Kickback Privacy Policy

1. Information We Collect

We collect various types of personal and non-personal information to provide and improve our services. This section outlines the specific categories of information we collect and why we collect them.

1.1 Personal Information Provided by Users

When users create an account or use Kickback’s services, they voluntarily provide certain personal information, including:

First and Last Name:

We collect your full name to create your profile and for use in transactions between taskers and homeowners. Displaying names helps both parties know who they are interacting with and ensures trust and accountability.

Phone Number:

Your phone number is used for identity verification, security purposes, and for communication related to task confirmations, updates, and support. It is not publicly visible but is essential for customer support and communication between taskers and homeowners.

Email Address:

We use your email address for account registration, password recovery, transactional emails (such as task updates), and promotional content if you’ve opted in. Email addresses are stored securely and are not visible to other users.

Profile Photo:

Profile photos help personalize your account and build trust between homeowners and taskers. They are publicly visible to others when viewing your profile and are used for identification purposes.

Bio:

Your bio is an optional section where you can provide information about yourself, your skills, and your experience. This helps users better understand who they are working with and enhances trust. This information is publicly visible on your profile.

1.2 Location Data

Precise Location Data:

We collect your real-time location through your device to enhance the functionality of the app’s map feature and location autofill search. This allows us to show nearby tasks to taskers. We only collect location data when you enable location services through your device settings, and it is used solely for operational purposes such as matching local users.

Stored Location Data:

The last known location of users is stored for profile updates and search functionality. This data is essential for matching users in local communities and for showing relevant tasks in proximity.

1.3 Payment Information

Payment processing is handled by Stripe, a third-party payment provider. While Kickback does not store payment card details directly, we collect certain payment-related information via Stripe, including:

Billing Information:

Billing information, such as name and billing address, is collected to complete transactions between homeowners and taskers, along with credit card information. Stripe handles the secure storage and processing of this data.

Bank Account and Routing Numbers (for Taskers):

Taskers are required to provide bank account and routing numbers for direct deposit of payments for completed tasks. This data is handled and securely stored by Stripe.

Transaction History:

We retain a record of your transactions on the platform for accounting and user support purposes. Transaction data includes task details, payment amounts, dates, and any associated service fees.

1.4 Legal Compliance Information

To ensure compliance with legal requirements and to enhance user safety, we may collect the following sensitive data:

Social Security Number (SSN):

For taskers, Kickback or Stripe may collect Social Security numbers to comply with tax reporting obligations and for identity verification purposes. This data is securely processed and stored by Stripe and used in accordance with IRS requirements.

Driver's License Information:

Taskers may be required to provide a valid driver’s license as part of our identity verification and age validation process. Driver's license data may be used for background checks and legal compliance. This data is securely handled by Stripe or other third-party verification services.

Background Check Information:

For certain categories of tasks or user verification purposes, taskers may undergo background checks. This process may involve collecting and verifying additional personal information, such as criminal history or employment records, which are managed by trusted third-party providers.

1.5 Linked Accounts

Users have the option to link their Facebook and LinkedIn accounts to their Kickback profile. Linking these accounts provides additional identity verification and enhances the credibility of the user's profile. Data that may be collected from linked accounts includes:

Profile photo

Work history (from LinkedIn)

Social connections (from Facebook or LinkedIn)

These linked accounts are optional, and the user can choose to disconnect them at any time. Data collected from linked accounts is used to boost the user’s profile score, which enhances trust within the community.

1.6 Data Automatically Collected

In addition to personal information users voluntarily provide, we also collect certain data automatically when you interact with our platform. This includes:

Device Information:

We collect information about the device you use to access Kickback, including the model, operating system, and browser type. This data helps us optimize the platform for different devices and enhance security.

IP Address:

We automatically collect your IP address when you access Kickback to help identify your location, ensure security, and prevent fraud.

Cookies and Similar Technologies:

We use cookies, web beacons, and similar technologies to improve the user experience and gather usage data. These tools help us remember your preferences, understand user behavior, and track website traffic.

1.7 Communication Data

We collect information from communications between users, such as messages sent through Kickback’s messaging system. This may include:

Direct messages between taskers and homeowners

In-app notifications and alerts

Customer support communications

These messages are stored for user safety, customer support purposes, and to help resolve disputes or detect violations of our terms of service.

1.8 Analytics and Behavioral Data

We may collect analytics data related to your behavior on the platform through third-party services like Google Analytics and HubSpot. This includes:

Pages you view

Time spent on the app or website

Clicks, taps, and interactions

Behavior patterns related to task creation, searching, or messaging

This data is used for improving the functionality of the app, enhancing the user experience, and delivering more relevant content.

Last Updated October 16th, 2024

2. Purpose of Data Collection

The data Kickback collects serves multiple essential functions to ensure a safe, efficient, and user-friendly experience on the platform. Below, we break down each purpose of data collection in detail:

2.1 Security and Identity Verification

To ensure that Kickback is a trusted and secure platform, we collect personal information to confirm user identities and prevent fraudulent activities. Specifically:

Identity Verification:

We use names, email addresses, phone numbers, and payment information to verify the authenticity of both taskers and homeowners. This verification ensures that only real people use the platform and helps foster trust among users.

Taskers: Taskers may need to undergo additional verification measures such as Social Security number validation and background checks, which confirm their legal ability to work and ensure a safe environment for homeowners.

Homeowners: Homeowners are required to provide certain personal information to prevent fake job posts, protect taskers, and ensure transparency in transactions.

Preventing Fraud:

Personal information helps us detect and prevent fraudulent activity, such as the creation of fake accounts or fraudulent task postings. By confirming the identity of users and monitoring behaviors on the platform, we reduce the risk of scams or unlawful activities.

Account Security:

By collecting contact information like email addresses and phone numbers, we provide users with ways to recover their accounts in case of password loss or suspected unauthorized access. Two-factor authentication (2FA) may be used as an additional layer of protection.

2.2 Payment Processing

We collect payment-related information through Stripe to facilitate financial transactions on the platform. Taskers need to get paid for their work, and homeowners need to securely pay for the services they receive. Specifically:

Tasker Payments:

Taskers are required to provide their bank account details through Stripe so that payments for completed tasks can be directly deposited into their accounts. Kickback securely transfers funds via Stripe after the task is marked as completed.

Homeowner Payments:

Homeowners must input payment details to pay for tasks securely. These payments are processed by Stripe and securely stored off-platform. Payment data is never handled directly by Kickback, reducing the risk of payment fraud or data breaches.

Transaction History:

To maintain financial transparency, Kickback records the history of transactions between taskers and homeowners. This history can be accessed for tax purposes, invoicing, or if disputes arise between users. Transaction data helps Kickback monitor user activity and maintain compliance with applicable laws.

