Security & Trust

HotSaus pays you cashback when you pay local businesses with Zelle, Cash App, or Venmo. That means we handle personal and financial information, and we take that seriously. This page explains how we protect it and gives you access to the policies we hold ourselves to.

How we protect your data

• Bank connections go through Plaid. When you link a bank, you sign in through Plaid. We never see or store your bank username or password, and we never store full account or routing numbers.
• We only look for what we need. Linked bank data is used only to find your own Zelle, Cash App, and Venmo payments so you can claim cashback. We don't sell it, share it for advertising, or use it for credit decisions.
• You stay in control. You can unlink a bank at any time. When you do, we revoke access at Plaid and delete the connection. You can also delete your account from your profile.
• Encryption. All traffic uses HTTPS with TLS 1.2 or higher, and our data stores encrypt data at rest.
• Restricted access. Only the people who need access have it, every administrative account uses multi-factor authentication, and we review access every quarter.
• Every claim is reviewed. Cashback is credited only after a person verifies the purchase, and payments to restricted merchants are never rewarded.

Policies

Our security program is owned by Bam Faboyede, Security Lead. Each policy is approved by Kelechi Ajayi, Legal Advisor, and reviewed at least once a year.