Privacy Policy

Last updated: 6 November 2026 · Controller: PayoutBack (sole operator based in Israel), Michael Wallach 27, Kiryat Ono, Israel · Contact: getpayoutback@gmail.com

The short version

• Your CSV files are parsed in your browser. The free scanner sends nothing to our servers.
• If you save results, we store only the error-charge rows we found (order ID, dates, amounts, item/description, store name/ID), not the full file.
• We never ask for or store DoorDash / Uber Eats logins.
• We don't sell personal information or use it for advertising.

What we collect

• Account: email address, timezone, email preferences, business and location names.
• Charge data you save: parsed error-charge rows and the dispute outcomes you record. Order data can include item names; it should not include end-customer names or addresses (the exports we read don't contain them, and we discard columns we don't use).
• Billing: handled by our merchant of record, Lemon Squeezy, LLC. We receive subscription status, quantity and a customer ID, never your full card number.
• Technical: server logs (IP address, user agent) kept by our hosting provider for security, and essential cookies for sign-in. No advertising trackers.

How we use it

To provide the service (finding charges, reminders, summaries, outcome tracking), to bill you, to secure the service, and to answer support requests. Legal bases where GDPR applies: contract, legitimate interests (security, product improvement on aggregated data), and consent where required.

Sub-processors

• Vercel Inc. (hosting, USA)
• Supabase Inc. (database and authentication, currently hosted in Seoul)
• Resend (transactional email, USA)
• Lemon Squeezy, LLC (payments, merchant of record)

Retention and deletion

Charge data is kept while your account is active. You can delete all charge data in Settings at any time. To request account deletion, email getpayoutback@gmail.com; we delete within 30 days, except records we must keep for tax or legal reasons. If you cancel a paid plan but keep the account, your saved charge data stays until you delete it or ask us to delete the account.

Your rights

Depending on where you live (e.g. California CCPA/CPRA, other US state laws, Israel Privacy Protection Law, GDPR) you may have rights to access, correct, delete or export your data and to opt out of certain processing. Email getpayoutback@gmail.com. We will not discriminate against you for exercising them.

International transfers

The service is operated from Israel by PayoutBack. Hosting and email are provided in the United States; the database is currently hosted in Seoul. By using the service you understand that your information may be processed in those locations.

Security

Encryption in transit (TLS) and at rest (provider-managed), row-level security isolating each account's data, one-time sign-in links, and least-privilege access keys.

Children

PayoutBack is a business tool and not directed at children under 16.

Changes

We will notify you by email of material changes.

Contact

PayoutBack, sole operator based in Israel
Michael Wallach 27, Kiryat Ono, Israel
getpayoutback@gmail.com