2.3 Profile Creation and Customization

Personal information is collected to create user profiles, which enhance the visibility of users on the platform and allow for smoother interactions between homeowners and taskers. Specifically:

Public Profiles:

Profile information such as names, bios, and profile pictures helps taskers and homeowners get to know one another before engaging in a task. A well-rounded profile increases transparency, helps establish trust, and improves the chances of successful matches between taskers and homeowners.

Enhancing Credibility:

Users can link their Facebook and LinkedIn accounts to strengthen their profiles and add credibility. This can help taskers build trust with potential homeowners and stand out when bidding for tasks.

Location Data:

We collect location data to optimize task matching and show taskers and homeowners who are nearby. Location data also helps when setting up local search filters, making it easier for users to find relevant tasks in their immediate area.

2.4 Customer Support and Communication

We collect personal information to facilitate communication between users and our support team. Specifically:

User Support:

Personal data such as email addresses and phone numbers allow our customer support team to address user queries, disputes, and issues that may arise while using the platform. We may access user transaction history, task details, and communication history to resolve issues efficiently.

Communication Between Users:

Information like names and profile pictures, alongside direct messaging tools, enables taskers and homeowners to communicate clearly about tasks. Communication data is monitored for security reasons and may be used in case disputes arise or if there is suspicious behavior.

Service Announcements:

We use users' contact information to send important updates about the service, including changes to policies, security alerts, or issues affecting platform functionality.

2.5 Analytics and Improvement of Services

To continuously improve the platform and provide users with a more personalized experience, Kickback collects data to analyze user behavior and preferences. Specifically:

Usage Data:

We track how users interact with the platform—such as the number of tasks posted, how often users log in, and how they navigate the app. This information is vital for improving user experience, identifying issues, and implementing new features that enhance usability.

Behavioral Tracking:

Tools like Google Analytics allow us to observe how users engage with the platform, which tasks are in demand, and the most common actions taken by taskers and homeowners. Understanding user behavior helps us optimize platform performance and provide tailored suggestions to users.

Task Preferences and Interests:

We collect data on the types of tasks homeowners post and the services taskers offer. By analyzing this data, we can offer more relevant suggestions to users and display tasks that fit their interests or skill sets.

2.6 Marketing and Promotional Content

Kickback uses personal data to engage with users through marketing campaigns, promotions, and tailored content. Specifically:

Promotional Emails:

If users opt-in, we may send promotional emails highlighting new features, special offers, or tips for improving their experience on the platform. We use personal data like email addresses and user preferences to ensure that our marketing content is relevant and timely.

Targeted Advertising:

We may use user data such as interests, location, and previous behavior on the platform to serve personalized ads. This data is often processed through third-party tools such as Google Analytics and Meta advertising (Facebook, Instagram).

Push Notifications:

Users may receive push notifications about tasks that match their skills, services, or interests. We use location and profile data to deliver relevant, timely notifications that improve engagement with the platform.

2.7 Legal Compliance and Safety

To comply with legal obligations and ensure the safety of our users, we collect and retain certain personal data. Specifically:

Compliance with Laws:

Kickback may collect Social Security numbers, driver’s license information, and background check data to comply with labor, tax, and other legal requirements. This helps ensure that taskers are authorized to work and that homeowners are hiring verified individuals.

Law Enforcement Requests:

In certain cases, personal data may be shared with law enforcement agencies if required by law, such as when illegal activity is reported or suspected. This ensures the platform remains safe and lawful for all users.

3. Data Storage and Security

At Kickback, we take the security and privacy of user data seriously. We have implemented industry-standard practices to ensure that the personal and financial information we collect is securely stored and protected from unauthorized access, disclosure, alteration, or destruction.

3.1 Where Data is Stored

Kickback utilizes reliable cloud service providers to store and manage user data. These services provide both flexibility and security, allowing us to focus on delivering a high-quality user experience. Specifically, we use:

Firebase (Google Cloud):

Firebase is a backend service operated by Google that securely stores user data such as profile information, transaction history, communication logs, and task details. Firebase is known for its scalability and robust security protocols, ensuring user data remains protected at all times.

Google Cloud Services:

Kickback’s core data infrastructure operates on Google Cloud, which offers secure cloud storage solutions with multiple layers of encryption, including data-at-rest encryption. Google Cloud complies with various security and privacy standards, including ISO/IEC 27001, SOC 1/2/3, and GDPR, which helps us meet regulatory requirements for data protection.

Stripe:

All payment-related data, such as bank account numbers, Social Security numbers, and credit card information, is processed and securely stored by Stripe, our payment processing partner. Stripe complies with PCI DSS (Payment Card Industry Data Security Standards), ensuring that all payment transactions are handled in a secure environment. Kickback does not store sensitive payment information directly on our servers.

3.2 Data Encryption and Security Measures

We employ a variety of security measures to protect user data from unauthorized access and cyber threats. These measures are regularly updated to address evolving security risks:

Data Encryption:

All personal information stored in Firebase and Google Cloud is encrypted both in transit (while being sent over the internet) and at rest (while stored on our servers). This ensures that data remains unreadable to unauthorized parties even if intercepted or accessed without permission.

End-to-End Encryption (E2EE):

For sensitive data such as communications between taskers and homeowners, payment details, and legal compliance information (e.g., Social Security numbers), we use end-to-end encryption. This means that data is encrypted on the user’s device and only decrypted when it reaches the intended recipient or authorized service (e.g., Stripe for payments).

Authentication and Access Controls:

Kickback employs multi-factor authentication (MFA) for administrators and critical system access points. Role-based access control (RBAC) is implemented to ensure that only authorized personnel can access sensitive data or make changes to the system. User access is strictly limited to the information they need to complete their tasks, and regular audits are performed to review and enforce these controls.

Secure Software Development Lifecycle (SDLC):

Kickback follows secure development practices during the software development lifecycle. This includes code reviews, penetration testing, and vulnerability assessments to identify and address potential security weaknesses before they affect users.

Protection from Data Breaches:

We use advanced security tools such as firewalls, intrusion detection systems (IDS), and automated threat monitoring to detect suspicious activity or potential data breaches. In the unlikely event of a data breach, users will be promptly notified, and we will take immediate action to mitigate any risks.

3.3 Retention of Data

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, or resolve disputes. Our data retention policies ensure that user data is securely stored for the appropriate amount of time and then safely deleted or anonymized. Specifically:

User Data Retention:

User profile data, transaction history, and communication logs are retained for the duration of the user’s account on the platform. Once a user deletes their account or requests data deletion, we will permanently delete or anonymize all personal data related to that user, except in cases where legal retention requirements apply (such as tax records).

