Privacy Policy

This Privacy Policy explains how HotSaus, LLC (“HotSaus,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes information about you when you use our web-based cashback application and related services (collectively, the “Service”). This Privacy Policy applies to both consumer users and business users in the United States.

1. Scope; Relationship to Other Terms

This Privacy Policy applies to information we process in connection with the Service. Your use of the Service is also governed by our Terms of Service (the “Terms”). If there is a conflict between this Privacy Policy and the Terms regarding privacy, this Privacy Policy controls.

2. Age; Children

The Service is intended for individuals 16 years of age or older. We do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided us personal information, please contact us at aye@ayehotsaus.com so we can take appropriate action.

3. Information We Collect

We collect information in three main ways: (a) information you provide, (b) information collected automatically, and (c) information from third parties (limited, as described below).

3.1 Information you provide to us

Account and profile information. When you register or use the Service, we may collect:

• Name
• Username
• Email address
• Phone number
• Password (stored in a hashed form where applicable)

Cashback and transaction proof information. To evaluate eligibility for cashback (including “general cashback” and “offer cashback”), you may provide proof of purchase and related information, including:

• Screenshots and other images you upload (including any information visible in the screenshot)
• Transaction details such as amount, merchant, date/time, transaction ID, payment handle, and any other information included in the proof you submit
• Any offer-related information (e.g., offer claimed, redemption details)

P2P payout information. To send you cashback, we may collect your Venmo, Cash App, and/or Zelle username/handle or other identifier you provide for payout delivery.

Communications. If you contact us (e.g., by email), we collect the contents of your communications and any information you choose to provide.

Preferences. We may collect preferences you set related to notifications or communications.

3.2 Information collected automatically

When you use the Service, we may automatically collect:

• Device and usage data, such as IP address, browser type, device operating system, timestamps, pages viewed, clickstream data, and referring/exit pages
• Cookies and similar technologies, including strictly necessary cookies and analytics cookies (see Section 6)

3.3 Information from third parties

We do not use APIs from Venmo, Cash App, or Zelle to obtain your transaction data. We primarily rely on the proof of purchase you upload and our internal review.

We may receive limited information from service providers that support the Service (e.g., analytics providers may provide aggregated reporting).

4. How We Use Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service
• Create and manage accounts and authenticate users
• Review submitted proof of purchase and determine cashback eligibility
• Administer offers (including “hot drop” offers), including claim and redemption workflows
• Send cashback payouts using the P2P platform identifier you provide
• Communicate with you about the Service, including responding to requests and sending operational messages
• Monitor, protect, and maintain the security and integrity of the Service, including detecting, preventing, and addressing fraud, abuse, and policy violations
• Conduct analytics and understand how users interact with the Service
• Comply with legal obligations and enforce our agreements

5. How We Disclose Information

We may disclose information as follows:

5.1 Service providers

We may disclose information to vendors and service providers that perform services on our behalf, such as:

• Hosting and infrastructure providers
• Email and communications providers
• Analytics providers

These vendors are authorized to process personal information only as necessary to provide services to us (and consistent with applicable law).

5.2 Legal, safety, and enforcement

We may disclose information if we believe disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Protect the rights, property, and safety of HotSaus, our users, or others
• Investigate, prevent, or take action regarding suspected or actual prohibited activities, fraud, abuse, or security incidents
• Enforce our Terms and other agreements

5.3 Business transfers

We may disclose information in connection with, or during negotiations of, any merger, acquisition, financing, reorganization, bankruptcy, dissolution, sale of company assets, or other business transaction.

6. Cookies; Analytics; “Do Not Track”

6.1 Cookies and similar technologies

We use cookies and similar technologies for:

• Strictly necessary purposes (e.g., enabling core site functionality, authentication, and security)
• Analytics purposes (e.g., understanding usage and improving the Service)

We present a cookie consent banner for strictly necessary and analytics cookies.

6.2 Do Not Track

Some browsers transmit “Do Not Track” (“DNT”) signals. Because there is not yet an accepted standard for how to respond to DNT signals, we do not respond to DNT signals at this time.

7. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service and for legitimate business purposes, such as maintaining records, resolving disputes, safety and security, and complying with legal obligations.

Based on our current practices, we generally retain:

• Account information: up to 30 days after account closure
• Transaction proof / screenshots and related submission data: up to 30 days
• Analytics data: up to 30 days

We may retain information longer where required or permitted by law, or where reasonably necessary for legal claims, compliance, audits, dispute resolution, or enforcement of our agreements (“legal exceptions”).

8. Your Privacy Choices

Depending on how you use the Service, you may have certain choices:

Account closure and deletion request. You may request account deletion by emailing aye@ayehotsaus.com. We may need to retain certain information under legal exceptions (see Section 7).

Cookie choices. You can use our cookie banner (where available) and browser settings to manage cookies. Blocking strictly necessary cookies may cause the Service to not function properly.

9. U.S. State Privacy Rights (Including California)

Certain U.S. state laws (such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”) and similar laws in other states) may provide eligible residents with additional rights regarding their personal information. This section describes those rights and how to exercise them.

9.1 Categories of personal information processed (CCPA/CPRA)

Depending on your use of the Service, we may process the following categories (as defined by the CCPA/CPRA):

• Identifiers (e.g., name, email address, phone number, username, IP address, P2P handle/identifier)
• Internet or other electronic network activity information (e.g., browsing and usage data, cookie identifiers, analytics data)
• Commercial information (e.g., proof of purchase details, transaction amount, merchant, date/time, transaction ID, payment handle, and related offer redemption details)
• Geolocation data (approximate location derived from IP address)
• Inferences (e.g., inferences drawn from usage data to improve the Service)

We do not intentionally collect “sensitive personal information” as defined under the CPRA (such as Social Security numbers, government IDs, precise geolocation, or biometric information) as part of the Service’s standard operation.

9.2 Purposes of processing

We process the categories above for the business and commercial purposes described in Section 4, including providing the Service, reviewing proof of purchase, issuing cashback payouts, analytics, and security.

9.3 Categories of recipients

We may disclose the categories of personal information above to:

• Service providers (hosting, email, analytics)
• Legal and safety recipients (as described in Section 5.2)
• Parties to business transfers (as described in Section 5.3)

9.4 “Sale” and “Sharing”; targeted advertising

Do Not Sell or Share. We do not “sell” personal information or “share” personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

If our practices change, we will update this Privacy Policy and provide any required opt-out rights.

9.5 Your rights (where applicable)

Subject to certain exceptions, eligible residents may have the right to:

• Know / Access: request information about the personal information we collected about you (including categories, sources, purposes, and recipients)
• Delete: request deletion of personal information
• Correct: request correction of inaccurate personal information
• Data portability: receive a copy of certain information in a portable format
• Opt out: opt out of certain processing (such as sale/sharing or targeted advertising) if applicable
• Non-discrimination: not receive discriminatory treatment for exercising privacy rights

9.6 How to exercise state privacy rights

To submit a request, email us at aye@ayehotsaus.com with the subject line “Privacy Request.” Please specify the right you wish to exercise (access, delete, correct, etc.).

Verification. We will take reasonable steps to verify your identity before responding. This may include asking you to confirm access to the email address associated with your account and/or providing additional information to help us verify your request. We will only use information provided in a request to verify and respond to the request.

Authorized agents (California). If you are a California resident, you may designate an authorized agent to submit a request on your behalf. We may require proof of authorization and may also require you to verify your identity directly with us.

9.7 Appeals (certain states)

If a state law provides you the right to appeal our decision on a privacy request, you may appeal by emailing aye@ayehotsaus.com with the subject line “Privacy Appeal.”

10. Third-Party Services and Links

The Service may contain links to third-party sites or services. Your interactions with those third parties are governed by their own privacy policies, not ours. We are not responsible for the privacy practices of third parties.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The “Effective Date” above indicates when this Privacy Policy was last revised. If we make material changes, we will provide notice consistent with applicable law (for example, by posting the updated policy on the Service and updating the effective date).

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact:

HotSaus, LLC
Atlanta, Georgia, United States
Email: aye@ayehotsaus.com