Privacy Policy

Section 01

Introduction

Paydback LLC (“Paydback,” “we,” “us,” or “our”) respects your privacy and is committed to being transparent about how we collect, use, and protect your information.

This Privacy Policy applies to all information collected through the Paydback application and website (collectively, the “Service”). By using the Service, you agree to the practices described in this Policy.

We may update this Policy from time to time. When we do, we will revise the effective date at the top of this page and, for material changes, make reasonable efforts to notify you directly.

Section 02

Information We Collect

We collect information you provide directly, information generated through your use of the Service, and limited technical data from your device. Specifically, this may include:

• Account information — your name, email address, phone number, and any profile details you provide when registering
• Loan data — loan amounts, repayment dates, notes, and the acceptance status of loan agreements you create or participate in
• Payment information — transaction records processed through Stripe (we do not store raw card numbers or full bank account details — see Section 04)
• Communications — messages or support requests you send to us
• Device and usage data — IP address, browser type, operating system, pages visited, and timestamps (collected automatically)

We collect only what we need to operate the Service. We do not collect Social Security numbers, government-issued ID, or credit history.

Section 03

How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Facilitate loan agreements between you and other users
• Send automated repayment reminders and platform notifications
• Process payments through Stripe on your behalf
• Respond to your support requests and inquiries
• Detect and prevent fraud, abuse, and violations of our Terms of Service
• Improve the Service through anonymized usage analysis
• Comply with applicable legal obligations

We do not use your information to make automated decisions that significantly affect you, such as credit scoring or lending eligibility determinations.

Section 04

Payment Processing — Non-Custodial via Stripe

All payment transactions are handled by Stripe, a PCI-DSS compliant third-party payment processor. Paydback does not store, transmit, or have access to your full card number, bank account details, or other sensitive financial credentials.

When you initiate or receive a payment through the Service, your financial data is submitted directly to Stripe through their secure infrastructure. Paydback receives only a transaction reference and status from Stripe — never your raw payment credentials.

Stripe’s handling of your payment data is governed by Stripe’s Privacy Policy. We encourage you to review it.

Section 05

SMS Communications

By providing your phone number and using the Service, you consent to receive SMS messages from Paydback. These messages may include:

• Loan creation and acceptance confirmations
• Repayment reminders as due dates approach
• Payment confirmation notifications
• Account security alerts

Opting out of SMS will not affect your ability to use the Service, but you will no longer receive text-based reminders. You can manage notification preferences in your account settings.

Section 06

Data Storage — Firebase

Paydback stores user account data, loan records, and application data using Firebase, a cloud platform operated by Google LLC. Firebase infrastructure is hosted in the United States and is subject to Google’s security standards and certifications.

Your data is stored with logical access controls, meaning only you and the counterparty of a given loan agreement can view that loan’s details. Paydback staff may access records only as necessary to provide support or investigate reported violations.

Google’s handling of Firebase data is subject to Firebase’s Privacy and Security documentation. Paydback remains the data controller for all personal information stored in Firebase on your behalf.

Section 07

Sharing Your Information

We do not sell your personal information. Ever. We do not trade, rent, or broker your data to third parties for advertising or marketing purposes.

We share your information only in the following limited circumstances:

• With your loan counterparty — the other user in a loan agreement sees the name, contact handle, and loan details you both agreed to
• With Stripe — as required to process payments on your behalf
• With Firebase / Google — as required for cloud storage and app infrastructure
• With law enforcement or regulators — when required by valid legal process, court order, or to protect the rights and safety of our users
• In a business transfer — if Paydback LLC is acquired or merges with another entity, your data may transfer as part of that transaction. We will notify you in advance of any such transfer.

Section 08

Cookies and Analytics

The Paydback website may use cookies and similar tracking technologies to remember your preferences and understand how visitors use the site. This may include first-party session cookies and third-party analytics tools such as Google Analytics.

Analytics data is aggregated and anonymized where possible. We use it to understand general usage patterns — not to build individual advertising profiles.

Most browsers allow you to control or block cookies through their settings. Disabling cookies may affect certain features of the website but will not prevent you from using the core Paydback application.

Section 09

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Loan records are retained for a reasonable period after a loan is closed to support dispute resolution and legal compliance.

When you request account deletion, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law or necessary to resolve outstanding disputes.

Anonymized or aggregated data — which cannot reasonably be used to identify you — may be retained indefinitely for product improvement purposes.

Section 10

Your Rights and Data Deletion Requests

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information (“right to be forgotten”)
• Opt out of certain data uses, including SMS communications (reply STOP)
• Receive a copy of your data in a portable format

To exercise any of these rights, contact us at [email protected] with the subject line “Privacy Request.” We will respond within 30 days. We may need to verify your identity before processing your request.

We will never retaliate against you for exercising your privacy rights.

Section 11

Children’s Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a user is under 18, we will promptly suspend their account and delete their associated data.

If you believe a minor has created an account or provided us with personal information, please contact us immediately at [email protected].

Section 12

Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please reach out: