Trust & Security

Hidden Payouts helps you find and claim money you may be entitled to — from unclaimed property and class-action settlements to rebates, benefits, and vetted side-income opportunities. Protecting the profile data you share with us is central to that mission. This page explains how we secure your account, what data we collect and why, who we share it with, and how you can exercise your privacy rights.

• Accounts are created and authenticated through our backend auth provider using email and password, with optional social login providers.
• Sessions are managed with signed tokens and refreshed automatically. We never store plaintext passwords.
• Row-level security policies ensure a user's data can only be read or modified by that authenticated user or by our service role for operational tasks.
• Sensitive actions, such as subscribing to a paid plan or changing your profile, require an active, authenticated session.
• We encourage you to use a strong, unique password and to keep your login credentials confidential.

Hidden Payouts is built on a managed cloud platform that provides the application runtime, database, authentication, and storage services. The platform handles foundational security responsibilities such as patching infrastructure, network isolation, DDoS protection, and physical data-center security.

Our responsibility is to configure those services securely: enabling row-level protection, restricting access to least privilege, validating inputs, and reviewing changes before they reach production. This is a shared-responsibility model — the platform secures the underlying infrastructure, and we secure the application layer and data handling on top of it.

We collect the information needed to match you with opportunities and to operate your account. This may include email address, name, location, household and employment information you provide through the questionnaire, and data about the matches and claims you interact with.

We use this data only to:

• Identify and present unclaimed money, settlements, rebates, benefits, and side-income opportunities you may qualify for.
• Send notifications about deadlines, new matches, and account activity according to your preferences.
• Maintain and improve the service, fix issues, and prevent fraud or abuse.
• Process payments and manage subscriptions when you choose a paid plan.

We do not sell your personal information. We do not share your profile with the issuers of unclaimed funds or settlement administrators; you file claims directly with those parties and control what you submit.

We rely on a small set of service providers to run Hidden Payouts. These currently include our cloud hosting and database provider, our payment processor for subscriptions, and analytics tools that help us understand how the site is used.

Each provider is contractually bound to use data only for the purpose of providing their service to us and is not authorized to use your data for their own independent purposes. If you subscribe to a paid plan, our payment processor receives the information required to complete billing, such as your payment method and billing address; we do not store full payment card numbers on our servers.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how visitors interact with the site. Analytics data is aggregated and used to improve the product; it is not used to build individual advertising profiles.

You can manage or delete cookies through your browser settings. Disabling essential cookies may prevent sign-in and core features from working correctly.

We keep your account data for as long as your account is active or as needed to provide the service and meet legal obligations. If you delete your account, we remove or anonymize your personal information within a reasonable timeframe, except where we must retain it for legal, tax, or fraud-prevention purposes.

You can update most of your account information directly from your dashboard or profile settings. For other requests — including accessing, correcting, exporting, or deleting your personal data — contact us at the email below. We will respond within a reasonable time and verify your identity before acting on sensitive requests.

If you discover a security issue or have a privacy concern, please contact our security team. We review reports promptly and work to resolve valid issues quickly. Please do not use our reporting channel to send sensitive personal information about yourself or other users.

We implement industry-standard security practices, including encryption in transit and at rest, least-privilege access, and row-level data isolation. References to third-party certifications or audits on our marketing materials describe the platform services we use or our own security practices; they are not a guarantee of compliance with any specific regulation for every customer use case.

If you need specific compliance assurances for your organization, contact us and we can discuss whether our current controls meet your requirements.

We may update this page as our service and security practices evolve. The "Last updated" date at the top of the page shows when this version was published. Significant changes that affect how we handle your data will be communicated through the product or by email where appropriate.