Deleted Accounts:

When users choose to delete their account through the app’s settings or by submitting a request to support@KickbackServices.com, their data will be securely removed from our systems within a reasonable timeframe, usually within 30 days of the request. This includes personal information, profile details, and any associated task data. However, certain data may be retained to comply with legal obligations (e.g., tax documentation, fraud prevention).

Legal Retention Requirements:

In some cases, we may be required to retain certain data for longer periods to comply with applicable laws or resolve disputes. For example, transaction records may be kept for up to seven years to comply with financial regulations or tax reporting requirements.

Inactive Accounts:

For inactive accounts (accounts where users have not logged in for an extended period), we may retain data for a limited time (up to two years) before securely deleting or anonymizing it. Users will be notified before any data is permanently removed.

3.4 Security Measures on Third-Party Platforms

In addition to data stored directly by Kickback, we may share some user data with trusted third-party services like Stripe, Google Analytics, and HubSpot for specific functions (e.g., payment processing, marketing, analytics). These third-party platforms have their own privacy and security measures, which we have reviewed and confirmed to meet industry standards. Specifically:

Stripe:

As mentioned, Stripe is PCI DSS compliant and has stringent security measures in place to protect users’ financial information. Stripe handles sensitive payment data, including credit card numbers, bank account details, and tax reporting information (Social Security numbers for taskers).

Google Analytics:

Google Analytics helps us analyze user behavior on the platform for performance improvements, but personal data like names or email addresses are not shared with Google Analytics. Data collected by Google Analytics is anonymized and stored securely by Google Cloud.

HubSpot:

HubSpot is used for customer relationship management (CRM), marketing automation, and analytics. Any personal data shared with HubSpot (such as names, email addresses, or communication history) is used solely for managing customer interactions and enhancing user experience. HubSpot employs its own security measures, including encryption and secure data storage, to protect user data.

3.5 Data Access and User Controls

Users are in control of their data and have several options for accessing, updating, or deleting their personal information on Kickback:

Accessing Data:

Users can access their profile data, transaction history, and task-related information by logging into their Kickback account. Additionally, users can view any connected third-party accounts (Facebook, LinkedIn) and manage their preferences for linked accounts.

Updating Data:

Users can update personal information such as names, email addresses, profile photos, and bios through the account settings section of the app. This allows users to ensure that their profiles remain accurate and up-to-date.

Deleting Data:

As mentioned earlier, users have the right to delete their account and personal data by either using the in-app “Delete Account” function or contacting our support team at support@KickbackServices.com. Once an account is deleted, all associated data is removed from our systems, except for data retained for legal compliance.

3.6 Responding to Law Enforcement Requests

In compliance with legal obligations, Kickback may disclose user data to law enforcement or other governmental authorities if:

We receive a valid legal request (e.g., a subpoena, court order) for user data related to criminal activity or investigations.

We detect illegal activity, fraud, or other malicious behavior on our platform that may necessitate reporting to law enforcement.

We carefully review each request to ensure it is legally valid and, where necessary, notify users of such requests unless prohibited by law.

4. Data Sharing and Disclosure

At Kickback, we are committed to protecting your personal information. We only share data when it is necessary to provide our services, comply with legal obligations, or enhance the user experience. Your data is never sold to third parties for profit. Below is a comprehensive explanation of how, when, and why we share user information.

4.1 Third-Party Service Providers

Kickback collaborates with third-party service providers to facilitate various functions of the platform. These partners help us process payments, analyze user behavior, manage customer relationships, and improve overall platform functionality. Each third-party service we work with follows industry-standard privacy and security practices to protect user data.

The main third-party service providers we share data with include:

Stripe (Payment Processor):

Stripe handles all payment transactions on the platform. To process payments, Stripe collects sensitive financial data such as credit card numbers, bank account details, Social Security numbers (for taskers), and tax information. Stripe operates in compliance with PCI DSS (Payment Card Industry Data Security Standard) and ensures the secure handling of financial information. Kickback never directly accesses or stores this sensitive financial data. Instead, we share user identification details like names and addresses with Stripe to facilitate payments and tax reporting.

Google Analytics (Behavioral Tracking):

We use Google Analytics to better understand how users interact with our platform. This service collects anonymized data, such as site usage, visit durations, and device types. No personally identifiable information (PII), such as names or email addresses, is shared with Google Analytics. The data collected helps us optimize performance, improve user experience, and target content more effectively.

HubSpot (Customer Relationship Management):

HubSpot is a CRM and marketing automation tool we use to manage customer interactions, send promotional materials, and provide customer support. HubSpot may store basic user information such as names, email addresses, and communication logs to facilitate efficient customer service and targeted marketing. HubSpot employs encryption and data protection protocols to ensure user information remains secure.

4.2 Publicly Visible Information

Some parts of your profile and activity on Kickback are visible to other users, both taskers and homeowners, in order to facilitate connections and build trust within the community. The following personal information may be shared with other users:

Profile Details:

When taskers and homeowners interact on the platform (e.g., applying for tasks or posting job requests), certain parts of the user profile are visible to both parties. This includes full names, profile pictures, reviews, ratings, and bios. Taskers and homeowners must provide enough information to verify their identity and professional qualifications while safeguarding sensitive data like phone numbers and email addresses, which are not publicly visible.

Task Requests and Job Listings:

Homeowners’ task descriptions, including job details, compensation offered, and general location, are publicly viewable by taskers to enable them to apply for tasks. Taskers can also display their portfolios, work history, and relevant skills.

Reviews and Ratings:

After task completion, homeowners and taskers can leave reviews for each other. These reviews are visible to future users to help them evaluate potential partners for future tasks. The review system plays a key role in building credibility and trust within the community.

4.3 Legal Obligations and Law Enforcement

Kickback may share user information in response to legal obligations or requests from law enforcement. We ensure that all requests for data are legally valid and comply with applicable laws. Specifically, we may share data in the following scenarios:

Compliance with Laws and Regulations:

We may be required to share user data with government agencies or regulatory authorities to comply with legal, tax, or financial reporting obligations. For example, taskers’ earnings may be reported to tax authorities if required by law.

Law Enforcement Requests:

If we receive a valid legal request (such as a subpoena, court order, or warrant) from law enforcement or other governmental authorities, we may disclose user information to comply with legal processes. This may include sharing communications, transaction history, or other account-related data if necessary to support investigations into criminal activity or to protect the safety of our users.

Detecting Fraud or Illegal Activity:

If illegal activity, fraud, or harassment is detected on the platform (e.g., through direct messages or suspicious user behavior), we may proactively share information with law enforcement agencies to ensure the safety of our community. This may include sharing information related to user accounts, task details, and communication logs.

In such cases, users will be notified of the data request unless prohibited by law (e.g., a gag order). Kickback reviews each request carefully to ensure it is justified and legally binding.

