Privacy Policy

This Privacy Policy describes how Hidden Payouts ("we," "us," "our") collects, uses, and shares personal information when you use our website and services (the "Service"). See also our Trust & Security page for security practices.

We collect information you provide directly: name, email address, location, household and employment details supplied through onboarding, payment information processed by our payment provider, and any messages you send us. We also collect technical information automatically, including IP address, browser type, device identifiers, and usage data via cookies and similar technologies.

We use your information to operate and improve the Service, match you with relevant unclaimed money and opportunities, process subscription payments, send transactional emails and notifications you opt into, prevent fraud and abuse, and comply with legal obligations.

Where applicable, we process personal data on the basis of contract performance, your consent, our legitimate interests in operating the Service, and compliance with legal obligations.

We do not sell your personal information. We share data only with: (a) service providers who help us run the Service (hosting, database, analytics, payment processing, email delivery), each bound by confidentiality; (b) authorities when required by law; and (c) successors in the event of a merger or acquisition. You file claims directly with third parties (state agencies, settlement administrators) — we do not share your profile with them.

We use strictly necessary cookies to keep you signed in and secure, and optional analytics/marketing cookies only with your consent. You can accept, reject, or change categories at any time from the cookie preferences link in our footer, and you can disable cookies in your browser (parts of the Service may then not function). Full detail is in our Cookie Policy.

We keep your information for as long as your account is active or as needed to provide the Service and meet legal obligations. You may request deletion at any time; we will remove or anonymize data within a reasonable timeframe, except where retention is required by law.

Depending on your jurisdiction, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain uses. California residents have additional rights under the CCPA/CPRA, including the right to know and the right to opt out of sale or sharing (we do not sell personal information). To exercise any right, contact us — we verify requests and respond within 45 days (extendable once where permitted), and we will not discriminate against you for exercising them. You may use an authorized agent where the law allows. We honor Global Privacy Control (GPC) browser signals as an opt out of sale/sharing.

The Service is not directed to children under 13 (or 16 in the EEA/UK), and we do not knowingly collect personal information from them. If we learn we have collected such information, we will delete it.

We use industry-standard safeguards, including encryption in transit and at rest, least-privilege access, and row-level data isolation on SOC 2 certified cloud infrastructure. No system is perfectly secure; we cannot guarantee absolute security.

Your information may be processed in the United States or other countries where our service providers operate. Where required, we use appropriate safeguards for cross-border transfers.

We may update this Policy from time to time. Material changes will be communicated through the Service or by email.

Every marketing or non-essential email we send identifies Hidden Payouts, includes a valid postal or contact address, describes its purpose accurately, and contains a working one-click unsubscribe link that we honor within 10 business days, as required by the CAN-SPAM Act. Transactional and security emails (billing receipts, password resets, account notices) are part of the Service and continue while your account is open. We do not collect phone numbers for marketing calls or text messages; if we introduce SMS in the future it will require separate express written consent with clearly disclosed message frequency and data rates.

See also our Cookie Policy, AI Disclaimer, Acceptable Use Policy, Billing & Refund Policy, and DMCA & Copyright Policy.

Contact us with any privacy questions.