Privacy notice

This notice explains what we collect about you when you use CashBlack, why we collect it, who else sees it and what you can do about it. It covers the CashBlack website, the CashBlack US app and the CashBlack browser extension.

Cashblack Ltd is responsible for the information described here. We are a company registered in England and Wales under company number 12785292, with our registered office at 71-75 Shelton Street, London WC2H 9JQ. There is no separate US company: CashBlack US is run by the same company, which is why your information is held in London. You can reach us at support@cashblack.com.

Categories of information we collect

Identifiers. Your email address, and your name if you give us one. If you sign in with Google, Apple or Facebook we receive your email address, whether that provider has verified it, and the identifier that provider uses for you. We never receive your password from them, and if you sign in that way we hold no password for you at all.

Commercial information. Each time you click through to a retailer we record the click, which retailer it was and the cash back rate that applied at that moment. When a purchase is confirmed we record its value, the cash back earned and the currency. When you cash out we record the amount, the method and the payout details you gave us. Payout details are encrypted, and nobody at CashBlack can read them out of the database.

Internet activity. We record meaningful actions in the app: screens you open, searches you run, brands you save, offers you tap. This is how we tell which parts of CashBlack work and which do not.

Tax information, only if you earn enough to need it. Federal law requires us to collect a Form W-9 from you before we can pay you more than the IRS reporting threshold in a year. That form carries your legal name, your address and your taxpayer identification number. The identification number is encrypted. We collect it because we are required to, not because we want it.

Device information, in limited ways. If you use A.F.R.O.B.O.T to scan a product, the image and any text on it are processed on your phone and are not sent to us. If you use voice search, your speech is turned into text on your phone. What leaves your phone is the search words, not the picture and not the recording.

A notification address. If you turn notifications on, your phone gives us an address for itself, issued by Apple or by Google. We store it against your account so we can tell you when cash back is confirmed or a payout has been sent, and we hold one for each device you sign in on. It identifies the handset rather than you, it is reissued whenever the app is reinstalled, and we delete ours when you sign out on that device. Turning notifications off in your phone's settings stops them arriving.

We do not sell or share your personal information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past twelve months. There is nothing here for you to opt out of, because there is nothing to opt out of.

We also do not collect your card number, your bank login or your banking password. Where CashBlack connects to a bank account for in-store cash back, that connection is made through a regulated open banking provider and we never see your credentials.

We do not track your location in the background. Location is used only while you are looking at a map or at businesses near you, and only if you allow it.

Why we collect it

• To run your account and pay you cash back.
• To work out what you have earned and to settle it when a retailer confirms a purchase.
• To meet our tax and financial record-keeping obligations.
• To detect and prevent fraud and to keep accounts secure.
• To understand which parts of the product work, so we can improve them.
• To send you marketing email, where you have asked for it. You can turn it off at any time in Settings.

Who else sees it

We use a small number of companies to run CashBlack. Each receives only what it needs.

• Our affiliate partner, which tracks your click through to a retailer so the retailer knows the sale came from you and pays the cash back. It receives an identifier for your account and an identifier for the click. It does not receive your email address or your name.
• Our hosting and database providers, which store the information described above.
• Our email provider, which sends account email such as verification and password resets.
• Our error reporting provider, which tells us when something breaks.
• Addaiaspora, our group's analytics service. When you sign up and when you click through to a retailer, we send it your IP address. It turns that into an approximate city and then discards it. CashBlack does not store your IP address.
• Retailers you buy from, who take your order through their own checkout in the ordinary way. What you buy is between you and them. We learn the value of the sale and the commission on it, not your basket.
• Sign-in providers, if you choose to use one: Google, Apple or Facebook.
• The Internal Revenue Service, where a W-9 and a year-end filing are required of us.

Where your data is held

Your data is stored in the United Kingdom and the European Economic Area, because that is where CashBlack's infrastructure runs. It is protected there by data protection law at least as strong as your own.

How long we keep it

We keep your account information for as long as you have an account with us.

We keep financial records, meaning your cash back, the purchases it came from and your cashouts, for seven years. We are required to.

If you signed a W-9, we keep it for as long as the IRS requires, and we keep it whole. Unlike everything else, it cannot be stripped of your name, because the requirement is to hold the form as you signed it.

When you delete your account we remove your name, your email address, your password, your linked sign-ins, and everything you browsed, searched or saved. We keep the financial records above with your name and contact details stripped out of them, and we keep any W-9 you signed. The delete page sets this out in full before you confirm.

Your rights

Depending on where you live, you may have the right to know what we hold about you, to get a copy of it, to have it corrected, to have it deleted, and not to be treated differently for exercising any of those rights. We will not charge you or degrade your service for asking.

You can delete your account yourself, in the app or on this website, under Settings. It takes effect immediately and you do not need to ask us.

For anything else, email support@cashblack.com. We will answer within 45 days, and we will tell you if we need longer.

You can ask someone to make a request on your behalf. We will need to verify both of you before we act on it.

Cookies

Our cookies policy sets out what we store in your browser and how to control it.

Changes to this notice

If we change what we collect or why, we will update this notice and change the date at the top. Where the change is significant we will tell you directly rather than leave you to find it.