5. Legal bases
Where data protection law such as the GDPR or UK GDPR applies, we rely on: performance of our contract with you (running your account); our legitimate interests (keeping the Service secure, preventing fraud and improving it); your consent (for certain cookies and marketing, which you can withdraw at any time); and legal obligations.
6. Who we share information with
- Service providers: hosting, email delivery, security and analytics providers who process data on our behalf under contract.
- Partners and offer networks: when you open an offer, limited technical data (such as an anonymous click reference, your IP address and device type) is passed so the offer can load and its completion can be confirmed.
- Advertising platforms: where enabled, we may share hashed or pseudonymous event data (for example, that a sign-up happened) to measure the performance of our ads.
- Legal and safety: where required by law, court order or to protect the rights, property or safety of Dollaflow, our users or others.
- Business changes: if Dollaflow is involved in a merger, acquisition or sale of assets, information may be transferred as part of that deal.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising in exchange for anything of value.
7. How long we keep it
We keep account information for as long as your account is open. If you close it, we delete or anonymise your personal information within 90 days, except where we need to keep certain records longer for legal, accounting, fraud-prevention or dispute purposes. Technical logs are kept for a shorter period, usually no more than 30 days.
8. Security
We use encryption in transit (HTTPS), hashed passwords, restricted access to production systems and regular monitoring to protect your information. No system is perfectly secure, so please use a strong, unique password and let us know straight away if you notice anything unusual on your account.
9. International transfers
Our servers are located in the United States. If you use the Service from outside the US, your information will be transferred to and processed there. Where required, we rely on appropriate safeguards such as standard contractual clauses.
10. Your rights and choices
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy of it;
- correct information that is wrong or incomplete;
- delete your account and personal information;
- object to or restrict certain processing, or withdraw consent;
- receive your data in a portable format;
- opt out of marketing emails using the unsubscribe link in any of them.
US residents, including those in California, Colorado, Connecticut, Virginia and other states with privacy laws, can exercise the rights those laws provide. To make any request, email [email protected]. We will verify your request and respond within the time the law requires. We won't treat you differently for exercising your rights. You also have the right to complain to your local data protection authority.
11. Children
The Service is meant for adults aged 18 and over. We do not knowingly collect information from anyone younger. If you believe a minor has signed up, contact us and we will remove the account.
12. Changes to this policy
We may update this Privacy Policy from time to time. The date at the top shows when it last changed. If the changes are significant, we'll let you know by email or with a notice on the Service before they take effect.
13. Contact
For anything related to privacy, write to [email protected] or by post to Dollaflow, 4034 Duffy Street, Merrillville, IN 46410.