4.4 Business Transfers and Mergers

In the event of a business restructuring, merger, acquisition, or sale of assets, Kickback may transfer user data to the new entity. This ensures that the platform can continue operating seamlessly during such transitions. Users will be notified via email of any significant changes to the handling of their personal data, including changes to the entity responsible for processing their data.

Mergers or Acquisitions:

If Kickback is involved in a merger or acquisition, user data may be transferred as part of the transaction. The new entity will assume the responsibilities and obligations outlined in this Privacy Policy unless new terms are provided to the user and their consent is obtained.

Asset Sales:

In the event of a sale of certain assets, including the sale of user data, Kickback will inform users of any data transfers and provide them with the opportunity to opt out if desired.

Any such transfers will comply with applicable data protection regulations, and users will be informed of their rights during the process.

4.5 Internal Use for Analytics and Marketing

Kickback may internally share user data to improve services, marketing efforts, and user experience. This includes sharing data between departments for the following purposes:

Analytics and Performance Improvement:

We analyze aggregated data on user behavior and platform performance to optimize features, troubleshoot issues, and make strategic business decisions. This helps us improve app functionality, provide better customer support, and develop new features that enhance the user experience.

Targeted Marketing:

Based on user activity, preferences, and interactions, we may send tailored marketing materials, promotions, or updates to users. Users have the option to unsubscribe from such communications at any time by following the instructions in marketing emails. We use data like task completion history and interests to send relevant offers, but sensitive personal information (such as financial details) is not used for marketing purposes.

Behavioral Tracking and Analytics:

We use Google Analytics and HubSpot to track user behavior on our platform and analyze usage patterns. The information collected helps us improve the platform, personalize content, and ensure that our marketing efforts are aligned with user preferences. All data collected for analytics is anonymized and does not include personally identifiable information.

4.6 Sharing with Partners and Affiliates

Kickback may share user information with partners and affiliates who are directly involved in providing services on the platform. This could include marketing partners, technical service providers, or data analytics providers. These partners are bound by confidentiality agreements and are only authorized to use the data for the purpose of assisting us in operating the platform.

Affiliate Partners:

We may collaborate with affiliates to offer promotions, rewards, or discounts to users. In such cases, we may share limited user information (such as names or email addresses) with the affiliate to deliver the promotion. However, users will always be informed and given the option to participate in such offers.

Service Providers:

Kickback may work with external service providers to improve the functionality of our platform, including customer service solutions, email marketing platforms, or task automation tools. These service providers are carefully vetted and must adhere to strict data protection and security standards.

5. Analytics and Behavioral Tracking

Kickback uses third-party services like Google Analytics, HubSpot, and other marketing tools to track user behavior, analyze data, and improve the user experience. We rely on these services to better understand how users interact with the platform, how our services are performing, and to make informed business decisions. Below is a detailed explanation of how we use analytics and behavioral tracking to enhance Kickback’s functionality while respecting user privacy.

5.1 Google Analytics

Kickback uses Google Analytics, a web and app analytics service, to monitor and report on user interactions with the platform. Google Analytics helps us understand key metrics, including how users navigate through the app, which features are most used, and how long users spend on specific pages or tasks.

Data Collected by Google Analytics:

Anonymous Usage Data:

Google Analytics collects anonymized data that does not directly identify users. This includes metrics like the number of page visits, session duration, bounce rates, and general usage patterns.

Device and Browser Information:

Google Analytics tracks technical information such as the type of device, browser version, operating system, screen resolution, and network provider. This helps us optimize the platform’s performance across different devices.

Geolocation Data:

Google Analytics may track general geolocation data, such as the user’s country or region, but it does not collect precise location data. This helps us assess usage by geographic region, improve the app's localization, and tailor features to specific markets.

Use of Data from Google Analytics:

Performance Monitoring:

Google Analytics data is used to monitor the app's performance and identify any technical issues or bottlenecks in functionality. For example, if certain pages or features experience high drop-off rates, we can prioritize improving those areas.

Feature Optimization:

Analyzing user behavior helps us understand how different features of the platform are being used. This allows us to focus on optimizing frequently used features while reconsidering or redesigning underutilized ones.

Business Decisions:

We use Google Analytics data to inform strategic business decisions, such as which features to develop next, how to improve user retention, and where to allocate resources for development or marketing efforts.

Data Retention and Control:

Google Analytics anonymizes the data it collects, ensuring no personally identifiable information (PII) is associated with the data. Users can opt out of Google Analytics tracking by adjusting their browser or app settings, or by installing the Google Analytics Opt-out Browser Add-on.

5.2 HubSpot (Customer Relationship Management)

Kickback also uses HubSpot, a Customer Relationship Management (CRM) platform, for analytics, marketing automation, and managing customer interactions. HubSpot helps us track how users engage with emails, marketing campaigns, and customer support features.

Data Collected by HubSpot:

Engagement Data:

HubSpot tracks user engagement with our marketing campaigns, including how many users open our emails, click on links, or engage with marketing content.

Communication Logs:

HubSpot records customer support interactions, which helps us improve customer service and provide better support.

Use of Data from HubSpot:

Email Marketing:

We use HubSpot to send targeted email campaigns to users. HubSpot tracks which users open emails, click links, or unsubscribe, allowing us to refine our email content and improve engagement.

Marketing Analytics:

HubSpot helps us track the effectiveness of marketing campaigns and user interactions with our promotional content. This data allows us to segment our audience and deliver personalized marketing content based on user interests and behavior on the platform.

Customer Support:

HubSpot’s analytics help us monitor and respond to customer inquiries more efficiently by logging interactions and tracking response times. This ensures that user queries are resolved promptly.

5.3 Behavioral Tracking

Kickback uses behavioral tracking to understand how users interact with the app in real-time. This helps us create a seamless and intuitive user experience, ensure that tasks are easy to post and apply for, and personalize the platform according to user preferences.

Behavioral Data Collected:

Task Interactions:

We track how users interact with tasks posted on the platform. This includes data on how frequently tasks are viewed, applied for, and completed. This allows us to improve task visibility and match homeowners with taskers more efficiently.

User Activity:

Behavioral tracking tools record general usage patterns within the app, such as the frequency of logins, time spent on various sections, and interactions with features like search filters, reviews, or chat functionality.

In-App Actions:

We also track key actions such as task posting, profile editing, and payment processing to ensure the app runs smoothly and to identify areas for enhancement.

Use of Behavioral Data:

User Experience Optimization:

Behavioral tracking helps us detect potential issues with the user interface, identify points of friction, and streamline the app’s usability. For instance, if users frequently abandon tasks mid-posting, we can investigate why and simplify the task creation process.

