Privacy Policy

Last updated: September 15, 2026

This Privacy Policy explains how Trash2Cash, LLC ("Trash2Cash," "we," "us," or "our") collects, uses, discloses, retains, and protects information when you use our mobile application, website, discount marketplace, Wallet passes, card-linked features, and related services (collectively, the "Service"). It applies to users, prospective users, and interactions with participating merchants through the Service.

1. Information we collect

Account information

We may collect your name, username, email address, phone number, profile image, account credentials, account creation date, and communication preferences.

Cleanup submissions and user content

We collect photos you submit, submission timestamps, verification results, associated point activity, and related support information. Photos may contain metadata or background details captured by your device.

Location information

With your permission, we may collect precise or approximate device location to show nearby businesses, verify eligibility, support cleanup submissions, select relevant active rewards, and reduce fraud. Depending on your device settings and enabled features, location access may occur while you use the app or in the background for location-aware Wallet functionality.

Rewards and activity information

We collect point balances, point history, viewed and activated offers, claims, redemptions, merchant locations, Wallet-pass activity, reward status, expiration data, and communications relating to rewards.

Card-linked information

If you voluntarily enroll a payment card for card-linked rewards, Fidel API collects and tokenizes the card information through its secure interface. Trash2Cash does not receive or store your complete card number or CVV. We may receive and store a provider card identifier, card network, last four digits, enrollment status, and consent-related metadata.

For enrolled cards, we may receive transaction information from Fidel API for purchases at participating merchant locations. This may include the merchant and location, transaction amount and currency, date and time, authorization and clearing status, refund or reversal information, transaction identifier, card-present indicator, and the provider card identifier used to associate the event with your account.

Financial accounts connected through Plaid

We are developing an optional account-connected rewards feature using Plaid Inc. ("Plaid"). When this feature is available and you choose to connect an account through Plaid Link, Plaid connects to your selected financial institution with your authorization. Eligible accounts include credit-card accounts and checking accounts used for debit-card purchases. Connecting an account does not authorize Trash2Cash to withdraw money from that account.

Through Plaid, we may receive financial institution identifiers, account identifiers, account names, types and masked account numbers, connection status, and transaction information such as merchant names, purchase amounts, currencies, dates, available location details, and pending or posted status. Transaction data may include historical purchases and purchases unrelated to participating merchants; we process it to identify transactions relevant to activated offers. We store connection information and matched reward transaction records to operate the rewards service. The current integration does not persist the full unrelated transaction feed in our application database.

Trash2Cash does not receive your bank login password through this integration. We receive a provider access token used to retrieve authorized account data. Plaid also processes information under its own End User Privacy Policy. The information available depends on your institution, selected accounts, and permissions.

Device, log, and communications information

We may collect device type, operating system, app version, IP address, push-notification token, crash and diagnostic information, security logs, support correspondence, and interactions with notifications or app features.

2. How we use information

We use information to:

• create and secure accounts;
• operate and improve cleanup verification and the rewards marketplace;
• show nearby participating merchants and location-relevant rewards;
• calculate, issue, reconcile, reverse, and support points and rewards;
• determine whether card or connected-account transactions qualify for activated offers;
• detect fraud, duplicate activity, abuse, and technical problems;
• send service, reward, security, and support communications;
• measure program performance and provide participating merchants with appropriate reporting;
• comply with law and enforce our agreements; and
• develop new features with information that is aggregated or de-identified where practical.

3. Consent and control over financial connections

Card linking is optional and requires affirmative consent. By enrolling a card, you authorize Fidel API and participating card networks to monitor eligible transactions at participating merchants and provide relevant transaction information to Trash2Cash to administer rewards. You may unlink a card in the Service or contact us. Unlinking stops future monitoring through the Trash2Cash program after the request is processed, but we may retain prior records as described below.

For the planned Plaid feature, you choose whether to proceed through Plaid Link and authorize access to selected financial accounts. The connection flow presents the requested access and applicable consent disclosures. We use the authorized data to identify qualifying purchases and calculate, reconcile, and support cashback. You can cancel the connection flow without connecting an account.

Once connected, you may request disconnection through the Service or by emailing partners@trash2cash.us. You can also manage supported Plaid connections through Plaid Portal or your financial institution's controls. Disconnection prevents future retrieval through that connection once processed. Disconnecting an account and requesting deletion of previously collected information are separate actions; contact us to request both. Disconnection may prevent us from verifying future purchases or issuing associated cashback.

4. How we disclose information

We may disclose information to:

• Service providers. Vendors that provide card linking, cloud hosting, storage, authentication, analytics, mapping, notifications, email, fraud prevention, customer support, and payment or billing services. This includes Fidel API for optional card enrollment and transaction monitoring, Plaid for the planned financial-account connection feature, and Stripe for payment and funding features.
• Participating merchants. Information reasonably necessary to validate, support, reconcile, and report their rewards. We do not provide merchants with your complete card number.
• Legal and safety recipients. Government authorities, courts, advisers, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud, or enforce agreements.
• Business transaction recipients. Parties involved in a financing, merger, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate safeguards.
• At your direction. Other parties when you request or consent to the disclosure.

We do not sell personal information for money. We do not currently share personal information for cross-context behavioral advertising.

5. Data retention

We retain information for as long as reasonably necessary to provide the Service, maintain reward and financial records, resolve disputes, prevent fraud, comply with legal obligations, and enforce agreements. Retention periods vary by data type. We may retain transaction, redemption, ledger, consent, and security records after account deletion when needed for reconciliation, legal compliance, or fraud prevention. When information is no longer needed, we take reasonable steps to delete or de-identify it.

You may request deletion of your account and associated personal information through the app or by emailing partners@trash2cash.us. Requests involving financial connections or retained reward records may require manual review. We may need to verify your identity, resolve outstanding rewards or disputes, and identify records that must be retained. Removing a connection does not by itself erase prior reward or accounting records. Service providers, including Plaid, may retain information under their own policies and applicable obligations; requests concerning information Plaid holds can also be directed to Plaid.

6. Security

We use administrative, technical, and organizational safeguards designed to protect information. Card enrollment is handled through Fidel API's tokenized SDK so complete card details are not exposed to Trash2Cash systems. Our Plaid integration encrypts provider access tokens before storing them and keeps those tokens on the server. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

7. Your choices and rights

• You may update certain account information through the app.
• You may change camera, photo, notification, and location permissions in device settings, although doing so may limit features.
• You may unlink an enrolled card or request disconnection of a financial account as described in Section 3.
• You may request access, correction, or deletion of personal information by contacting us. We may verify your identity and retain information when legally permitted or required.
• You may opt out of non-essential marketing communications using the method provided in the communication.

8. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Users under 18 must have permission from a parent or legal guardian. Contact us if you believe a child provided information without appropriate permission.

9. United States service

Trash2Cash is operated from the United States. Information may be processed in the United States and other locations where our service providers operate, subject to applicable safeguards and law.

10. Third-party links and services

The Service may link to third-party websites, applications, merchants, and Wallet services. Their privacy practices are governed by their own policies. We encourage you to review those policies.

11. Changes to this Privacy Policy

We may update this Privacy Policy as the Service or applicable requirements change. We will post the updated policy and provide additional notice when required by law.

12. Contact us

For privacy questions or requests, contact:

partners@trash2cash.us