Personalized Recommendations:

Based on user behavior, we may recommend relevant tasks, taskers, or promotions to enhance the user experience. For example, a homeowner who frequently posts handyman tasks might receive suggestions for trusted taskers in their area.

Fraud Detection and Security:

Behavioral tracking also helps us identify suspicious behavior that may indicate fraud, such as repeated failed login attempts or unusual payment activity. This enables us to act quickly to protect users and the platform.

5.4 Targeted Advertising

We use behavioral data to power targeted advertising on Kickback. By analyzing user preferences and interactions, we can display relevant ads to users, ensuring that our promotional content is aligned with their interests. This is particularly useful for taskers looking for relevant tasks or for homeowners seeking specific services.

Data Used for Targeted Ads:

User Preferences and Interests:

Based on tasks completed, services viewed, and interactions within the app, we may tailor ads or promotions to users. For example, a user who frequently hires painters may see promotions related to home renovation services.

Ad Delivery Platforms:

Kickback uses platforms like Google Ads and Meta (Facebook) to deliver targeted ads to users outside of the app. These platforms use anonymized data collected from Kickback to ensure ads are shown to relevant audiences.

Opting Out of Targeted Ads:

Users can opt out of receiving targeted ads or personalized promotions by adjusting their ad preferences in the app settings. Additionally, users can limit tracking by adjusting their device settings or installing browser extensions designed to block ad trackers.

5.5 Data Security and Retention

Kickback takes data security seriously and uses a combination of encryption, access controls, and secure storage to ensure that user data is protected during analysis and tracking. All data collected through analytics and behavioral tracking is stored on Google Cloud and Firebase servers, which comply with industry security standards.

Data Retention Periods:

We retain analytics and behavioral data for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Users can request the deletion of their behavioral data by contacting our support team at support@KickbackServices.com.

Data Minimization:

We only collect and store the data necessary to achieve specific business objectives, and we anonymize data wherever possible to reduce the risk of unauthorized access.

6. User Rights and Data Control

Kickback is committed to respecting and protecting user privacy by providing clear and easy-to-use tools that allow users to manage their personal data. This section outlines users' rights regarding their personal information, including the ability to access, edit, delete, and control how their data is used.

6.1 Right to Access and Manage Data

Users of Kickback have the right to access their personal information and manage their profiles directly through the app. The data that users can access and control includes but is not limited to:

Personal Details:

Users can view and edit their first and last names, email addresses, phone numbers, and profile bios within their account settings.

Profile Picture:

Users can upload, change, or remove their profile pictures at any time. This image is visible to other users, including homeowners and taskers, to enhance trust and profile visibility.

Tasker or Homeowner Information:

Depending on whether the user is a tasker or homeowner, they can manage task preferences, reviews, and any public-facing information related to their task activities or requests.

Users can update these details in the Account Settings section of the app. Changes are reflected immediately, and users are encouraged to keep their information up-to-date to ensure smooth platform operations and accurate matches between taskers and homeowners.

6.2 Right to Delete Data

Kickback provides users with the right to delete their personal information and accounts at any time. Users have two main methods for data deletion:

In-App Deletion:

Users can permanently delete their Kickback account directly from the app by navigating to the Account Settings section and selecting the Delete Account option. This action triggers the deletion of all personal data stored within Kickback’s systems, including profile information, tasks, reviews, and any associated content.

Immediate Data Deletion:

Once a user selects "Delete Account," their profile, tasks, and all related information are removed from the platform. This process includes removing personal data from Firebase, Stripe, and other related databases where the data may be stored.

Partial Retention for Legal Purposes:

In certain cases, some data (such as transaction records) may be retained temporarily for legal, tax, or compliance purposes. This is in line with regulatory requirements, and users will be informed if any specific data must be retained before full deletion.

Support Request for Deletion:

Users may also contact Kickback support at support@KickbackServices.com to request the deletion of their data. This method may be preferred if users experience issues with the in-app deletion process or require more specific assistance.

Response Timeframe:

Requests for data deletion made through support will be handled within a reasonable timeframe, typically within 30 days, although it may vary depending on the complexity of the request and legal requirements.

6.3 Right to Edit Data

Users have the right to edit their personal information at any time. This includes but is not limited to:

Full Name:

Users can change the first and last names associated with their account.

Bio and Profile Picture:

Taskers and homeowners can edit their bios and change their profile pictures to reflect updates to their skills, services, or personal branding.

Contact Information:

Users can update their email address, phone number, and other contact details in case of changes.

Account Preferences:

Users can modify their account preferences, including notifications, task categories, and other profile settings that influence how they interact with the platform.

Users can make these edits via the Profile Settings section in the app.

6.4 Right to Control Marketing and Promotional Content

Kickback sends marketing communications to users, including promotional emails, special offers, and updates about the platform. However, users have full control over whether or not they receive these communications and can opt out at any time.

Opting Out of Emails:

Users can opt out of receiving marketing emails by clicking the “Unsubscribe” button included at the bottom of any promotional email sent by Kickback. Once a user opts out, they will no longer receive marketing-related communications, although they may still receive important operational or service-related emails (e.g., payment confirmations, security alerts).

Email Preferences in Settings:

Alternatively, users can manage their email preferences directly in the app. By going to the Notifications Settings section, they can control which types of emails they wish to receive, such as task reminders, marketing promotions, or platform updates.

Opting Out of Targeted Advertising:

Users have the option to opt out of receiving personalized ads through Kickback. While some advertisements are necessary for the platform’s operation, users can limit the personalization of these ads by adjusting their preferences in the app or their device settings. Additionally, users can utilize browser extensions or device tools that block ad tracking services from companies like Google and Meta.

6.5 Data Portability

Users have the right to request a copy of their personal data that Kickback holds. This is known as data portability and allows users to obtain their information in a commonly used and machine-readable format.

Requesting Data Portability:

Users who wish to request a copy of their data can contact Kickback support at support@KickbackServices.com. Kickback will provide a downloadable file containing the requested information in a reasonable timeframe (usually within 30 days), depending on the complexity and volume of the request.

Exporting Data:

Users can request that their data be exported in formats such as CSV or JSON to facilitate easy portability. Kickback will ensure the export process adheres to privacy and security standards to prevent unauthorized access during the transfer.

6.6 Compliance with Data Protection Regulations

Kickback complies with various data protection regulations, including those set forth by the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR), where applicable.

GDPR Compliance (EU Users):

If Kickback ever operates in the European Union or with EU-based users, GDPR regulations will apply. These regulations give users additional rights, such as the right to object to data processing or request restrictions on the use of their data.

CCPA Compliance (California Residents):

For California residents, Kickback adheres to the CCPA, which grants specific rights regarding the collection and use of personal information. This includes the right to know what personal information is being collected, the right to request the deletion of personal information, and the right to opt out of the sale of personal information (though Kickback does not sell user data).

6.7 Transparency and User Communication

Kickback is committed to providing clear and transparent communication regarding users’ rights. If any changes are made to how user data is handled, or if new tools for data control are introduced, Kickback will notify users via email or app notifications. Users can direct any inquiries regarding their rights or data control options to support@KickbackServices.com.

7. Children’s Privacy

Kickback is committed to protecting the privacy of children and complying with all relevant laws and regulations concerning the protection of minors. Kickback’s platform is not designed for or intended to be used by children under the age of 18, and we take strict measures to prevent minors from accessing the platform. This section outlines the steps we take to ensure compliance with child privacy laws, how we verify user age, and the consequences for false information regarding age.

7.1 Age Restrictions

Kickback strictly prohibits the use of its platform by individuals under the age of 18. Both homeowners (who post tasks) and taskers (who apply for tasks) must meet this minimum age requirement. The platform is designed for adults to exchange services safely and legally, and ensuring that all users are over the age of 18 is crucial for legal compliance and user protection.

18+ Requirement for Homeowners and Taskers:

All users must be at least 18 years old to create an account, apply for tasks, or post tasks on Kickback.

7.2 Age Verification Measures

To enforce the minimum age requirement and prevent minors from accessing the platform, Kickback employs several age verification methods during the account registration process. These verification measures include:

Driver’s License Verification:

Taskers must provide a valid driver’s license during the sign-up process. This document is used not only for identity verification but also to confirm the user’s age. The platform cross-checks the birthdate on the driver’s license to ensure that only users over the age of 18 are allowed to register.

Social Security Number (SSN) Verification (via Stripe):

For payment and legal compliance purposes, Kickback collects Social Security Numbers (SSNs) from taskers via Stripe. This ensures that users are of legal age and that they meet all requirements for working as independent contractors.

Background Checks:

For certain tasks or higher-profile positions, Kickback may conduct background checks. As part of this process, the user’s date of birth is also verified to confirm that they are legally eligible to work and meet the platform’s age requirements.

7.3 False Information and Consequences

Providing false information, including false age or identity details, is a violation of Kickback’s Terms of Service. If any user is found to have provided incorrect information about their age or identity, the following actions will be taken:

Immediate Account Suspension or Deletion:

If Kickback determines that a user has lied about their age or identity, the user’s account will be suspended or deleted immediately.

Reporting to Authorities:

In cases where a minor is found to be using the platform under false pretenses, Kickback reserves the right to report the incident to the appropriate legal authorities to ensure the safety of all users on the platform.

7.4 Parental Control and Reporting of Minors

If a parent or legal guardian discovers that their child under the age of 18 has registered for Kickback or used the platform without permission, they should contact Kickback immediately at support@KickbackServices.com. Upon verification, Kickback will:

Delete the Minor’s Account:

The child’s account will be promptly deleted, and any personal information collected will be removed from our systems.

Block Future Registration:

Kickback will ensure that the minor is prevented from re-registering in the future by flagging the associated information.

7.5 Compliance with COPPA (Children’s Online Privacy Protection Act)

Kickback complies with the Children’s Online Privacy Protection Act (COPPA), which regulates the online collection of personal information from children under the age of 13. While Kickback’s platform is not intended for children, if we learn that we have inadvertently collected personal information from a child under the age of 13, we will take the following steps:

Immediate Deletion of Information:

Any personal information collected from a child under 13 will be deleted immediately from Kickback’s databases and any affiliated systems.

Notification to Parents/Guardians:

Kickback will notify the child’s parent or legal guardian regarding the collection of personal data and the steps taken to ensure it is deleted.

7.6 Third-Party Services and Child Privacy

Kickback integrates with third-party services, such as Stripe for payment processing and Google Cloud and Firebase for data storage. These third parties also have privacy policies in place, and Kickback ensures that they do not collect data from minors.

Stripe Age Verification:

As part of their onboarding process for taskers, Stripe verifies the legal age of users, adding an extra layer of protection to prevent underage use.

7.7 Updates to Children’s Privacy Policy

Kickback is committed to ongoing compliance with privacy regulations related to children’s protection and may update this policy as necessary to reflect changes in legislation or platform operations. If any changes are made to this policy, particularly in relation to children’s privacy, affected users will be notified via email or app notification.

7.8 Contact for Children’s Privacy Concerns

If parents, legal guardians, or other concerned individuals have questions about Kickback’s practices regarding children’s privacy or believe that a child may have provided personal information, they are encouraged to contact Kickback at support@KickbackServices.com.

8. Data Storage and Security

At Kickback, protecting the personal information of our users is a top priority. We implement industry-standard security measures and utilize reliable third-party service providers to ensure that all data is securely stored and protected from unauthorized access, breaches, or misuse. This section outlines how Kickback handles data storage, the security protocols in place, and how long we retain personal information.

8.1 Data Storage Locations

Kickback uses trusted third-party cloud service providers to store and manage user data securely. The following platforms are utilized for data storage:

Google Cloud Platform:

Kickback operates its data infrastructure on Google Cloud, a leading cloud service provider known for its security and reliability. Google Cloud ensures that Kickback benefits from high levels of data encryption, access control, and data integrity across its services.

Firebase:

Firebase, part of Google Cloud, is used for real-time database and storage management. Firebase offers integrated security features, such as end-to-end encryption and user authentication, which protect personal information like usernames, profile pictures, task details, and communication logs.

Stripe:

For payment processing, Kickback partners with Stripe. Stripe securely stores users' financial data, including payment information, and ensures compliance with global financial regulations like PCI DSS (Payment Card Industry Data Security Standard). Kickback does not store any sensitive financial data directly; all such data is processed and handled through Stripe’s secure platform.

8.2 Security Measures

Kickback takes robust steps to safeguard user data and prevent unauthorized access or breaches. The platform employs several layers of security protocols, which include:

Encryption in Transit and at Rest:

Kickback ensures that all user data is encrypted both in transit and at rest. This means that sensitive information, such as names, payment details, and communications, is protected from unauthorized access while being transferred between users and our servers, as well as when it is stored on our systems.

Authentication and Access Control:

To protect user accounts, Kickback requires strong password policies, including the use of complex passwords. Two-factor authentication (2FA) may also be implemented in the future for added security. Access to user data within Kickback’s systems is restricted to authorized personnel only and is controlled by secure authentication protocols.

Flutterflow Security Systems:

As Kickback is built on Flutterflow, the platform inherits its security protocols. Flutterflow ensures that applications are built with security best practices, including role-based access control, secure data handling, and the use of secure APIs for data exchange.

Firebase Security Protocols:

Firebase provides additional security measures, including real-time database monitoring, end-to-end encryption, and authentication services that prevent unauthorized access to user data. Firebase also offers continuous security updates and vulnerability patching.

Regular Security Audits:

Kickback may conduct regular security audits and vulnerability assessments to identify potential risks and mitigate them before they can affect the platform. This includes penetration testing and code reviews to ensure that no vulnerabilities exist that could be exploited by attackers.

8.3 Data Retention Policy

Kickback retains user data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. This section explains how long we keep different types of data:

Account and Profile Information:

Personal information such as names, email addresses, profile photos, and task-related data is stored in Kickback’s systems for the duration of the user’s account activity. Once a user deletes their account or requests deletion, this information is permanently removed from Kickback’s databases.

Task History and Transaction Records:

Certain records, such as task history and payment transactions, may be retained for a limited time after account deletion. This retention is necessary for legal, accounting, or regulatory purposes, such as fulfilling tax obligations or complying with audit requirements.

Communication Logs:

Messages exchanged between users via the platform may be retained for security and legal reasons, particularly in cases where illegal activities, harassment, or disputes have been reported. Communication logs are stored securely and may be shared with law enforcement if required (see Section 9 for more details).

Backup and Recovery:

Kickback uses automated backup systems to ensure data recovery in case of unexpected outages or data corruption. These backups are encrypted and securely stored. Backup data is kept for a short period before being permanently deleted.

Deletion Requests:

Users can request the deletion of their data at any time by contacting Kickback at support@KickbackServices.com or by using the “Delete Account” feature within the app. Upon receiving a deletion request, we will remove all associated data within a reasonable timeframe (typically within 30 days), except for data that must be retained for legal or regulatory reasons.

8.4 Data Breach Protocol

In the unlikely event of a data breach, Kickback has an established protocol for addressing and managing the situation. This includes:

Immediate Containment and Mitigation:

Upon discovering a breach, Kickback will take immediate steps to contain the breach and prevent further unauthorized access. This may involve shutting down affected systems, isolating compromised data, and notifying relevant service providers.

User Notification:

If user data has been compromised in a breach, Kickback will notify affected users as soon as possible, in accordance with applicable laws and regulations. Users will receive information about the nature of the breach, what data was affected, and the steps being taken to mitigate the risk of further issues.

Reporting to Authorities:

Kickback will report the breach to the appropriate regulatory authorities, such as the Federal Trade Commission (FTC) or other relevant agencies, depending on the jurisdiction. This ensures compliance with data protection laws, including the General Data Protection Regulation (GDPR) if applicable.

8.5 Compliance with Data Security Regulations

Kickback strives to comply with all applicable data security laws and regulations to protect user information. Some of the key regulations that influence our security protocols include:

General Data Protection Regulation (GDPR):

For users located in the European Union (if applicable), Kickback complies with GDPR requirements, ensuring that personal data is handled in a manner that prioritizes privacy and security. GDPR mandates that data is processed lawfully, securely, and transparently, with special attention given to users' rights to access, modify, or delete their data.

California Consumer Privacy Act (CCPA):

For California residents, Kickback adheres to CCPA guidelines, ensuring that users have the right to know what personal data is being collected, how it is used, and with whom it is shared. Users also have the right to request data deletion and to opt-out of the sale of their personal data (although Kickback does not sell data).

Payment Card Industry Data Security Standard (PCI DSS):

Since Kickback partners with Stripe for payment processing, all financial transactions are subject to the stringent security protocols outlined in the PCI DSS. This ensures that credit card information is handled securely and that all payment-related data is protected from fraud and unauthorized access.

8.6 Continuous Improvement

Kickback is committed to the continuous improvement of its security systems and regularly reviews its data protection measures. As new security technologies and best practices emerge, Kickback will update its infrastructure and protocols to stay ahead of potential threats.

Users will be notified of significant changes to Kickback’s data storage or security policies through email or in-app notifications.

9. Law Enforcement and Legal Requests

Kickback is committed to cooperating with law enforcement and regulatory authorities when required by law, and we prioritize the safety of our users and the integrity of our platform. This section explains how Kickback handles requests for user information from law enforcement or other legal authorities, the conditions under which we disclose data, and the steps we take to protect user privacy in the process.

9.1 Cooperation with Law Enforcement

In certain circumstances, Kickback may share user information with law enforcement agencies or regulatory authorities. This will only occur when required by applicable law, regulation, legal process, or a valid legal request. Examples include:

Court Orders, Subpoenas, and Warrants:

Kickback will disclose personal information in response to valid legal processes, such as court orders, subpoenas, or search warrants. These legal documents must be issued by a court or law enforcement authority with appropriate jurisdiction over Kickback or its users.

Investigations into Illegal Activity:

If Kickback becomes aware of illegal activity conducted through the platform (e.g., fraud, harassment, or other criminal behavior), we may voluntarily cooperate with law enforcement to prevent harm and assist in investigations. This may include providing relevant user data, such as communication logs, payment details, or profile information.

9.2 Conditions for Data Disclosure

Kickback takes user privacy seriously and will only disclose personal information to law enforcement or other third parties when legally required to do so. The following conditions must be met for Kickback to share user data:

Legal Obligation:

Kickback will only share personal information when required by law or when we believe in good faith that such disclosure is necessary to comply with a legal obligation. This includes requests from law enforcement, government agencies, or regulatory bodies.

Protection of User Safety:

Kickback may disclose user data if we believe it is necessary to prevent physical harm, illegal activity, or fraud. For example, if a user is reported for harassment or poses a danger to others, we may share relevant information to assist law enforcement in taking action.

Consent from the User:

In certain cases, Kickback may seek direct consent from a user before disclosing their personal information to law enforcement. This would typically apply when a user reports a crime or requests assistance from authorities themselves.

9.3 Information Shared with Law Enforcement

The type of information Kickback may provide to law enforcement or legal authorities includes, but is not limited to, the following:

Account Information:

This includes personal information such as the user’s full name, profile photo, email address, phone number, and linked social media accounts. It may also include the user’s history on the platform, such as task requests, reviews, and communication logs.

Financial Information:

Kickback may provide law enforcement with information related to the user’s financial transactions on the platform, including payment details, transaction history, and associated payment accounts (which are managed by Stripe).

Communication Logs:

If requested, Kickback may share logs of direct messages or communication between users on the platform. This is typically done in cases where harassment, fraud, or other illegal activity is suspected.

Location Information:

Location data, including IP addresses, may be shared if it is relevant to an investigation. This could help law enforcement track the geographic location of a user suspected of engaging in illegal activities.

9.4 User Notification of Disclosure

Kickback’s policy is to notify users when their data is requested by law enforcement or legal authorities. However, there are some exceptions to this policy:

Prohibition of Notification by Law:

In cases where a legal request (e.g., a court order, subpoena, or warrant) includes a non-disclosure clause, Kickback may be legally prohibited from notifying the user about the data request.

Emergencies or Imminent Threats:

If Kickback believes that notifying the user could result in harm or interfere with an ongoing investigation, we may choose not to notify the user until it is safe to do so.

In cases where user notification is permitted, Kickback will send an email or an in-app notification detailing the type of information requested and which legal authority made the request.

9.5 Data Retention for Legal Purposes

Kickback retains user data for a specific period, as outlined in our Data Retention Policy (see Section 8). In the event of an ongoing legal investigation or dispute, Kickback may retain relevant data for a longer period if required by law or legal process. This ensures that the necessary information is available for law enforcement, should it be needed for investigation or prosecution.

9.6 Responding to User Reports of Illegal Activity

Kickback encourages users to report any illegal activity, harassment, or safety concerns that occur on the platform. Users can report such incidents through the app or by contacting our support team at support@KickbackServices.com. Kickback will investigate these reports and may take the following actions:

Account Suspension or Termination:

If a user is found to have engaged in illegal activity or violated Kickback’s Terms of Service, their account may be suspended or permanently banned from the platform.

Involvement of Law Enforcement:

If the reported activity involves potential criminal conduct, Kickback may share the relevant data with law enforcement authorities. This ensures that appropriate legal action can be taken against the offending user.

Providing Evidence to Authorities:

Kickback may preserve evidence of the illegal activity, including communication logs, transaction records, and profile information, to assist law enforcement in their investigation or prosecution of the case.

9.7 Compliance with Applicable Laws and Jurisdictions

Kickback operates within the legal frameworks of the jurisdictions where it does business. Depending on the location of the user or the nature of the legal request, Kickback may be subject to different laws regarding data disclosure and law enforcement cooperation. Some of the relevant laws include:

United States Law:

As Kickback is based in the United States, it primarily adheres to U.S. laws regarding law enforcement requests, including the Stored Communications Act (SCA) and other data privacy laws.

State-Specific Laws:

In addition to federal laws, Kickback may also be required to comply with state-specific regulations, such as California’s Consumer Privacy Act (CCPA) or other local data protection laws.

International Requests:

If law enforcement authorities from outside the U.S. request user data, Kickback will assess the request’s validity and legality based on U.S. law and any applicable international treaties. In some cases, cross-border data sharing agreements may allow Kickback to cooperate with foreign authorities.

9.8 Protecting User Privacy During Legal Requests

While Kickback cooperates with legal authorities when necessary, we are also committed to protecting the privacy and rights of our users. Kickback will take the following steps to safeguard user privacy during the legal request process:

Minimal Data Disclosure:

Kickback will only disclose the minimum amount of data necessary to comply with the legal request. We will not share more information than is specifically required by law or court order.

Review of Requests:

Kickback will review all legal requests for user data carefully. We will challenge any requests that we believe are overly broad, unreasonable, or not supported by proper legal authority.

Legal Counsel Consultation:

Kickback consults with legal counsel to ensure that any disclosures made are in compliance with applicable laws and that user rights are fully considered before sharing any personal information.

10. Updates to the Privacy Policy

At Kickback, we are committed to ensuring the protection of our users’ personal information and keeping up-to-date with changes in legal requirements, industry standards, and technological advancements. As a result, our Privacy Policy may evolve over time. This section explains how we notify users of changes, the process for obtaining consent to updated terms, and the actions users may take if they do not agree with the modifications.

10.1 Periodic Updates

Kickback reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, the law, or the features of our platform. This may include revisions due to:

Legal or Regulatory Requirements:

As new laws or data protection regulations emerge (such as changes to the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), or any other relevant law), Kickback will update the Privacy Policy to ensure compliance.

Service and Feature Enhancements:

Updates may also occur when we introduce new services, features, or functionalities on the Kickback platform that require the collection or handling of different types of data.

Security and Operational Improvements:

If Kickback implements new security protocols or adjusts how we store and protect user data, this will also be reflected in our Privacy Policy to ensure transparency.

10.2 User Notification of Changes

Whenever there is a significant change to the Privacy Policy, Kickback will notify users through appropriate channels to ensure they are aware of the new terms and can take action if necessary. Notification methods may include:

Email Notifications:

Users will receive an email outlining the updated sections of the Privacy Policy, along with a link to review the full updated document. The email will highlight the most significant changes and provide instructions on how users can manage their accounts in response to the update.

In-App Notifications:

For users actively using the platform, we will display an in-app notification informing them of the update. This message will provide a summary of the changes and link to the updated Privacy Policy for detailed review.

Website Notifications:

The Kickback website will also include a notice about the Privacy Policy update, with the updated version accessible through the site’s footer or privacy-related sections.

10.3 Consent to Changes

When updates to the Privacy Policy involve significant changes to how we collect, use, or share personal data, Kickback may require users to provide consent to the new terms. This process ensures that users are fully aware of how their information is being handled under the updated policy.

Active Consent for Significant Changes:

For major changes, such as those that introduce new categories of data collection or modify how user information is shared with third parties, Kickback will request active consent from users. This may involve:

A prompt in the app asking users to agree to the updated Privacy Policy before continuing to use the platform.

An email requiring users to review and accept the new terms by clicking a confirmation link.

Continued Use as Implied Consent:

For minor updates or clarifications, continued use of the Kickback platform after receiving notification of the policy update will be considered acceptance of the new terms. Users who do not agree with the changes will have the option to delete their account or contact support to request account closure.

10.4 User Options if They Do Not Agree

If a user does not agree with any updates made to the Privacy Policy, they have the right to stop using Kickback and delete their account. The process for opting out of future use includes:

Account Deletion:

Users who wish to terminate their use of Kickback due to policy changes can delete their account through the app’s settings. This will result in the removal of their personal data as described in the Data Retention section (see Section 8).

Support Assistance:

Users can also contact support@KickbackServices.com for assistance with deleting their account or if they have any questions or concerns about the updated Privacy Policy.

10.5 Effective Date of Changes

All updates to the Privacy Policy will take effect on a specified date, which will be clearly communicated to users. Typically, Kickback will provide a notice period (e.g., 30 days) before the changes go into effect, giving users sufficient time to review and respond to the updates.

Retroactive Application:

Any changes to the Privacy Policy will not be applied retroactively. This means that data collected prior to the effective date of the updated policy will continue to be governed by the Privacy Policy in effect at the time of collection, unless otherwise notified.

10.6 User Feedback on Updates

Kickback values user feedback regarding changes to the Privacy Policy. Users are encouraged to review the updates and contact Kickback with any concerns, suggestions, or questions. Feedback can be submitted by emailing support@KickbackServices.com.